Daren is setting up security for the building’s entrance. He installs special software to control a new Access Control Vestibule (ACV), which only lets one person in at a time after verifying their identity. This helps prevent “tailgating” — when someone sneaks in behind an employee.

At HelpHub’s main store, Daren installs a security camera above the front entrance. The camera records everyone entering and exiting the building. It doesn’t stop people from coming in, but it helps identify who was there if something goes wrong — and it also makes people think twice about doing anything suspicious. What type of control is this camera?

Daren is continuing to set up cybersecurity at HelpHub and installs Endpoint Detection and Response (EDR) software on all employee computers. The EDR software watches for suspicious activity, records it, and alerts the IT team if something unusual happens—like malware trying to run or someone accessing sensitive files without permission. What kind of security control is the EDR software?

Daren is configuring Data Loss Prevention (DLP) software at HelpHub to stop sensitive information—like customer records and financial data—from being accidentally shared or stolen. Before the DLP system can properly protect the company’s data, Daren needs to make sure the system knows what data is most sensitive. What is the MOST important step Daren must take to make DLP work correctly?

Daren is now working on setting up firewalls at HelpHub to block unwanted network traffic and protect company systems. To make sure the firewall is set up securely and follows best practices, Daren decides to use a trusted template that shows how firewalls should be configured our industry. Where does this firewall template come from?

Daren suggests to the executives at HelpHub that they create a competitive reward system to encourage employees to follow better security practices. Employees can earn points, badges, and prizes for things like spotting phishing emails or updating passwords regularly. What is this kind of strategy called?

Daren wants to test how well all employees at HelpHub respond to phishing emails and other social engineering attacks without putting the company at risk. He wants to send fake phishing emails to see if employees can recognize and avoid them. What should Daren do?

Daren is setting up a AAA (Authentication, Authorization, and Accounting) server at HelpHub to improve security. He also needs secure remote access to the server. Which pair of protocols should Daren use for authentication and secure remote connections?

Daren is reviewing the placement of several bollards—short, sturdy posts—in front of the HelpHub building. These bollards are designed to stop vehicles from crashing into the building or driving into restricted areas. How should the bollards be categorized as a security control?

Daren wants to install software on HelpHub’s computers that can analyze how users behave and help spot suspicious activities, like someone accessing data they shouldn’t or trying to steal information. What type of software should Daren choose?

Daren is conducting his weekly log audit for all the security software at HelpHub. He realizes the audits take a lot of time, and reports to management that they need more cybersecurity staff to handle the workload. However, the company doesn’t have the budget to hire more people. What type of workforce multiplier tool should HelpHub consider purchasing to help Daren efficiently analyze and manage security logs?

Daren is setting up a special system at HelpHub designed to detect malicious activity. His goal is to trick attackers into interacting with fake data or systems so he can observe their techniques and use that information to strengthen the company's defenses. Which technology should Daren use to achieve this?

Daren is installing encryption software on many of HelpHub’s systems to protect the data stored on them. Encryption ensures that even if someone accesses the data, they won’t be able to read it without the proper key. What part of the CIA Triad is Daren trying to strengthen by doing this?

Daren is managing hash technologies at HelpHub to make sure data is hashed using strong, reliable algorithms. Hashing helps ensure that data hasn’t been changed or tampered with, either on purpose or by accident. Which part of the CIA Triad is Daren focusing on by using hashing?