When considering automation in security operations, which term refers to the long-term risks of choosing an expedient but limited solution instead of investing time and funds in a more comprehensive one?

Audits are regarded as a tool for current-state risk assessments mainly because:

Your organization has recently undergone a hacker attack. You have been tasked with preserving the data evidence. You must follow the appropriate eDiscovery process. You are currently engaged in the Preservation and Collection process. Which of the following guidelines should you follow?(Choose 3)

You are incorporating a perimeter network into a network redesign and are adding several new devices to enhance security. Which of these would NOT be best placed in the new perimeter network?

When calculating risks by using the quantitative method, what is the result of multiplying the asset values by the exposure factor (EF)?

What is the purpose of quantitative risk analysis?

What is the process of identifying IoT and other devices that are not part of the core infrastructure so that hackers cannot use them to compromise an organization's core network?

Which type of test relies heavily on automated scanning tools and reporting?

What is vishing?

Which of the following are accomplished through identity validation?(Choose 2)

You are tasked with choosing a mail gateway for your organization. Which of the following is a consideration for this deployment?

The business continuity team is interviewing users to gather information about business units and their functions. Which part of the business continuity plan includes this analysis?

Your company really needs to enhance email security to prevent spoofing. What should you implement?

What is the primary goal of buffer overflow attacks?

Which of these options simulates a disaster and allows you to check the thoroughness of your disaster recovery plan?

Which of the following are key phases in implementing security awareness practices?

While performing a penetration test, you encounter several issues that you plan to document in the final report. However, you need to ensure that management is immediately notified of any IoCs documented in the communication escalation path. Which of the following is MOST likely to result in the need for immediate communication to management?

Recently, while reviewing log data, you discover that a hacker has used a design flaw in an application to obtain unauthorized access to the application. Which type of attack has occurred?

Which of the following activities is associated with tracking the lifecycle of technology assets within the organization?

Which of the following network architecture concepts consists of a policy engine, a policy administrator, and a policy enforcement point?

Company management has discovered that systems administrators have made critical changes to operational policies and procedures without management’s consent or knowledge. To keep this from happening again, which change management component should be implemented?

Your organization needs to implement a system that logs changes to files. What category of solution should you research?

Which two options are threat vectors used against vulnerable software?

A large corporation wants to implement a solution to block access to malicious websites and prevent employees from accessing inappropriate content while browsing the internet. Which capability of agent-based web filters would be most appropriate?

Recently there was a DoS attack on one of the servers, which succeeded in taking the server down for three hours. You would like to deploy a solution that would allow you to detect a huge rush of traffic to a specific device and route it somewhere away from the device. What technique could you use?

Which vendor selection concern consists of thoroughly researching and investigating potential vendors to ensure they meet the security and compliance requirements you have established?

Which of the following types of guidance and training focuses on educating users about recognizing and responding to potential security threats in their environment?

Which component of effective security compliance involves regularly assessing and verifying adherence to security policies and regulations to identify and address gaps or deficiencies?

You need to incorporate SAML and SSO into a web application. Which of the following would you use?

As your organization's security administrator, you are reviewing the audit results to assess if your organization's security baselines are maintained. In which phase of the security management life cycle are you engaged?

Which message-based attack vector is the platform responsible for launching over 90% of all attacks?

You have asked your assistant to configure a firewall with the following access control list (ACL). access list outbound deny ip 0.0.0.0 0.0.0.0/0 port 23 access list outbound permit ip 192.168.5.6/32 0.0.0.0/0 port 23 access list outbound permit ip 0.0.0.0 0.0.0.0/0 Which of the following statements is true about the firewall configuration?

What will be the effect of these commands?

Which process allows you to deploy, configure, and manage data centers through scripts?

Using the NetFlow/IPFIX protocol, which of the following fields define a unique network flow?(Choose 2)

An accounting job role requires separation of duties to reduce the risk of fraud, with tasks spread across two employees. Due to a staffing shortage, you only have one person available to perform all of the tasks. You ask your business’s bank to start sending you weekly statements instead of monthly, and to create an automated email that will alert you if a withdrawal above a certain threshold is made. Which type or category of control did you implement? Choose the BEST answer.

Which of the following supply chain elements are threat vectors?(Choose all that apply)

Which of the following would most likely be the primary motivation for attacks conducted by organized crime?

Which of the following is an independent third party which provides validation services to assure that a digital certificate is genuine?

Data may be subject to the laws and regulations of the nation in which it is collected, not necessarily where it is stored. Which principle is being described?

Which of the following would determine if safeguards that have been installed were properly implemented, performing as expected and producing the appropriate results?

Which of the following is based on impersonating an executive in an organization, with the intent of convincing an employee to do something they shouldn’t?

Which statement is FALSE with respect to access control lists (ACLs)?

Your organization has decided to outsource its e-mail service. The company chosen for this purpose has provided a document that details the e-mail functions that will be provided for a specified period, along with guaranteed performance metrics. What is this document called?

You need data to validate what you believe to be the issue in your network investigation. Which of the following data sources would be the most beneficial in analyzing network traffic and identification of security incidents?

Which role and associated responsibility involves managing and overseeing the use of systems and data, ensuring compliance with security policies and regulations?

You are building a public-access Wi-Fi system for a new hotel. You want to require the users to accept a fair use policy before connecting to the Internet. Which of the following should you implement?

Recently, an attacker tricked a user into believing he was selecting a button to direct him to a legitimate web site, but that button actually took him to another site. Which type of attack occurred?

Which stage of incident response includes actions aimed at preventing further spread or damage of a security incident within the organization's network environment?

You need to provide your company with a report regarding potential security-related software flaws. You need to use standardized names so that a security analyst contractor can understand the report. Which SCAP component should you use?

You want to implement additional protection for your e-commerce server by installing a specific type of firewall. This firewall will sit between the web server and clients and will be placed in a screened subnet or perimeter network. Its primary purpose will be to protect the e-commerce apps running on the server. Which type of firewall should you choose?

Which of the following data protection concepts focuses on determining the physical location of a user or device prior to granting access to sensitive information?

Your company has deployed a firewall that includes two network interfaces. Which firewall architecture has been deployed?

Which term refers to the capability of automation and scripting to effectively streamline tasks and processes, allowing security teams to accomplish more with existing resources?

Your company underwent an attack that involved an attacker injecting a command to access the underlying file system. Which type of attack occurred?

Your company-provided Android devices are all under the control of a mobile device management (MDM) console. You want to use this console to prevent users from rooting their devices. How does this support security?

What is a physical barrier that acts as the first line of defense against an intruder?

Smart devices and Internet of Things (IoT) are growing rapidly. Which of these include embedded systems that are security risks?
(Choose all that apply)

Provisioning requests for the IT department have been backlogged for months. You are concerned that employees are using unauthorized cloud services to deploy VMs and store company data. Which of the following services can be used to bring this shadow IT back under the corporate security policy?

Which of the following security zones is sometimes known as a demilitarized zone (DMZ)?

You have discovered that data was injected into your database, thereby causing security issues. Which injection attack most likely occurred?

What are some disadvantages to using a cold site?(Choose all that apply)

Which concepts are associated with the Zero Trust control plane?(Choose 2)

You received a security bulletin stating that an accounting application widely used in your organization has a known vulnerability. The risk score for the vulnerability is low. What should you do?

Which of the following is not a cryptographic attack?

Which network architecture concept allows for dynamic reconfiguration of a network as a reaction to changes in volume, types of traffic, and security incidents?

Your company decides to implement a RAID-5 array on several file servers. Which feature is provided by this deployment?

Which process allows you to deploy, configure, and manage data centers through scripts?

As a security professional, you have been asked to advise an organization on which access control model to use. You decide that role-based access control (RBAC) is the best option for the organization. What are two advantages of implementing this access control model?(Choose 2)

Where is steganography typically used?

Which of the following mitigation techniques would include establishing, deploying, and then maintaining a standard configuration, such as an image?

Which of the following tools or activities is primarily used for automating security compliance checks and vulnerability assessments across an organization's IT infrastructure?

Which of the following is a protocol used for automating vulnerability management, measurement, and policy compliance evaluation?

Which type of reporting and monitoring is typically conducted on a regular basis to detect and respond to security incidents as part of an organization's ongoing security operations?

Which governance structure provides the highest level of autonomy with regard to decision-making authority in a large organization?

Which of the following encryption tools is also known as a trusted execution environment (TEE)?

Which of the following network attacks has the goal of capturing a user's login information to use in a subsequent attack?

A user notifies you that a software application displays advertisements while the application is executing. Of which security threat is this an example?

Which of the following is an example of adware?

Which of the following security control types includes acceptable use policies, handbooks, and posted warning signs?

Your organization has asked the security team to add terrorist attacks to the organization's business continuity plan. Which type of threat does this most likely represent?

Which of the following is most likely the primary motivation for a threat actor who wants to gain notoriety by claiming responsibility for an event?

You implement network segmentation, airgaps, multiple firewalls, and virtualization on your company's network. Of what are these examples?

Your organization has decided to outsource its e-mail service. The company chosen for this purpose has provided a document that details the e-mail functions that will be provided for a specified period, along with guaranteed performance metrics. What is this document called?

In a security investigation, which of the following would provide you with the best data source for detailed information about network transmissions?

Which type of internal audit focuses on evaluating the adherence to industry regulations, standards, and internal policies?

Which of the following encryption levels offers the most granular control?

A user supplies the proper credentials and logins in to a remote system from an offsite location in New York. Moments later, the same proper credentials are used to login from a different offsite location, this time from Tokyo. What type of Indicator of Compromise does this represent?

Now that security requirements have been defined, the software development team is ready to start the security testing phase. They want to analyze the code without the code executing and plan to repeat this testing throughout the entire application development life cycle. What type of testing are they planning?

Which of the following threat actor motivations is also known as a competition attack?

Your organization has decided to implement an encryption algorithm to protect data. One IT staff member suggests that the organization use IDEA (International Data Encryption Algorithm). Which strength encryption key is used in this encryption algorithm?

As part of your monthly report, you must classify specific vulnerabilities into a broad range of vulnerability types. Which type of vulnerability is demonstrated by an SQL injection?

Which external factor influences effective security governance by dictating rules and compliance standards by which organizations must abide?

Which of the following architecture models is characterized by a design where administrative control and decision-making are distributed among various autonomous entities?

Which policy outlines the procedures and protocols for managing and responding to a security breach?

Which of the following data sources would provide you with information about potential weaknesses and security flaws within a network or system?

Your company has recently started adopting formal security policies to comply with several state regulations. One of the security policies states that certain hardware is vital to the organization. As part of this security policy, you must ensure that you have the required number of components plus one extra to plug into any system in case of failure. Which strategy is this policy demonstrating?