Naomi believes that an attacker has compromised a Windows workstation using a fileless malware package. What Windows scripting tool was most likely used to download and execute the malware?

Scott notices that one of the systems on his network contacted a number of systems via encrypted web traffic, downloaded a handful of files, and then uploaded a large amount of data to a remote system. What type of infection should he look for?

One of your systems has been infiltrated and a malicious actor has direct access. Which option would be the best to follow initially?

In a company users are now allowed to user mobile devices on the company network. A screen appears when users are connected to the company Wi-Fi, defining terms of use, and users have to click to acknowledge the agreement. The user is only allowed to connect to the network If he agrees to the terms by clicking Yes. This is an example of what?

What works as a neutral zone, separating public-facing servers from sensitive internal network resources?

Which of the following is not related to time-based restrictions? (opt any two)

a friend of yours on a social network sends you a direct message telling you about a scheme offering a $100 gift card if you are one of the first 25 to respond to a survey. Upon clicking the link, you realize a malware has infected your machine. Identify the two attack principles you think have contributed to the effectiveness of this attack? (opt any two)

When referencing the CIA Triad which component is related to data that is stored and transferred as intended and any modification is authorized?

Data types are extremely important when categorizing data and establishing a security plan. Which data type would be related to data that must follow specific legal requirements for storage and handling?

At a datacenter a user has been challenged by three different authentication methods as visible in the exhibit. Identify the option that BEST describes the multifactor authentication policy in use?

Risk management is a large part of blue team activities within the cybersecurity space. Which of the following is not one of the four Pillars of risk responses?

In the process of a server application under development, some errors are discovered to leave the application running in an unstable condition. One such error is a divide by zero error. The application should respond more appropriately to errors including generating error message when they appear. Which of the following would you implement?

About the validation process of vulnerability response and remediation, which step is not apart of this process?

Which Security Control Functional Type identifies attempted or successful intrusions?