Usually used in ethical hacker training programs and gamified competitions.

CIA stands for __________, integrity, and availability

Performs a real-time lookup of a digital certificate’s status.

Malware that installs and operates silently until a certain event occurs.

A business manager is documenting a set of steps for processing orders if the primary Internet connection fails. These steps would BEST be described as:

Which of the following risk management strategies would include the purchase and installation of a next-generation firewall?

The cybersecurity technique designed to detect the presence of threats that have not been discovered by normal security monitoring is known as:

A company would like to securely deploy applications without the overhead of installing a virtual machine for each system. Which of the following would be the BEST way to deploy these applications?

You receive an email, with an invoice, stating that you passed through an EZPass lane without paying the toll. What type of attack is this?

Windows user accounts are identified as:

WPA3?

What can be used to prevent shoulder surfing?

A security administrator would like to encrypt all VoIP communication on the corporate network. Which of the following protocols would provide this functionality?

A hacker identified a number of devices on a corporate network that use the username of admin and the password of admin. Which vulnerability describes this situation?

Which part of the PC startup process verifies that nothing on the computer has been changed by malicious software or other processes?

The VP of Retail Operations sent a request to the server administrator of the company to create daily backups of the retail leads database. The VP of Retail Operations is an example of a:

What does it mean to collect latent evidence?

A security administrator is researching the methods used by attackers to gain access to web servers. Which of the following would provide additional information about these techniques?

Data which is stored in the RAM

Which of the following attacks may allow remote authentication without cracking a password?

What protocol does a smurf attack abuse?

A digital certificate that turns the address bar green is a(n)...

Linux command for managing file permissions

What is the primary target in a XSS attack?

Which of the following describes a monetary loss if one event occurs? ________

Changing code to make it difficult to understand or covering your tracks to make it hard for investigators to trace the origin of attack is called ________

You received a support call from an end user who states that they've accidentally installed a virus on their Windows computer. What should be the first step you should take to remediate the situation?

A corporate security team would like to consolidate and protect the private keys across all of their web servers. Which of these would be the BEST way to securely store these keys?

Which of the following two reasons explain why two backups are required when protecting evidence following a security incident?

A company is implementing a series of automated processes when responding to a security event. Which of the following would provide a linear checklist of steps to perform?

Which Windows security feature that marks memory so that it can store data but not execute program instructions?

What name is given to the team that needs to be assembled as part of the incident response policy?

What are examples of a DoS attack?

When an attacker captures network traffic and retransmits it at a later time, what type of attack are they attempting?

How could you prevent the boot order from being manipulated during boot?

File type used to save packet captures

Which of the following BEST describes the modification of application source code that removes white space, shortens variable names, and rearranges the text into a compact format?

The lock type that involves RFID or smart cards for authentication is:

According to the OSI Model, what communicates over layer 7?

A security administrator is configuring an IPsec tunnel to a remote site. Which protocol should the administrator enable to protect all of the data traversing the VPN tunnel?

Which of the following authentication protocols would be the BEST way to provide a login to wireless systems using existing credentials from a third-party?

Which of the following mitigates clickjacking, script injection, and other client-side attacks?

A company has signed an SLA with an Internet service provider. Which of the following would BEST describe the content of this SLA?

Which Windows 10 security feature stores a hash of the UEFI firmware so that it cannot be exploited by malware?

A security administrator is designing a network to be PCI DSS compliant. Which of the following would be the BEST choice to provide this compliance?

A user in the accounting department would like to send a spreadsheet with sensitive information to a list of third-party vendors. Which of the following could be used to transfer this spreadsheet to the vendors?

Which of the following features may be included in an EPP?

What BEST describes implicit deny?

What is the point of an entry control roster?

Which of these cloud deployment models would allow multiple organizations to share the same cloud resources, regardless of the resource's location?

Your company owns a purpose-built appliance that doesn't provide any access to the operating system and doesn't provide a method to upgrade the firmware. Which of the following describes this appliance?

An unauthorized AP broadcasting an identical SSID as a corporate network is considered a/an...

In WPA3, what replaces CCMP to ensure perfect forward secrecy of packets?

Maintaining the integrity and proper handling of evidence from collection, to analysis, to storage, and then to presentation is known as________

Which of the following best describes whaling?

Which of the following control types is associated with a bollard?

Which of the following software can be used to recover data from slack space?

A security administrator has installed a network-based DLP solution to determine if file transfers contain PII. Which of the following describes the data during the file transfer?

A company's security policy requires that login access should only be available if a person is physically within the same building as the server. Which of the following would be the BEST way to provide this requirement?

What type of attack involves an attacker putting a layer of code between an original device driver and the operating system?

An organization is installing a UPS for their new data center. Which of the following would BEST describe this type of control?

A company would like to protect the data stored on laptops used off-site. Which of the following would be the BEST choice for this requirement?

Which of the following would limit the type of information a company can collect from their customers?

An organization maintains a large database of customer information for sales tracking and customer support. Which person in the organization would be responsible for managing the access rights to this data?

What is the advantage of using an EPP instead of a traditional AV?

Which of the following is known as eavesdropping?

Which of the following cloud deployments would include CPU, storage, and networking, but not include any operating system or application?

Rules can be added to a Linux-based NOS firewall by using the command...

Which of the following would be the BEST way to determine if files have been modified after the forensics data acquisition process has occurred?

A network administrator is installing a series of access points in a public library. Which of the following would be the BEST way to prevent theft of his laptop while performing this work?

In China, the National Data Center was compromised due to a Chinese hacker group hacking a number of Chinese government websites that was frequently visited. What type of an attack is this?

Which of the regulatory compliance laws ensures proper handling of patient health information?

You have two APs within close proximity. Both are emitting SSIDs from a 2.4GHz radio. One AP is set to channel 1 and the other AP is set to channel 2. What is this an example of?

If you want to encrypt a file or folder in Windows, what can you use?

What is the policy of preventing any one individual performing the same role or tasks for too long?

What next-gen endpoint protection system specializes in containment of the threat versus eradication?

Which of the following is a stateless firewall?

Where can you implement a password policy that can be applied to an entire network?