A power plant utilizes a specialized system to manage and monitor its daily operations, including machinery and sensor feedback. While these systems offer centralized control, what security concern is most associated with them?

If a company's server has an estimated Single Loss Expectancy (SLE) of $15,000 due to an operational failure, and the Annual Rate of Occurrence (ARO) of these failures is expected to be 0.1 times per year, what is the Annual Loss Expectancy (ALE)?

Which asymmetric encryption technique provides a comparable level of security with shorter key lengths, making it efficient for cryptographic operations?

Kelly Innovations Corp, an IT company, is implementing a process of encryption where two parties establish a shared secret for communication purposes. Which of the following MOST accurately describes this process?

When evaluating the introduction of automated systems in a security operations center (SOC), which of the following is a prominent time-related benefit that security professionals might expect?

Which of the following BEST describes an approach where the foundational systems are set up and overseen using scripts and automated instruments instead of hands-on methods?

Which of the following vulnerabilities BEST describes a situation where a threat actor can manipulate data after it has been verified by an application, but before the application uses it for a specific operation?

Which of the following BEST describes an organizational structure that allows for autonomous decision-making in separate departments or sectors within the company?

Which of the following statements BEST explains the importance of 'patching' in the context of vulnerability management?

As part of a new building initiative, Dion Training Solutions plans to connect two office buildings via a direct physical link. Which measure will BEST protect the physical infrastructure connectivity?

Given the need for resilience and the ability to recover in a security architecture, which of the following devices ensures uninterrupted operation during a power outage?

Which of the following statements BEST explains the importance of environmental variables in regard to vulnerability management?

Dion Training Solutions needs a network appliance capable of filtering traffic based on URL, HTTP headers, and specific web application functionalities. At which layer of the OSI model would this appliance primarily operate?

Which of the following BEST describes the Software Development Life Cycle (SDLC) in application security?

To improve security at their law firm, Norah, a security analyst wants to implement a system that will selectively block or allow traffic based on the nature of the communication. Which firewall type would be MOST effective for this purpose?

Reed & Jamario Security Services has recommended your company use a port based system to prevent unauthorized users and devices. Which of the following are they recommending?

Which of the following motivations refers to any act of stealing information from a system or network?

What term refers to an organization's predetermined level of acceptable risk exposure?

When a legal organization routinely communicates with clients via email containing sensitive case details, which strategy would be the MOST effective to secure the communications?

Which of the following characteristics of a cloud architecture model describes a model that can quickly recover from failures due to adverse conditions?

Kelly Innovations LLC is redesigning its network infrastructure to support its expanding R&D team. Which of the following strategies will MOST effectively lessen the attack surface?

Which of the following threats is MOST likely to accidentally cause harm to the system?

In a meeting with the CEO, Burton has asked for guidance on developing the rules of engagement for an upcoming penetration test. The CEO doesn't think they need to create rules of engagement since they are hiring an experienced, well respected company to do the penetration testing.  Why is it important for the company to still establish rules of engagement?

Within the IT department, Sarah has been designated to oversee the security measures for the new data management platform. She is accountable for the regular review of security protocols and responding to any breaches or vulnerabilities that may arise. Sarah's role would be BEST described by which of the following terms?

You are a cybersecurity analyst working for a software development company that develops mobile applications. The company wants to implement a secure and standardized method for users to grant third-party applications access to their account data without sharing their credentials. As a cybersecurity analyst, you recommend implementing OAuth for this purpose. Which of the following approaches would be the MOST effective way to implement OAuth in the given scenario?

Which of the following BEST describes the initial step to ensure a secure procurement process at Dion Training?

Before disposing of old computers at Kelly Innovations LLC, Sasha receives a document that confirms all data has been securely removed. What is this document known as?

Which of the following BEST describes a threat actor who primarily depends on commonly found tools, often easily accessible from the web or dark web?

Jamario, a security analyst at Dion Training, has just completed a vulnerability assessment on a company's internal web application. One of the vulnerabilities detected has a high likelihood of being exploited and, if successful, could expose sensitive customer data. Based on severity and potential impact, how should this vulnerability be classified?

Which mitigation technique involves the use of tools like Nagios or Splunk to continuously observe and check the operation of a system or network?

Which of the following mitigation techniques can help protect a device from unauthorized network traffic solely by using software that can control network traffic based on predefined rules and policies?

Which of the following BEST describes how automation and orchestration in cybersecurity operations influence employee satisfaction and retention?

Kelly Innovations decides to manage its IT infrastructure within its physical location, retaining full control over its hardware, software, and data. Which of the following security implications is MOST directly associated with this approach?

Which of the following statements BEST explains the importance of enforcing baselines when automating and orchestrating secure operations?

Alex, a network administrator, reviews logs from the company's main database server. He finds that every night at 3 AM, a backup process runs which generates a series of logs. However, on scanning through last week's data, he finds that logs from two nights are missing entirely. On further investigation, Alex discovers a new, unauthorized user account was created on one of those nights. What might Alex reasonably infer from these observations?

Which of the following hardening techniques can help protect systems or devices from attacks by installing software like a firewall or antivirus directly on user devices to report and block potential attacks?

Which of the following ports, if left open and unmonitored, might allow database queries from unauthorized external sources?

Which of the following terms emphasizes the mathematical structure used to scramble data so that only a specific key can unscramble it?

Which of the following statements is NOT true about the importance of log aggregation?

Which of the following is an aspect of asset management that ensures that each IT asset is clearly associated with a specific individual or department, providing clarity on responsibilities and access rights?

Dion Training is conducting a security awareness training program for its employees to enhance their cybersecurity knowledge. As part of this program, they have planned and executed phishing campaigns. Which of the following BEST describes the primary objective of phishing campaigns conducted during security awareness training?

Dion Training is considering a collaboration with a new IT service vendor. To ensure compliance and adherence to industry standards, Dion Training wishes to see verifiable evaluations of the vendor's security controls and practices. Which of the following would provide Dion Training with insights into the vendor's own internal evaluations of their security measures?

Which of the following mitigation techniques can help enforce compliance with security standards and policies on a system or network by designating programs that are allowed to run and blocking all other programs from being run?

When considering the RSA algorithm, which description BEST captures its underlying mathematical property used for public key cryptography?

Which of the following terms refers to how any country's government regulates how its citizens' data should be collected, stored, and processed?

Enrique, the head of IT at Dion Training, is tasked with ensuring all deployed company systems adhere to a set of standardized configurations. He wants to reduce the attack surface as much as possible. Which of the following techniques would BEST reduce the organization's attack surface?

Dion Training has recently implemented a new web portal for their customers. During a routine security review, the IT team notices that some suspicious activities have been logged. An unknown user attempted to access the system with a strange pattern: when requesting a particular user file, instead of the usual URL structure ( /users/[username]/profile ) the system registered requests like ( /users/../admin/config ). Within a short span of time, several such patterns were identified, each trying to reach different sensitive files and directories. Given this information, which of the following types of attack is the user MOST likely attempting?

What is the primary difference between sanitization and destruction in the disposal process?

At Kelly Innovations LLC, Susan has been entrusted with determining the purposes and means of processing personal data for the organization's new marketing campaign. She decides what data to collect, how long it will be retained, and with whom it will be shared. Which of the following BEST describes the role Susan is playing?

An investment firm allows a fluctuation of up to 10% in the value of its high-risk investment portfolio compared to the expected return on investment, but immediate action is required if this threshold is exceeded. This 10% fluctuation represents an example of:

Georgina, a lawyer, needs to send a contract to their client for signature. She want to ensure that their client cannot later deny signing the contract. Which of the following methods can they use to prevent them from denying that they have signed contracts?

Dion Training Solutions is aiming to optimize their wide-area network (WAN) while ensuring advanced network management and performance optimization. They are considering a solution that can be deployed both on-premises and in the cloud. Which of the following technologies would BEST match their requirements?

Florence is the CEO of a company. She has the final say over all decisions made regarding the business, IT, accounting, and other departments. What type of governance does Florence's company have?

Susan, a security analyst at Kelly Innovations LLC, is reviewing alerts from the IPS. She recognizes a pattern of false positives from signature-based detections. Which of the following is the MOST likely cause for false positives in signature-based detection systems?

You are a security analyst at Dion Training and you discover that an unauthorized device has been connected to the company’s network. As you investigate, you discover that the device was added so the employee could play video games during her breaks. What type of threat actor are you dealing with?

Clumsy Contraptions Engineering is seeking to change its security footing. In the past, they have found that too many pieces of malicious software have gotten past the system. Their Chief Security Officer believes they need a device which will actively evaluate traffic and reject or modify packets according to policies the company sets. What type of device is the CSO suggesting?

In regards to automation and orchestration, which of the following terms accurately captures the challenges faced when dealing with a system characterized by its intricate web of interconnected components and varied functionalities, potentially hindering seamless integration, effortless management, and straightforward comprehension?

At Kelly Innovations Corp., Sarah noticed that their core business application, which tracks customer orders, was not updating inventory levels accurately. A recent update seemed to have introduced a bug. Which of the following would offer the BEST solution?

When considering user interactions with a web service, which of the following are the security measures that involve the secure creation and transfer of identifiers as well as enforcing inactivity limits to prevent unauthorized access?

The executive team at a software development firm decides that any project with a potential financial impact greater than $500,000 due to a security incident will require an immediate review and intervention. This financial impact figure represents which of the following in risk management?

Which of the following terms refers to a critical predictive metric that organizations monitor to foresee potential risks and their impact on operations?

What type of encryption only affects a section of a storage device?

A software development company regularly releases software updates to its global customer base. Recently, some customers reported receiving unauthorized and potentially malicious software updates. The company wants to implement a security technique to ensure the authenticity and integrity of its software updates when delivered to customers. Which of the following would BEST assist in achieving this goal?

A tech company discovers that the firmware in some of their devices contains a hidden backdoor. Upon investigation, it's determined that the compromised firmware came from an overseas supplier they contracted with. The backdoor gave attackers remote access to devices without user knowledge. What type of attack vector has the company fallen victim to?

While performing a digital investigation, which of the following statements BEST describes the role of preservation of evidence?

When sending an encrypted message to Dion Training, a client would use which of the following to ensure only Dion Training can decrypt and read the message?

After remedying a previously identified vulnerability in their systems, Kelly Innovations LLC wants to ensure that the remediation steps were successful. Which of the following is the BEST method that involves examining related system and network logs to enhance the vulnerability report validation process?

For ensuring the security of an HTTP application like WordPress or Magento against threats like SQL injection or cross-site scripting, which monitoring tool or method would be MOST appropriate?

Reginald, an IT Manager, is the owner of a file on a server and wants to grant his colleagues access to the file. He is the only one who can decide who is allowed access to the file and what actions they can perform on it. Which authorization model is being used in this scenario?

Which mitigation technique involves shutting off specific entry and exit points in a system to prevent potential vulnerabilities or unauthorized access?

During a network investigation, Aiden, a cybersecurity analyst, identifies two key irregularities: The CEO, who tends to work late, logged in from both Paris and Tokyo within five minutes, and there's an unexpected surge in emails from the HR department outside of recruitment season. Which of the following should the analyst be MOST concerned about based on these observations?

The HR department for a large corporation is looking to streamline the onboarding process for new employees. What can the use of scripting do to help attain this goal, in terms of system access?

What element of backup strategy involves making data copies regularly at set intervals?

What is the name of a cryptographic key that can be freely distributed and used by others to encrypt messages?

Which of the following terms BEST describe the affirmation of the validation of the accuracy and thoroughness of compliance-related reports?

Which of the following vulnerabilities is unique to cloud computing environments, posing risks related to unauthorized access and data manipulation?

Reed, a cybersecurity specialist at Dion Training Solutions, is optimizing the company's IPS. He notes that while signature-based detection is highly effective against known threats, it has some limitations. Which of the following BEST describes a limitation of signature-based detection in an IPS?

Travid is evaluating an attack that has occurred on his organization's system. He sees that the attacker entered a lot of data into the the area of memory in the API that temporarily stores user input. What type of attack did Travid discover?

What is the purpose of a security analyst doing due diligence in the vendor selection process?

Which of the following are hardware issues that result from products that are no longer being made or supported, but are still usable?

A drone manufacturer employs a real-time operating system (RTOS) to ensure timely task executions. While optimizing for real-time performance, which of the following security concerns might arise?

Lexicon, an AI company, wants to implement a security measure to identify and evaluate potential threats to their systems and networks. Which of the following is an example of a managerial security control that the company could implement?

As a security analyst, you are reviewing application logs while investigating a suspected breach. Which of the following pieces of information is NOT typically documented in the application log data?

Kelly Innovations LLC wants to implement a network appliance that focuses on filtering traffic based on source and destination IP addresses, and port numbers. Which layer of the OSI model is this appliance primarily operating at?

Which method is used for the authentication process used in WPA2 with PSK?

Which of the following BEST describes the primary purpose of archiving as a method to bolster security monitoring?

Your organization is implementing deception controls within its cloud infrastructure to detect unauthorized access and malicious behavior. Identify the correct deception technology for each implementation.

A database server running PostgreSQL with intentionally weak authentication that logs all connection attempts and queries.

Your organization is implementing deception controls within its cloud infrastructure to detect unauthorized access and malicious behavior. Identify the correct deception technology for each implementation.

A fabricated customer database record with a unique email address that triggers alerts when contacted or exported.

Your organization is implementing deception controls within its cloud infrastructure to detect unauthorized access and malicious behavior. Identify the correct deception technology for each implementation.

Multiple AWS EC2 instances configured as a e-commerce platform with web servers, APIs, and databases on an isolated VPC.

Your organization is implementing deception controls within its cloud infrastructure to detect unauthorized access and malicious behavior. Identify the correct deception technology for each implementation.

A Word document named merger_acquisition_plans.docx stored in the legal department's cloud storage.

Consider the following terms associated with various social engineering attacks. Match each attack with the technique being used.

A user accidentally enters 'amaz0n.com' instead of 'amazon.com' and lands on a fake shopping site that looks identical to the legitimate retailer to capture their login credentials.

Consider the following terms associated with various social engineering attacks. Match each attack with the technique being used.

An attacker carefully creates a story about being a new employee who lost their badge on the first day to gain access to the building.

Consider the following terms associated with various social engineering attacks. Match each attack with the technique being used.

An attacker wearing a delivery uniform and carrying packages tailgates an employee into a secure building by claiming to have a delivery for the third floor.

Consider the following terms associated with various social engineering attacks. Match each attack with the technique being used.

Attackers spread false rumors on social media claiming a company's banking system was breached to cause its customers to panic and call support lines where attackers pose as help desk agents.

Which NIST Cybersecurity Framework implementation tier reflects an organization that adapts practices based on lessons learned and predictive indicators?

In a Zero Trust architecture, what component makes the decision to allow or deny access after evaluating policy and context?

Which CVSS base metric describes whether exploitation requires user action?

Who is primarily responsible for determining the purposes and means of processing personal data in an enterprise?

Which control BEST prevents unapproved software from running on endpoints?

What is the correct order of volatility during evidence collection?

Which statement BEST reflects the cloud shared‑responsibility model for SaaS?

Which defensive control is specifically designed to stop SQL injection and XSS in HTTP/S traffic?

During 802.1X authentication, which role is the network switch or AP performing?

Which RAID level provides striping with parity that tolerates a single drive failure?

Which activity immediately follows containment in the incident response lifecycle?

Which encryption approach is typically used to exchange a session key that then protects bulk data transfer?

Which data‑protection technique replaces sensitive values with reversible placeholders stored in a separate vault?

What SCADA/ICS component directly interfaces with sensors and actuators to control physical processes?

UEFI Secure Boot prevents execution of untrusted code at boot by validating which item first?

Which logging concept MOST improves threat hunting by centralizing events from endpoints, network devices, and apps?

Which SDLC practice reduces defects introduced by late security reviews?

Which DLP deployment monitors and controls data copied to USB media on laptops?

Kerberos primarily prevents which attack by using time‑stamped authenticators?

Which wireless standard first introduced operation in the 6 GHz band (Wi‑Fi 6E)?

What is the PRIMARY difference between OAuth 2.0 and OpenID Connect (OIDC)?

Which backup property specifies how often backups are taken (e.g., hourly vs. daily)?

Which deception control is a single decoy system designed to attract attackers?

Which port is used by LDAPS?

Which term refers to the acceptable deviation from expected results before management action is required?