A restaurant installs a second wireless router that only employees can use. Which statement describes how to securely configure the new router?

You need to transfer configuration files to a router across an unsecured network. Which protocol should you use to encrypt the files in transit?

Your company is creating a BYOD policy to allow employees to join their personal smartphones to the company network. Which three requirements are commonly included in a BYOD policy? (Choose 3.)

You notice that a new CVE has been shared to an email group that you belong to. What should you do first with the CVE

Which encryption type is commonly used to secure WiFi networks?

How does sandboxing help with the analysis of malware?

Which network security technology passively monitors network traffic and compares the captured packet stream with known malicious signatures?

Your supervisor tells you that you will participate in a CVSS assessment. What will you be doing?

The company web server collects information through a form. The form is accessed by using port 80. The form content is transferred to an encrypted database for storage. You are investigating a complaint that the form content has been compromised. What is the cause of the security breach?

You work for a hospital that stores electronic protected health information (ePHI) in an online portal. Authorized employees can use their mobile devices to access patient ePHI. You need to ensure that employees’ mobile devices comply with HIPAA regulations. Which safeguard should you develop and implement?

You need to design your company’s password policy to adhere to the National Institute of Standards and Technology (NIST) guidelines for user password security. What is the minimum password length that you should require to be consistent with the NIST guidelines?

You need a software solution that performs the following tasks:

Compiles network data

Logs information from many sources

Provides orchestration in the form of case management

Automates incident response workflows

What product should you use?

You are collecting data after a suspected intrusion on the local LAN. You need to capture incoming IP packets to a file for an investigator to analyze. Which two tools should you use? (Choose 2.)

You are reviewing the Application log on a Windows computer. You see an event with an error-level message as shown. What can you determine about the application that generated the event message?

Which security measure can prevent unauthorized devices from automatically connecting to a corporate network through unused switch ports?

An administrator wants to ensure that any files downloaded from the internet are automatically scanned for malicious code before execution. Which security control should be implemented?

Which step should be performed immediately after identifying a critical vulnerability affecting internet-facing systems?

A SOC analyst notices repeated failed login attempts from a foreign IP address followed by a successful login to a privileged account. What is the most appropriate next step?

Which wireless security protocol provides the strongest protection for a home or small business network?

During an incident response, the security team needs to isolate a compromised server from the rest of the network but still allow forensic analysis. Which action should they take?