Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gam

Updating the categorization in the content filter

A security team is setting up a new environment for hosting the organization's on-premises software application as a clo

Virtualization and isolation of resources

An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess

Implement security awareness training.

The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIR

NGEW utilizing application inspection

A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover

There is a single point of failure.

A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes t

To prevent a single point of failure

An administrator needs to perform server hardening before deployment. Which of the following steps should the administra

Remove unnecessary services., Disable default accounts.

Which of the following describes effective change management procedures?

Having a backout plan when a patch fails

Which of the following factors are the most important to address when formulating a training curriculum plan for a secur

Threat vectors based on the industry in which the organization operates, Cadence and duration of training events

A systems administrator notices that one of the systems critical for processing customer transactions is running an end-

Placing the system in an isolated VLAN

studbud

Master Security+ Question 2

99 termsStudBud Administration

Imported from external platform

Flashcards99 cardsFPractice quizPHost liveL

Questions 99

Answers

1
The Chief Information Security Officer (CISO) at a large company would like to gain an understanding of how the company'
Penetration test
Attestation
External examination
Internal audit
2
A technician is deploying a new security camera. Which of the following should the technician do?
Perform a vulnerability scan.
Disable unnecessary ports.
Conduct a site survey.
Configure the correct VLAN.
3
A software developer released a new application and is distributing application files via the developer's website. Which
Algorithms
Salting
Certificates
Hashes
4
During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following
Offensive
Passive
Physical
Defensive
5
Which of the following methods can be used to detect attackers who have successfully infiltrated a network? (Choose two.
Tokenization
CI/CD
DNS sinkhole
Honeypots
6
Which of the following is a possible factor for MFA?
Something you exhibit
Somewhere you are
Something you have
Someone you know
7
Which of the following should a security operations center use to improve its incident response procedure?
Benchmarks
Playbooks
Baselines
Frameworks
8
A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but canno
Managerial
Technical
Compensating
Physical
9
Which of the following describes an executive team that is meeting in a board room and testing the company's incident re
Tabletop exercise
Parallel processing
Capacity planning
Continuity of operations
10
Employees located off-site must have access to company resources in order to complete their assigned tasks. These employ
Proxy server
Security zone
NGFW
VPN
11
Which of the following is a feature of a next-generation SIEM system?
Security agent deployment
Virus signatures
Vulnerability scanning
Automated response actions
12
A systems administrator is changing the password policy within an enterprise environment and wants this update implement
Deploying Power Shell scripts
Pushing GPO update
Updating EDR profiles
Enabling PAP
13
Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gam
Updating the categorization in the content filter
Tuning the DLP rule that detects credit card data
Configuring the IPS to allow shopping
Creating a firewall rule to allow HTTPS traffic
14
A security team is setting up a new environment for hosting the organization's on-premises software application as a clo
Virtualization and isolation of resources
Strong authentication policies
Network segmentation
Data encryption
15
Which of the following is classified as high availability in a cloud environment?
Cloud HSM
Access broker
WAF
Load balancer
16
An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess
Update the acceptable use policy.
Deploy multifactor authentication.
Implement security awareness training.
Decrease the level of the web filter settings.
17
Which of the following methods to secure credit card data is best to use when a requirement is to see only the last four
Masking
Hashing
Encryption
Tokenization
18
An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs
Application
Firewall
Authentication
Network
19
An administrator finds that all user workstations and servers are displaying a message that is associated with files con
Spyware
Ransomware
Virus
Trojan
20
Which of the following agreement types defines the time frame in which a vendor needs to respond?
MOU
MOA
SLA
SOW
21
The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIR
NGEW utilizing application inspection
UTM utilizing a threat feed
SD-WAN utilizing IPSec
WAF utilizing SSL decryption
22
A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then
Salting
Hashing
Symmetric
Asymmetric
23
Which of the following security concepts is accomplished with the installation of a RADIUS server?
ACL
AAA
PEM
CIA
24
An enterprise is working with a third party and needs to allow access between the internal networks of both parties for
SD-WAN
IPSec
EAP
TLS
25
Which of the following security controls is most likely being used when a critical legacy server is segmented into a pri
Compensating
Deterrent
Preventative
Corrective
26
A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover
An RPO has not been determined.
There is a single point of failure.
The equipment MTBF is unknown.
The ISP has no SLA.
27
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the foll
Serverless
Virtualization
Segmentation
Microservices
28
A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes t
To identify complexity
To remediate technical debt
To reduce implementation cost
To prevent a single point of failure
29
A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of t
Confidentiality
Privacy
Availability
Integrity
30
Which of the following security measures is required when using a cloud-based platform for loT management?
Federated identity
Firewall
Single sign-on
Encrypted connection
31
An administrator needs to perform server hardening before deployment. Which of the following steps should the administra
Document default passwords.
Remove unnecessary services.
Disable default accounts.
Add the server to the asset inventory.
32
A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the followi
Application management
Remote wipe
Full disk encryption
Containerization
33
The Chief Information Security Officer (CISO) has determined the company is non-compliant with local data privacy regula
Contractual implications
Sanctions
Fines
Reputational damage
34
A company wants to ensure that the software it develops will not be tampered with after the final version is completed.
Baselines
Tokenization
Hashing
Encryption
35
Which of the following best describes the practice of researching laws and regulations related to information security o
Attestation
Compliance reporting
Due diligence
GDPR
36
A business needs a recovery site but does not require immediate failover. The business also wants to reduce the workload
Warm
Cold
Geographically dispersed
Hot
37
Which of the following describes effective change management procedures?
Using a spreadsheet for tracking changes
Approving the change after a successful deployment
Having a backout plan when a patch fails
Using an automatic change control bypass for security updates
38
A security analyst is investigating an application server and discovers that software on the server is behaving abnormal
SQL injection
Side loading
Race condition
Memory injection
39
Which of the following phases of an incident response involves generating reports?
Preparation
Containment
Recovery
Lessons learned
40
Which of the following describes the understanding between a company and a client about what will be provided and the ac
SLA
MOA
BPA
MOU
41
An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following
Tokenization
Obfuscation
Hashing
Segmentation
42
A company that is located in an area prone to hurricanes is developing a disaster recovery plan and looking at site cons
Hot
Warm
Cold
Tertiary
43
A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control s
Firewall
ACL
Windows security
IPS
44
A healthcare organization wants to provide a web application that allows individuals to digitally report health emergenc
Cost
Ease of deployment
Scalability
Availability
45
An IT manager is putting together a documented plan describing how the organization will keep operating in the event of
Physical security
Business continuity
Disaster recovery
Change management
46
An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which
Impersonating
Smishing
Whaling
Disinformation
47
Which of the following factors are the most important to address when formulating a training curriculum plan for a secur
Channels by which the organization communicates with customers
The reporting mechanisms for ethics violations
Threat vectors based on the industry in which the organization operates
Cadence and duration of training events
48
In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to t
Salting
Data masking
Key stretching
Tokenization
49
Which of the following most likely describes why a security engineer would configure all outbound emails to use S/MIME d
To meet compliance standards
To increase delivery rates
To ensure non-repudiation
To block phishing attacks
50
A bank set up a new server that contains customers' PIl. Which of the following should the bank use to make sure the sen
User behavior analytics
File integrity monitoring
Network access control
Full disk encryption
51
A systems administrator notices that one of the systems critical for processing customer transactions is running an end-
Encrypting the system's hard drive
Placing the system in an isolated VLAN
Decommissioning the system
Installing HIDS on the system
52
An important patch for a critical application has just been released, and a systems administrator is identifying all of
Procurement process
Network enumeration
Data certification
Asset inventory
53
A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a secu
Buffer overflow attack
Replay attack
Memory leak
On-path attack
54
Which of the following methods would most likely be used to identify legacy systems?
Dynamic analysis
Bug bounty program
Package monitoring
Vulnerability scan
55
A Chief Information Security Officer would like to conduct frequent, détailed reviews of systems and procedures to track
Vulnerability scans
Penetration testing
Third-party attestation
Internal auditing
56
A systems administrator notices that the research and development department is not using the company VPN when accessing
Data exfiltration
Espionage
Shadow IT
Nation-state attack
57
The marketing department set up its own project management software without telling the appropriate departments. Which o
Shadow IT
Data exfiltration
Insider threat
Service disruption
58
An IT manager is increasing the security capabilities of an organization after a data classification initiative determin
SPF
DMARC
XDR
DLP
59
The executive management team is mandating the company develop a disaster recovery plan. The cost must be kept to a mini
Cold site
Warm site
Failover site
Hot site
60
An organization completed a project to deploy SSO across all business applications last year. Recently, the finance depa
SAML
RADIUS
OpenID
EAP
61
Which of the following considerations is the most important for an organization to evaluate as it establishes and mainta
Reporting structure for the data privacy officer
Physical location of the company
Role as controller or processor
Request process for data subject access
62
Which of the following best describes the risk present after controls and mitigating factors have been applied?
Avoided
Operational
Residual
Inherent
63
A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of th
IPS
Load balancer
NGFW
Port security
64
An engineer moved to another team and is unable to access the new team's shared folders while still being able to access
Discretionary
Time of day
Role-based
Least privilege
65
A company wants to verify that the software the company is deploying came from the vendor the company purchased the soft
Search the executable for ASCIl strings.
Execute the code in a sandbox.
Validate the code signature.
Generate a hash of the files.
66
Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric char
Including a requirement for at least one special character.
Increasing the minimum password length to 14 characters.
Increasing the maximum password age to 120 days.
Upgrading the password hashing algorithm from MD5 to SHA-512.
67
A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of
Virtualization
Infrastructure as code
Microservices
Containerization
68
Which of the following most impacts an administrator's ability to address CVEs discovered on a server?
Rescanning requirements
Patch availability
Risk tolerance
Organizational impact
69
Which of the following alert types is the most likely to be ignored over time?
False positive
False negative
True positive
True negative
70
An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which
Metadata
Log data
Encrypted data
Sensitive data
71
A new employee logs in to the email system for the first time and notices a message from human resources about onboardin
Business email
Default credentials
Social engineering
Unsecured network
72
Which of the following is the best way to secure an on-site data center against intrusion from an insider?
Motion sensor
Video surveillance
Access badge
Bollards
73
An organization would like to calculate the time needed to resolve a hardware issue with a server. Which of the followin
Recovery point objective
Recovery time objective
Mean time between failures
Mean time to repair
74
To improve the security at a data center, a security administrator implements a CCTV system and posts several signs abou
Preventive
Corrective
Detective
Deterrent
75
A user would like to install software and features that are not available with a smartphone's default software. Which of
Side loading
Cross-site scripting
Jailbreaking
SQLi
76
A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices
End user training
Plain text email
Policy review
URL scanning
77
An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to em
IPS
SCAP
DLP
SNMP traps.
78
Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than th
ARO
RTO
ALE
RPO
79
After conducting a vulnerability scan, a systems administrator notices that one of the identified vulnerabilities is not
True negative
True positive
False positive
False negative
80
Which of the following best describes a use case for a DNS sinkhole?
Attackers can see a DNS sinkhole as a highly valuable resource to identify
A DNS sinkhole can be used to capture traffic to known-malicious domains us
A DNS sinkhole can be set up to attract potential attackers away from a com
A DNS sinkhole can be used to draw employees away from known-good websites
81
A company allows customers to upload PDF documents to its public e-commerce website. Which of the following would a secu
Blocking command injections via a WAF
Enabling malware detection through a UTM
Limiting the affected servers with a load balance
Utilizing attack signatures in an IDS
82
Which of the following teams is best suited to determine whether a company has systems that can be exploited by a potent
Red team
Purple team
Blue team
White team
83
A company is experiencing a web services outage on the public network. The services are up and available but inaccessibl
Brute Force
DDoS
Buffer Overflow
ARP Poisoining
84
Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?
Spear phishing emails
Unidentified removable devices
Default network device credentials
Impersonation of business units through typosquatting
85
A systems administrator is advised that an external web server is not functioning property. The administrator reviews th
Brute-force
Directory traversal
DDoS
HTTPS downgrade
86
Which of the following threat actors is the most likely to be motivated by profit?
Hacktivist
Shadow IT
Organized Crime
Insider Threat
87
A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following mod
Audit
Active
Monitor
Sensor
88
Which of the following describes the category of data that is most impacted when it is lost?
Confidential
Critical
Private
Public
89
A software development team asked a security administrator to recommend techniques that should be used to reduce the cha
Digitally signing the software
Limiting the use of third-party libraries
Using compile flags
Performing code obfuscation
90
A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the
Port security
Virtual private network
Web application firewall
Transport layer security
91
After creating a contract for IT contractors, the human resources department changed several clauses. The contract has g
Version control
Version validation
Version changes
Version updates
92
A user downloaded software from an online forum. After the user installed the software, the security team observed exter
The software had a hidden keylogger.
The software contained a backdoor.
The user's computer had a fileless virus.
The software was ransomware.
93
Client files can only be accessed by employees who need to know the information and have specified roles in the company.
Confidentiality
Integrity
Availability
Non-repudiation
94
A systems administrator would like to deploy a change to a production system. Which of the following must the administra
Impact analysis
Backout plan
Test procedure
Approval procedure
95
Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate e
To continuously the monitor hardware inventory
To hunt for active attackers in the network
To track the status of patching installations
To find shadow IT cloud deployments
96
Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving later
IDS
NAC
EDR
ACL
97
A company is reviewing options to enforce user logins after several account takeovers. The following conditions must be
Time-based logins
Geotagging
Smart cards
Trusted devices
98
A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data
Destruction
Certification
Data retention
Sanitization
99
A utility company is designing a new platform that will host all the virtual machines used by business applications. The
Deploying multiple large NAS devices for each host
Transitioning the platform to an laaS provider
Connecting dual PDUs to redundant power supplies
Configuring network load balancing for multiple paths

Master Security+ Question 2 Flashcards | StudBud