Which of the following terms refers to the ability to obtain and apply security updates or fixes for software or systems?

When analyzing cloud-specific vulnerabilities, which of the following factors is essential to ensure that the system can be quickly restored after a disruption?

Kelly Innovations decides to manage its IT infrastructure within its physical location, retaining full control over its hardware, software, and data. Which of the following security implications is MOST directly associated with this approach?

Jimmy, a Chief Technology Officer, is evaluating different architecture models. His biggest concern is the ease of deployment. Which of the following factors would be MOST critical to consider from a security standpoint?

Which of the following terms refers to the delivery of computing services over the internet, such as servers, storage, databases, networking, software, analytics, and intelligence?

As part of their expansion, Kelly Innovations LLC decided to break their monolithic application into microservices. While this provides scalability, which of the following security implications should the organization be MOST concerned with?

Which of the following terms BEST represents the approach that divides a physical network into multiple distinct units to manage traffic and enhance security?

A drone manufacturer employs a RTOS to ensure timely task executions. While optimizing for real-time performance, which of the following security concerns might arise?

Which of the following architecture models involves using a single point of control or authority to manage a system or service?

When integrating Cloud services with external applications, which of the following considerations is the most crucial in assessing the security risks associated with data transmission to these external service providers?

An organization has recently decided to utilize multiple operating systems and applications on a single physical server to optimize resource usage and reduce costs. Which of the following BEST represents this approach?

Given the crucial role of power management in ensuring uninterrupted network operations, which of the following solutions provides the BEST mitigation against a complete power loss, allowing administrators ample time to failover or perform a proper shutdown?

Which of the following technologies allows running code without managing any underlying infrastructure?

Which of the following network designs involves using air-gapping, disconnecting cables, or locking devices to prevent unauthorized access or interference?

When implementing a virtualization solution, which of the following considerations is essential to ensure that the virtual machines have sufficient resources to perform tasks efficiently?

When evaluating different architecture models, which of the following factors is MOST crucial to consider in terms of compute considerations for security optimization?

Which of the following BEST describes the concept where network control is managed by a software application, independent of the hardware?

In an environment utilizing ICS, which of the following aspects is critical to assess, given that certain components might not allow modifications for security improvements?

Which of the following architecture models is BEST described as a model that allows developers to write and deploy code without concern for the underlying infrastructure because the cloud provider automatically manages the execution, scaling, and networking?

A tech startup uses microservices to handle various financial transactions. Which of the following security implications should they be MOST wary of when implementing microservices?

A tech startup uses microservices to handle various financial transactions. Which of the following security implications should they be MOST wary of when implementing microservices?

An organization deploys numerous specialized devices with software hard-coded into their firmware. These devices cannot be easily updated or patched. Which security concern is MOST directly associated with this type of system?

Which of the following terms refer to computer systems that are integrated into larger, often more complex devices?

Ahmed, a software engineer, is considering using more Infrastructure as Code (IaC) within his company. This may be a challenge as a number of employees insist they need their own special configurations and software, commonly called "snowflake systems". Which of the following BEST describes the purpose of eliminating "snowflake systems"?

Which of the following terms refer to the characteristic of a system that ensures minimal disruption in service?

Which of the following architecture models involves using a combination of cloud and on-premises resources to deliver services and applications?

Given that cloud architecture provides dynamic resource allocation, which of the following security considerations is MOST critical when dealing with the compute component?

Which of the following BEST describes an approach where the foundational systems are set up and overseen using scripts and automated instruments instead of hands-on methods?

Light Fantastic, a lamp manufacturer, has a factory that is in a floodplain. They have purchased additional flood insurance. Which of the following methods of dealing with risk has the company used?

Dion Training is implementing a security device tasked with inspecting live network traffic and taking immediate action to mitigate potential threats. Which of the following security items would MOST effectively satisfy this requirement?

Dion Training Solutions needs a network appliance capable of filtering traffic based on URLs, HTTP headers, and specific web application functionalities. At which layer of the OSI model would this appliance primarily operate?

Dion Training Solutions is looking to upgrade their current firewall to one that can detect and block advanced threats, provide additional functions like intrusion prevention, and give them deep visibility into traffic. Which of the following types of firewalls is BEST described here?

Dion Training Solutions is implementing a security system for its research facility, where sensitive data is stored. If the access control system fails, which mode should be adopted to ensure that no unauthorized personnel can enter the facility, even if it means some inconvenience to authorized staff?

Kelly Innovations LLC needs to securely authenticate remote users and needs to be able to handle multiple authentication methods. Which of the following protocols would be BEST suited for this scenario?

Kelly Innovations LLC is implementing a wireless network and needs a flexible authentication method that supports multiple mechanisms for authenticating both wired and wireless users. Which protocol BEST fits their requirements?

Dion Training Solutions recently integrated a single security solution that provides multiple security functions at one point on their network. This solution incorporates functionalities such as intrusion prevention, gateway anti-virus, and VPN. Which of the following BEST describes this solution?

Croma Soft, a game company, wants to reduce the public-facing attack surface for their company. They hope to achieve this by using a device that can handle and relay requests for servers. Which type of network appliance would be MOST appropriate for this purpose?

To enhance the privacy of its users, Kelly Innovations LLC is considering a system that can act as an intermediary for internet requests, hiding the origin of the request from the destination server. Which solution would BEST fit this purpose?

Kelly Innovations LLC wants to implement a network appliance that focuses on filtering traffic based on source and destination IP addresses and port numbers. Which layer of the OSI model is this appliance primarily operating at?

Sasha, a network administrator for Kelly's Technical Innovations, has just recently installed a NGFW on her company’s network to replace the previous traditional stateful firewall they were using. This change was made to keep up with shortcomings that were with the previous firewall. Which of the following improvements does this NGFW provide that were not available previously? (Choose 3)

Dion Training is establishing a security architecture that requires distinct levels of access, such as differentiating between employee and guest access and ensuring only authorized personnel can access sensitive data. Which of the following infrastructure designs is being implemented?

Dion Training needs to regulate the devices connecting to its network. To make things more secure, the devices should be regulated based on their unique physical addresses. Which of the following features would BEST address their needs?

Reed & Jamario Security Services has recommended your company use a port-based system to prevent unauthorized users and devices. Which of the following are they recommending?

The Greedy Pencil, a stationary producer, is considering changing its security enterprise architecture. The most pressing concern is minimizing the paths of potential threats into systems. Which of the following infrastructure considerations have they decided is the most important?

Dion Training Solutions is aiming to optimize their wide-area network while ensuring advanced network management and performance optimization. They are considering a solution that can be deployed both on-premises and in the cloud. Which of the following technologies would BEST match their requirements?

Which of the following systems would be BEST suited to alert network security personnel to an anomalous occurrence on the network?

Global Star Computing has experienced a number of breaches in the past few months. They want to get one software system that will integrate many protections, including application-aware filtering. They also want to track user identities and stop unauthorized users from accessing their data. Which of the following would be the MOST suitable option?

Dion Training has encountered frequent advanced and sophisticated threats. They need an integrated firewall solution that surpasses traditional firewall capabilities. Which of the following would BEST address the issue?

Which of the following items is a collection of standards that works on the transport layer to provide secure network tunneling?

Dion Training is planning to implement a TLS VPN to facilitate secure remote access for its employees. The VPN will use port 443, authenticate the server to the client, and optionally authenticate the client's certificate by the server. It will create an encrypted tunnel for user authentication, with communications for the local network tunneled over the secure socket once the connection is fully established. In this scenario, which of the following considerations BEST represents a potential limitation of applying security principles due to the chosen remote access solution?

In a case where a system is continuously being exploited by a known vulnerability that the enterprise is unable to address immediately. Which of the following firewall types that can filter traffic based on application layer (OSI Layer 7) logic would be MOST suitable for temporary mitigation?

Clumsy Contraptions Engineering is seeking to change its security footing. In the past, they have found that too many pieces of malicious software have gotten past network security points. Their Chief Security Officer (CSO) believes they need a device that will actively evaluate traffic and reject or modify packets according to policies the company sets. What type of device is the CSO suggesting?

Kelly Innovations LLC is setting up a secure network environment where administrators can manage multiple servers without directly connecting to them. Which of the following would BEST suit this requirement?

To protect customers' financial records and adhere to standards set to prevent money laundering and fraud, which of the following is the BEST strategy a bank should adopt?

Which of the following techniques replaces sensitive data with fictitious, but structurally similar, data to protect it in non-production or test environments?

Which of the following methods BEST ensures the security of data at rest?

What kind of data typically requires processing by machines and specialized software?

Hakeem is a compliance officer at HLM Media. He is creating a classification system for HLM's data where there is some data that laws require be handled in particular ways. What label should he give the data that is subject to strict compliance standards?

A company wants to ensure the integrity and confidentiality of its operating system files during both transit and storage. Which of the following is the MOST effective approach for protecting these files?

Which of the following types of data are crucial for an organization's operations and, if compromised or lost, could result in significant operational impact?

Which of the following refers to data that is actively being processed by a computer?

Which of the following solutions should a data center implement to guarantee customer data remains unreadable in the event of a physical server compromise?

Which of the following is a data classification that would MOST likely include data covered under an NDA?

Which of the following is a form of obfuscation where data strings are replaced with a single character like an X or a * but the structure of the data string remains the same?

When a legal organization routinely communicates with clients via email containing sensitive case details, which strategy would be the MOST effective to secure the communications?

Your organization frequently updates the firmware images on its hardware devices. To prevent unauthorized firmware updates, which security measure is BEST to implement?

Kelly Investments LLC is preparing datasets for a third-party analytics company. They want to ensure that personally identifiable information (PII) of its customers remains confidential while still keeping the structure of the data intact for analysis. Which of the following techniques would be MOST appropriate for the institution to employ?

Which category of data includes information such as trade secrets and patents?

Which method is known for converting data into a fixed-size numerical or alphanumeric value that cannot be reversed to its original form?

For creations of the mind, like novel designs or unique literary compositions, which strategy ensures creators maintain rights to their works and earn due recognition or monetary benefits?

Which of the following techniques replaces sensitive data with fictitious, but structurally similar, data to protect it in non-production or test environments?

An e-commerce company wants to protect its database containing customer names and credit card details when sharing it with its marketing team for analytics purposes. The marketing team doesn't need to view the actual data but requires a dataset of similar structure. Which of the following methods is BEST suited for this scenario?

To ensure compliance with international data protection laws and safeguard clients' confidential legal details, which of the following strategies would be BEST for a multinational law firm to adopt?

A financial services firm processes high volumes of transactions daily. To minimize data loss in case of a system failure, which backup frequency would you most likely recommend?

When considering data storage, which of the following BEST describes a method to capture the state of a system at a specific point in time, offering a quick recovery solution without the need for a full backup?

Enrique at Dion Training is responsible for ensuring that the company's project data is protected from potential data loss, especially since the office is located in a region prone to natural disasters. Which backup method would provide him with the most secure protection by keeping a physically separate copy of the data?

Which of the following strategies is MOST effective for organizations aiming to mitigate the risk of widespread disruptions due to a localized issue in their infrastructure?

Data Core, a data processing company, has gathered its security team for a meeting where the Chief Operations Officer presents a scenario involving a newly discovered zero-day vulnerability, to which their systems are particularly vulnerable. The security team discusses various ways to address the issue, with two major competing approaches emerging. What type of exercise are they most likely performing?

Which of the following practices emphasizes the distribution of incoming network traffic across multiple servers to ensure that no individual server is overwhelmed?

Morris has organized an exercise for his security team to test their new defense plans. He has divided the team into two groups: one defending the system and the other attempting to breach it. The groups, set up with similar experience and size, will compete, and the winning team will have lunch catered. What type of exercise has Morris created?

Which of the following provides short-term emergency power to a device when the input power source fails, allowing for either a proper system shutdown or switching to a long-term power source?

Which of the following approaches ensures real-time or near-real-time duplication of data to a secondary location for purposes like high availability, disaster recovery, and load balancing?

Which technique, when considering high availability, involves distributing network or application traffic across a number of servers to enhance the performance and reliability of applications?

Mary works at Kelly Innovations LLC, where she is tasked with developing and testing new software releases. She is looking at updating the backup system since she noticed that sometimes they need to revert to a previous build several times a day due to unexpected issues. Which backup frequency would be the most appropriate for her to implement?

Sasha, a system administrator at Dion Training, recently received a directive to ensure that all data backups are compliant with privacy regulations. Given that these backups occasionally need to be transported offsite, which of the following measures would be MOST critical for her to implement?

Which of the following BEST describes the consideration of staffing needs to align with future workload demands and project implementations?

Which of the following techniques involves maintaining a log of all transactions and changes, allowing a system to recover to the exact point of failure after a crash?

Which backup type involves storing copies of data within the same physical location as the primary data?

Mary, working at Dion Training, is overseeing a major software update in their virtualized environment. Before pushing the update live, she wants to ensure a rapid recovery point without creating a full backup due to storage constraints. Which method would be MOST suitable for her needs?

Given the need for resilience and the ability to recover in a security architecture, which of the following devices ensures uninterrupted operation during a power outage?

While performing recovery testing, which computational approach can simultaneously assess multiple recovery strategies after a security breach?

Which computational method allows for the simultaneous testing of various restoration protocols to ensure swift system recovery after a security incident?

Which of the following practices involves considering future infrastructure needs to ensure that systems can accommodate expected workloads without compromising performance or availability?

Enrique at Kelly Innovations LLC is worried about ransomware attacks after a competitor recently fell victim and all of their data was exfiltrated and backups were infected. While devising a multi-layered defense strategy, which aspect related to his company's backups would be most vital for him to consider?

D2V is a media company that is developing a Continuity of Operations Plan (COOP) due to concerns about weather-related disruptions. They own a mostly empty building intended as a backup in case their current site becomes unusable. Recently, they moved some equipment to the building to speed up future operations if needed. What type of site have they now created?

Lullaby Animations' website has many features, including a blog, store, video streaming, and beta and feedback pages. The site uses a number of servers to provide fault tolerance. Each feature is housed on a particular server so that if one server goes down, they only lose functionality for one part of the site, while the rest of the site remains up. What best describes the system Lullaby Animations uses?