This term describes the process of intercepting and decrypting TLS-encrypted internet traffic to analyze its contents.

Print Blocking and Clipboard Privacy Controls are examples of which concept?

What is the acronym for the 3-digt security code on the back of a Master Card credit card?

This solution combines security orchestration, automation, and incident response.

Which tool helps to simplify identifying, analyzing, and responding to security threats, especially for events contained within log data?

If a technician gathers further details about a piece of threat intelligence to make that intel better, what is this called?

SOAR solutions use (blank) to automate routine tasks and ensure consistent procedures.

Augmented security data is also known as...

A new, extended capability or function of a program or application is known as a... (CHOOSE FOUR!)

Which protocol(s) do APIs mostly use to allow two or more security tools to share data seamlessly?

This term refers to a centralized platform or interface that allows security professionals to monitor and control various security components and tools from a single location.

What types of "requests" do APIs use to allow software applications to communicate with each other?

What is a Webhook?

Which control system architecture combines hardware and software to facilitate the centralized monitoring, control, and automation of industrial processes in real-time?

(Blank) represents a category of Operational Technology (OT) responsible for managing and controlling industrial processes and critical infrastructure. Hint: it manages processes that involve physical components and machinery.

SCADA, PLC, and ICS are all examples of which technology?

This term describes the effort taken to more specifically identify details about a device.

This term describes a cybersecurity practice that involves the examination of software or code without executing the application.

A software security analyst wants to see how a new application handles a large volume of random, unexpected, or malicious data input, in an effort to identify vulnerabilities in the source code. What is he/she conducting?

Which types of scanning methods consume more system resources on a target device, and may impact its performance? (Choose two)

Big Tom Callahan would like to identify and categorize all devices and equipment connected to his network. He plans on using this information to keep an accurate inventory of hardware assets, and would also like to use it to understand potential security vulnerabilities on them. What should he perform?

Which Vulnerability Report Format would be the best choice if Malik wants to provide a visually appealing, interactive presentation of newly discovered vulnerabilities?

This term describes a long-term solution for vulnerabilities that cannot be patched.

This type of Compliance Report is subject to government review and scrutiny.

This term defines the expected level of service in terms of vulnerability management. Monitoring and reporting on these helps to ensure that the organization's employees meet its security goals.

These are measurable values that help an organization gauge how well it is achieving its key business objectives.

During an investigation, an incident response team attempts to understand the source of an incident. Which of the following incident response activities describes this process?

What must a user have in order to decrypt a file?

Which process involves transforming ciphertext into plaintext using a key

What provides direction and focus, enabling organizations to achieve strategic goals and objectives?

A security administrator is deploying a DLP solution to prevent the exfiltration of different levels of sensitive customer data. Which of the following should the administrator do first?

Negative Nate sees a vulnerability with a CVSS Base Score of 6.7. What Risk Score range does this fall in?

This Configuration Management (CM) function helps track changes to software or hardware components over time, facilitating rollback to previous states if needed.

What is the name of a network protocol that secures web traffic via SSL/TLS encryption?

Which of the following is NOT a version of TLS?

Which of the following approaches would best support the goal of minimizing human engagement in routine cybersecurity operations?

During an investigation, an incident response team led by Larry attempts to understand the source of an incident. Which of the following incident response activities describes this process?

During the infamous Equifax data breach in 2017, it was revealed that a critical patch had not been applied to a vulnerable version of Apache Struts, allowing attackers to exploit the vulnerability. In the aftermath, Equifax implemented additional controls to monitor traffic to and from the servers hosting the vulnerable software. In this context, what kind of incident response activity is Equifax performing?

During a recent security incident, you, as an incident responder, documented each action and decision that took place, from the initial detection to final remediation. This detailed timeline could prove particularly useful for which part of the incident response reporting?