Select the correct answer. An executive for a manufacturing company wants to diversify the sources for its raw materials. What threat vector is the executive trying to minimize?

Select all the correct answers. What are two specifications sponsored by the Department of Homeland Security (DHS) for sharing cybersecurity information?

Select all the correct answers. An employee for a domain registrar service receives a phone call from someone claiming to be an executive from the company. He demands that the employee quickly change some customer information because the service company is in a hurry. Which two social engineering techniques are being implemented by the caller?

Select the correct answer. Which type of phishing attack uses text messages to try and steal sensitive information?

Match each attack with an example of it being perpetrated: "An attacker posts a link to a giveaway that embeds a file into the URL." Which attack is illustrated?

Match each attack with an example of it being perpetrated: "An attacker sends links to a site that mimics a popular site to gain sensitive information from a user." Which attack is illustrated?

Match each attack with an example of it being perpetrated: "An attacker sends an email asking for money, and in exchange, the attacker promises to send back double the money." Which attack is illustrated?

Match each attack with an example of it being perpetrated: "An attacker registers a domain name that is one letter off from a popular website, then designs it like the original to collect usernames and passwords." Which attack is illustrated?

Select the correct answer. Which type of password attack uses precomputed passwords and hashes?

Select all the correct answers. Which two techniques are useful to prevent adversarial AI attacks?

Select the correct answer. Imani is an employee at a financial firm. She suddenly sees a pop-up window on her system saying that her data has been encrypted and she should send money to restore the system. What type of security attack has Imani suffered?

Select the correct answer. A user is sent to a site to authenticate, but the user notices that the URL contains "http" instead of "https." What type of attack behaves in this way?

Select the correct answer. Which type of attack injects malicious code into a database?

Match each software attack to a remedy. Which software attack is addressed by this remedy: display only minimal information as output when responding to abnormal conditions?

Match each software attack to a remedy. Which software attack is addressed by this remedy: ensure the antivirus program can detect when applications try to use more memory than allocated for a variable?

Match each software attack to a remedy. Which software attack is addressed by this remedy: sanitize any data coming externally from users?

Match each software attack to a remedy. Which software attack is addressed by this remedy: give users and applications the least amount of access that their accounts need?

Select the correct answer. Which type of attack enables hosts to update their MAC:IP address tables with spoofed information?

Select all the correct answers. Jamal is an administrator. He discovers a script on one of his Linux systems. Which three types of commands in the script should mark the script as a possible security threat?

Select the correct answer. An attacker sets up a Wi-Fi network with a name that is similar to a legitimate one in the same area. Which type of attack is the attacker perpetrating?

Select all the correct answers. After a security incident, it has been discovered that a threat actor copied privacy-law-compliant user data from your system to the threat actor's system. Which two types of impacts have occurred?

Select the correct answer. An administrator notices that a server is receiving FTP connection requests even though FTP is not needed on the server and has not been configured. What type of configuration issue is the administrator facing?

Match each third-party risk with a solution that addresses it: For the risk of system integration, which solution addresses it?

Match each third-party risk with a solution that addresses it: For the risk of outsourced code development, which solution addresses it?

Match each third-party risk with a solution that addresses it: For the risk of data storage, which solution addresses it?

Match each third-party risk with a solution that addresses it: For the risk of vendor management, which solution addresses it?

Select the correct answer. Benjamin is an administrator for a financial firm. He needs to regularly decommission hard drives and be sure that they will be unreadable. He wants to do so by using a strong electromagnetic force rather than physical destruction. Which method would best suit Benjamin?

Select the correct answer. Which type of physical authentication method employs a user's unique characteristics?

Select the correct answer. Which term describes the functions that an individual is allowed to perform?

Select the correct answer. An organization needs a way to recognize individuals near their building via external security cameras. This identification should happen without the individual providing any type of badge. What type of user identification would be most useful for this situation?

Select all the correct answers. Which two options are "something you have" (possession factor) authentication types?

Select all the correct answers. What three statements regarding the limitations of cryptography are true?

Select the correct answer. Which option describes a linked list in which each new addition is cryptographically tied to the previous one?

Match each encryption term with the situation that uses it. A security administrator needs to make the passwords that users create more complex to store them.

Match each encryption term with the situation that uses it. A user wants to be sure that a message cannot be decrypted after a session has expired.

Match each encryption term with the situation that uses it. An administrator wants others to be able to verify the authenticity of a file they have sent.

Match each encryption term with the situation that uses it. An individual wants to send a message and let others know that the individual is an authentic sender and that the message has not been altered.

Select the correct answer. Which type of security scan gives an insight into what an attacker can do if they are able to break into an account?

Select all the correct answers. A penetration tester has been tasked with attacking a network which is a known environment to the tester. Which two terms best describe the rules of engagement for the tester?

Select the correct answer. An administrator installs security assessment technology that allows hosts to forward events to an SIEM server using SNMP. What type of model is the administrator using?

Select the correct answer. An administrator wants to be able to detect when a network is being scanned and, in response, return misleading information. What method is the administrator employing in this situation?

Select the correct term. Match each term to its example of data protection: An administrator needs to automatically stop sensitive data from being exfiltrated from a system or network. Which term matches this example?

Select the correct term. Match each term to its example of data protection: An administrator must be sure that the data traversing the network is encrypted. Which term matches this example?

Select the correct term. Match each term to its example of data protection: An administrator needs to block out some sensitive data in a file before sending it to a third party so that its value can never be determined. Which term matches this example?

Select the correct term. Match each term to its example of data protection: An administrator needs to replace sensitive data with something else but be able to swap it back when needed. Which term matches this example?

Select the correct answer. Which technology describes an app and the parts of an operating system that it needs to run?

Select the correct answer. A business organization would like to create a cloud environment that allows suppliers and distributors to connect to in order to work better. Which type of cloud model would best fit this situation?

Select all the correct answers. Which two options describe adding more servers when an app's demand increases over time?

Select the correct answer. A developer is writing code that should accept a file as input. Since the developer is worried the file might not always exist for each user, he wants to try and catch the error before it happens so that it doesn't crash the app. What technique is the developer using?

Select the correct answer. A developer is creating an embedded device that needs fast wireless communication that is within four inches of the device it is communicating with. It should also support encryption. Which protocol would be ideal for this device?

Select the correct answer. Which type of embedded system has integrated circuits that can be customized as needed rather than replaced?

Select the correct answer. An administrator wants a simple RAID system that just mirrors all the contents of one disk onto another. What type of RAID should the administrator implement?

Select the correct answer. Which type of backup will include all files changed since the last complete backup job?

Select the correct answer. An administrator needs a server that will stay online even during a power outage. Which type of device will enable this functionality?