Which of the following security concepts mandates that a system must first verify an entity before permitting it to send data to other systems?

Identify which of the following is considered a technical security measure.

A security analyst needs to automate a routine function that involves exchanging data between different systems. The most suitable technology for the analyst to utilize.

What is the primary reason for implementing a two-person integrity security control for a critical process?

A company wants to keep a record of all changes made to the source code used for creating new virtual servers. What tool will the company most likely implement?

Which type of attack best describes this activity?

Which of the following phases represents the final step in the modern incident response lifecycle?

Within the risk management process, which step involves defining the project's boundaries and identifying potential hazards?

A security analyst is investigating an application server and observes that a program that normally performs local batch jobs and generates no network traffic is now unexpectedly sending outbound data over random high ports. Which type of vulnerability has most likely been exploited in this software?

Which of the following is an example of a vulnerability that allows code to be injected into memory at runtime?

A company wants to allow employees to copy files from their virtual desktop during standard business hours but prevent this activity outside of those hours. Which security measure should the company configure?

An attacker attempts to gain unauthorized access to underlying systems by submitting a request that includes unexpected characters. Which attack best describes this action?

As part of the Business Impact Analysis (BIA), which metric directly influences how often backups must be performed?

An accounts payable clerk at a company receives a request from a vendor to update their bank account details before a payment is sent. The clerk makes the change and processes the payment to the new account. Days later, the clerk receives another message from the vendor, inquiring about a missing payment to the original bank account. What is the most likely cause of this incident?

A security team is receiving reports of widespread high latency and complete network outages across the office building. Flow logs from the campus switches indicate an unusually high volume of traffic on TCP port 445. What is the most probable root cause of this incident?

What is the most effective way to test a system's ability to maintain operation and recover after a primary power source failure?

What is the most effective method to safeguard an application server running end-of-life, unsupported software from network-based threats?

By deploying a Host-based Intrusion Prevention System (HIPS), which two security control types is a company implementing?

At the beginning of a penetration test, the tester consults Open Source Intelligence (OSINT) resources to gather information about the client's environment. What kind of reconnaissance is the tester performing?

Which threat actor is most likely driven by personal beliefs or ideology when attacking an organization?

A security engineer is deploying an Intrusion Prevention System (IPS) to automatically block known signature-based attacks within the network environment. Which mode of operation is best suited to achieve this goal?

Which vulnerability type involves compromising a virtual machine (VM) to gain unauthorized access to adjacent hosts on the same physical server?

Which application identification method can be executed on a software application while it is running in its deployed environment?

A network administrator aims to ensure that network traffic is highly secured during transmission. Which set of actions best describes the steps the network administrator should take?

A company is rolling out a Bring Your Own Device (BYOD) policy but wants to restrict application installation on employee personal equipment to only company-approved software. What solution addresses this specific concern?

What process should be used to assign a descriptive label to a file based on its business value, data sensitivity, or applicable regulatory requirements?

An organization must demonstrate that its security controls are correctly designed and are operating effectively as intended. Which report type will best fulfill this objective?

Which tactic is most frequently employed by attackers to perform credential harvesting?

In the event a retail chain fails to comply with the Payment Card Industry Data Security Standard (PCI DSS), which consequence would they most likely face from their customers?

A security analyst must develop a remediation plan for every item in the risk register. The highest-priority item states that employees have separate logins and differing password complexity requirements for various Software as a Service (SaaS) solutions. What implementation plan is most likely to resolve this security issue effectively?

A security analyst receives an alert from a corporate endpoint used by employees to issue visitor badges, with the alert containing details about numerous failed login attempts. Which type of indicator most accurately describes what triggered this alert?

Which scenario accurately describes a possible Business Email Compromise (BEC) attack?

Which threat vector is the most commonly exploited by insider threat actors when attempting to steal data (data exfiltration)?

An organization has been notified that its data is being sold or exchanged on the dark web. The CIO has requested an investigation to identify weak security practices and implement the most secure solution to protect all employee accounts. What is the most appropriate security solution to meet the CIO's requirements?

When a host-based firewall on a legacy Linux system is configured to permit connections only from a specific list of internal IP addresses, what security principle is being implemented?

A security analyst discovers a potentially malicious video file on a server and needs to determine both the date the file was created and the identity of the user who created it. Which action is most likely to provide the required information?

A healthcare organization is developing a web application that allows users to digitally report medical emergencies. Which factor is the most crucial consideration during the application's development?

A security analyst reviewing domain activity logs observes numerous failed login attempts for a specific user account. Which conclusion best explains the analyst's discovery?

A user receives an email from someone pretending to be a company executive, requesting sensitive details to close an outstanding invoice. Which topic from the training did the user successfully identify?

A security audit found that a majority of the IT staff possess domain administrator credentials and have not been regularly changing their passwords. What solution should the security team recommend to resolve these findings in the most comprehensive manner?

A Chief Information Security Officer (CISO) wishes to specifically highlight the increased threat posed by ransomware-as-a-service in a report to the management team. Which threat actor best describes the entity discussed in the CISO's report?

A security analyst successfully identifies an active incident within the network. Which phase of the incident response process should the security analyst perform immediately after identification?

What protocol is employed to verify the current validity status of a digital certificate when it is presented to a user's browser or application?

Which social engineering attack involves a malicious actor impersonating a legitimate website URL by using a closely-spelled alternative?

A security analyst is tasked with creating the initial network diagram for a company's new customer-facing payment application, which will be hosted by an external cloud service provider. What is the primary purpose of this network diagram?

What is the name of the security tool used for centralized collection, analysis, alerting, and monitoring of system, application, and network logs from various sources?

What is the best immediate course of action to mitigate a zero-day vulnerability discovered in mission-critical production servers that must maintain high availability?

An administrator needs to replace an expired SSL certificate. What file or request must the administrator generate to begin the process of obtaining the new SSL certificate?

Which data type best describes an Artificial Intelligence (AI) tool that a company developed internally to automate its ticketing system under a specific contract?

An employee used the company's billing system to process fraudulent checks. The administrator is now searching for evidence of any similar previous occurrences of this activity. Which log source should the administrator focus on?

A company wants to receive alerts when external parties are conducting research and reconnaissance on the company's infrastructure. One strategy involves placing a portion of the company's infrastructure online, configured with known vulnerabilities, to appear as legitimate company assets. What is this security approach called?

A visitor connects their laptop to an unoccupied network port in the lobby and gains access to the company's network. Which configuration on the existing network infrastructure is the most effective way to prevent this activity?

A company is required to ensure that sensitive data stored on its systems (data at rest) is rendered unreadable to unauthorized users. What method will the company most likely use?

Which architectural model is most appropriate for establishing redundancy and ensuring high availability for essential business processes?

A systems administrator is concerned about security weaknesses within cloud computing instances. What is the most critical vulnerability the administrator must consider when designing a cloud computing environment?

A US-based cloud hosting provider plans to launch new data centers in international locations. What is the most important factor the hosting provider should analyze before expanding?

According to the shared responsibility model in an Infrastructure as a Service (IaaS) cloud environment, which role is accountable for the security of the company's database?

A company uncovers suspicious transactions that were entered into the company's database and traced back to a user account that was intentionally created to act as a trap for malicious activity. What is this specific user account an example of?