SEC +

What it the useful in determining whether the long-term cost to transfer a risk is less than the impact of the risk?

Which of the following should a security administrator adhere to when setting up a new set of firewall rules?

A company is required to use certified hardware with networks. What addresses the risks associated with counterfeit HW?

Which of the following are cases in which an engineer should recommend the decommissioning of a network device? (Pick 2)

What would be the best way to handle a critical business application that is running on a legacy server?

Which of the following security control types does an acceptable use policy best represent?

A recent ransomware attack on a company's system, an admin reviewed the log files. What control types did the admin use?

What is required for an organization to properly manage it's restore process in the event of system failure?

Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? (pick 2)

What describes the process of concealing code or text inside a graphical image?

Which vulnerabilities is associated with installing software outside of a manufacturer’s approved software repository?

What should a systems administrator use to ensure an easy deployment of resources within the cloud provider?

A company is required to perform a risk assessment on an annual basis. What type of risk assessments does this described

Which of the following is the most common data loss path for an air-gapped network?

How could an ADMIN ensure workstations and servers are properly monitored for unauthorized changes and software?

Which of the following provides the details about the terms of a test with a third-party penetration tester?

A legacy device is being decommissioned and is no longer receiving updates or patches. What describes this scenario?

Which of the following is the best reason to complete an audit in a banking environment?

A security admin would like to protect data on employees’ laptops. What encryption techniques should the admin use?

A company purchased cyber insurance to address items listed on the risk register. What strategies does this represent?

What teams combines both offensive and defensive testing techniques to protect an organization's critical systems?

What is used to add extra complexity before using a one-way data transformation algorithm?

Which of the following describes the maximum allowance of accepted risk?

Which of the following is the most likely to be used to document risks, responsible parties, and thresholds?

Which of the following is the best way to secure an on-site data center against intrusion from an insider?

Which of the following would be best suited for constantly changing environments?

Which of the following is used to validate a certificate when it is presented to a user?

A bank insists all of its vendors must prevent data loss on stolen laptops. What strategies is the bank requiring?

What practices would be best to prevent an insider from introducing malicious code into a company's development process?

An Org's website is comprised when attacker exploited buffer overflow, what should be the best protection against?

A company must ensure sensitive data at rest is rendered unreadable. What will the company most likely use?

Which of the following exercises should an organization use to improve its incident response process?

Which technologies is least effective means of preventing shared accounts?

Which of the following vulnerabilities is exploited when an attacker overwrites a register with a malicious address?

Which of the following incident response activities ensures evidence is properly handled?

Which of the following can best protect against an employee inadvertently installing malware on a company system?