SEC + 701

Sec analyst & management team are reviewing phising campaign. More users clicked on the link. how to midigate this?

A sys adm works from a local hospital and needs to ensure patient data is protected and secure. which classafications?

Best way to consistently determine on a daily basis whether sec settings on a servers have been modified?

technician needs to apply a high-priority patch to a production sys. Which of the following steps should be taken first?

Sec controls ensure data is properly protected & that human life consideration are included. How should it be set up?

Which of the following valnerabilities is associated with installing software outside of manufacture's approved software

Which of the following enables the use of an input field to run commands that can view or manipulate data?

Which of the folloing is the most likely to be included as an element of communication in a security awareness program?

Which of the following bes decrives the action captured in this log file?

Company is working w verdor to perform a pen test whi of the followinh includes an estimate about the # of hrs to finish

IT manager and help desk lead will have access to the admin console of the helpdesk. What sec techniques is this?

Which following is used to protect a computer from a viruses,malware,Trojans being insta & moving laterally across net

After compromised, customers initiated a lawsuit. Attorneys have requested that the sec team initiate a legal hold

Describes a sec alerting & monitoring tool that collects sys, applicatio, net logs from multiple sources in a centralize

Following actions could a sec engineer take to ensure workstations & servers are properly monitored for unau chan & soft

Sys adm is changing the password policy within an enterprise environment & wants this updated implement0 on all sys fast

Which of the following would be the best ways to ensure onlyauthorized personnel can access the secure falility? (2)

After a recent ransomware attack on a compa sys, an adm reviewed the log files. What is the admin doing?

Pass must include 10 char, #, abc, & 2 special char. Once pass is created you gain access to other company-owned webs

An organization disabled unneeded services & placed a firewall in front of a business critial legacy sys. What is this?

SIEM alerts have not yet been configured. Which of the following best describes what the security analyst should do to

Secu opera center determines that the malicious activity detected on a server is normal. Ignoring detected act in future

Which of the following involves an attempt to take advantage of database misconfigurations?

Admin finds that all user worksta & servers are displaying a mesg that is associated with files containing an exte .ryk

Users reporting unable to access the URL for a new retail website b/c it is flaggled as a gambling and is being blocked.

Most useful in determining whether the long term cost to transfer a risk is less than the impact of the risk?

Following threat actors is the most likely to be hired by a foreign gov to attack critical sys located in other countrie

Tech wants to improve the situational & environ awar of existing users as they transition from remote to in-office work.

Company is disc a class storag array and hires an outside vendor to complete the disposal. Request what from the vendor?

Ensure sensative data at rest is rendered unreadable.

Which following tools can assist w detecting an employee who has accidentlly email a file containing a customer's PII?

followi sec concept is the best reason for a permision on a human resource fileshare to folow the principle of least pri

Company purchased cyber insurance to add items listed to the risk register. What does this represent?

Company is planning to set up a SIEM sys & assign an analyst to review the logs on a weekly basis. What do you set up?

Best prevent an insider from introducing malicious code into a company's dev process?

Which of the following must be considered when designing a high-availability network?

Marketing dep collects,modifies,stores sensitive customer data. infrastru team responsible for sec the data in transit

Company hires a consultant to perform an offensive sec assessment covering pen test & social engineering. Color team?

Sec manager created new documentation to use in response to various types of security incidents.

Which of the following sec controls types does an acceptable user policy best represent?

Which of the following is the type of data these employess are most likey to use in a day to day work activities?

Limit outbound DNS traffic from internal network. Outbound DNS request will only be allowed from 10.50.10.25. Which ACL?

Which of the following would be the best way to handle a critical business app that is running on a legacy server?

3rd party pen test showed a web app from field is vulnerable to cross-site scripting. How to prevent this vulnerability?

Chif info Sec Officer CISO raise awarness about the increase of ransomware as a service in a report to the mang team.

Software develpment manager wants to ensure the authenticity of a code created by the company. Which of the most appropr

Sec adm needs a method to sec data in an envir that includes some form of checks so that the admin can track any changes

Which of he following should a sys adm use to ensure an easy deployment of resources within a cloud provider?

Users are logging in from a suspicious IP add. It wasn't the employees logging in. Resets user's passwords. What else?

Sec admin would like to protect data on employee's laptops. Which following encryption techniques should the sec adm use

The marketing dep set up its own project management software w/o telling the appropriate departments.

Which of the following methods to sec credit card cata is best to use when a requirement is to see only the last 4 #?

Provide a secure zone, enforce a company-wide access control policy, reduce the scope of threats. What is he setting up?

After a sec incident a sys adin asks the company to buy a NAC platform. What attack surfaces is the sys admin trying?

Which of the following would be the best way to block unknown programps from executing?

Company wants to verify that software the compa is deployeing cam e form the vendor the company purchased the software.

Organization is leveraging a VPN between its headquarters & branch location. Which of the following is the VPN protectin

Company is developing a business continuity strategy & needs to determine how many staff members would be req to sutain

Sys adm is looking for a low cost app-hosting solution that is cloud based. Which meets these requirements?

After a recent vulerability scan a sec engineer needs to harden the routers within the corporate net. Disable what?

Which of the following can best protect against an employee inadvertently installing malware on a company system?

SIEM related potential malicious net traff coming from an employee's conporate laptop. What is the data source?

Visitors to s sec facility required to check in with photo ID and enter throught an access control vestibule.

Legal depa drafted sensit doc in a SaaS app & wants to ensur D docs can't be acces by individual in high-risk countries.

Suspicious caller stated that CFO wanted credit card info in order to close an invoice. What is this?

Sec analyst receives alerts about an internal sys sending a large amount of unusual DNS queries to sys on the int over

Company is required to use certified hardware when building networks. what addresses conterfeit hardware?

Adm discov some files on a database server were rercently enc. Security logs show data was enc by domain user.

Which of the following would be best suited for constantlyy changing environments?

Local admin account for a company's VPN app was unexpectedly used to log into the remote mng int. How to prevent this?

Best practices gives admin a set period of peform changes to an operational sys to ensure availability & minimize impact

Healthcare org wants to provide a web app that allows indiv to digitally report heatlth emergeny. Whats a consideration?

A company needs to provide adm access to internal resorces while minimizing the traffic allowed throught the security.

A company decided to reduce the cost of its annual cyber insurance policy by removing the coverage for ransomware attack

Company is developing a critical sys for the gov & storing project info on a fileshare. Most likely be classifled? (2)

Company prevented direct access from the database admin workstation to the network seg that contains database servers.

Data adm is config authen for SaaS app & would like to reduce the # of credent employees need to maintain. Domain Creden

Admin assists the leagal & compliance team w ensuring info about customer transaction is archived for the proper time.

Employee receives a text message from an unknown # claiming to be the company's CEO & asking the employe to buy giftcard

Which of the following describes the reason root cause analysis should be conducted as part of incident response?

User attempting to patch a critical sys, but the patch fails to transfer. What is mostly likey inhibiting the transfer?

Risk mana strategies should an enterprise adopt 1st in a legacy app is critical to business op & controls that are not

Client demads at least 99.99% uptime from a service provider's hosted sec services. What doc includes this?

Company is expanding its threat surface program & allowing individuals to security test the company's internet-facing ap

Several employees receive a froudlent text msg from someone clainig to be the CEO. "i have no email, buy gift cards" (2)

Which of the following is the most likely outcome in a large bank fails an internal PCI DSS compliance assessment?

Trobleshot a firewall config a technici determi that a "deny any" policy should be add to the bottom. server unreachable

An attacker posing as the CEO calls an employee & instructs the employee to buy gift cards. which of the following tech

Which of the following is a primary security concern for a company settin gup a BYOD program?

Which of the following is used to quantitative measure the criticality of a vulnerability?

Sec analyst scans a company's public net & disco a host is run a remote desktop that can be used to acces the prduction

Manag team notices that a new accouts that are set up manually do not always have correct access or permissions.fast fix

Org would like to store customer data on a separate part of the net that is not accessible to users on the main net.

Which of the following teams combaines both offensive and defensive testing techinques to protect an org cirtical sys?

Discovers that software on the server is behaving abnormally. The software normally runs batch jobs locally. What vulner

Which of the following whould the security annalys conclude for this reported vulnerability?

An org internet-facing website was compromised when an attacker exploited a buffer overflow. Best way to protect against

Adm was notified that a user logged in remotely after hrs & copied large amouts of data to a personal device.

Which of the following can be used to identify potential attacker activities without affecting product servers?

Which of the following is the most common data loss path for an air-gapped network?

During an investigation, an incident response team attempts to understand the source of an incident. What describes this

sec team discovers kiosks use end of life operationg sys. Sec team mostly likely to doc as a sec implication of architec

Company is adding a clause to its AUP that states employes are not allowed to modify the op sys on mobile dev.

Activity logs show multiple failed atteps on jsmith account (invalid code).

Users are unable to reach external websites. The CPU, disk, mem usage are min, but the net int is floded w inbound traff

Which of the following would help ensure a sec analyst is able to accurately measure the overall risk to an org new vul

Technician is opening ports on a firewall for a new sys being deployed & supported by SaaS provider. What is a new risk?

Which of the following is used to validate a cert when it is presented to a user?

An analyst is evaluating the implementation of Zero Trust principles within the dat plane. Most relevent for the analyst

Which of the following threats actors is the most likely use large financial resourc to attack critical sys othe country

Which of the following is the phase in the incident response process when a security analyst reviews roles & responsibil

Which of the following is the best reason to complete an audit in a banking environment?

Employe receives a txt msg that appears to have been sent by the payroll depart and is asking for cred verification. (2)

Which of the following is used to add extra complexity before using a one-way data tranformation algorithm?

Bank insists all of its vendors must provent data loss on stolen laptops. Which strategies is the bank requiring?

Gained access to a sys via a phising attempt that was direct result of a user clicking a suspisous link. Ransomware.

10.1.4.9 sec analyst is creating an inbound firewall rule to block the ip add frmo accesssing the org net. which rule?

Monitor the company's servers for SQLi attacks & allow for comprehensive investingations is an attack occurs. SSL decryp

Which of the following scenarios describe a possible business email compromise attack?

Company's web filter is config to scan the URL for strings & deny access when matches are found. Stop access to non-encr

A company is concerned about weather events causing damage to the server room & downtime. What's the solution?

Which of the following is the most likely to be used to document risk, responsible parties, & thresholds?

Expressions are included in source code to remove special characters such as $,|,;.&,`, and ? What is this technique?

A company is planning a disaster recov site & needs to ensure that a single natural disaster would not result in the los

Sys adm is creating a script that would save time & prevent human error when performing account creation for a big #.

Which of the following allows for the attribution of messages to individuals?

After an audit, an admin discovers all users have acces to confidential data on a file server. Use to restrict acces?

Struggling w scaling issues on its VPN concentrator & internet circuit due to remote work. Looking for software solution

Engineer needs to find a solution that creaates an added layer of sed preventing unauthorized access to internal company

Which of the following are cases in which an engineer should recommend the decommissioning of a net device? (select 2)

Buisness received a small grant to migrate its infrastructure to an off premises solution. Consider first?

Pen test engagement by performing port & service scans againts the client env accoriding to the rules of engageme. recon

US based cloud-hosting provider wants to expand its data centers to new international locations. Hosting provider consid

Sys admin wants to provent users from being able to access data based on their responsibilities. Via a simple format.

Sec practitioner completes a vulnerability assessment on a company's net & finds several vulenrabilityes, op team remedi

Which of the following agreement types defines the time frame in which a vendor needs to respond?

Strengthen a pass & prevent a hacker from caracking it, a random string of 36 cha was added to the pass. What is this?

Building a new backup data center with cost benefit as primary requirement and RTO and RPO values around two days. Best

Company is planning to set up a SIEM sys & analyst to review logson a weekly baisis. What is this control?

Sec admin is deploying a DLP solution to prevent the exfiltration of sensitive custorer data. What is 1st?

Which of the follo has been impleme when a host-based firewall on a legacy Linux sys allows connec from only int IP add?

Which of the following describes the process of concealing code or text inside a graphical image?

An organization disabled unneeded services and placed a firewall in from of a buisness-critical legacy system.

Which of the following is required for an organization to properly manage its restore process in the event of a sys fail

Protect the company's VPN by implementing multifactor authentication that uses- Something you know, have and are.

Sys adm set up a perimeter firewall but continues to notic sus connections between internal endpoints. Set up what?

Sec engineer is implementing FDE for all laptops in an organization. Important in the lanning process? (click 2)

Company has begun labeling all laptops w asset inventory stickers & associating them w employee IDs. Whats a sec benefit

Malware spreads across a company's network after an employee visited a compromised industry blog. What type of attack?

Sec analyst locates a potentially maliciou video file on a server & needs to identify both the creation data & file crea

Company requires hard drives to be securely wiped before sending decommissioned sys to recycle. What is this policy?

Clien asks security company to provide a doc outlining the project, cost, completion time frame. What doc is this?

Auto use cases would best enhance the security posture of an org by rapidly updating permision when empl leave a company

Clicked a link in an email from payment website that asked the employee to update contrac info. lead to "page not found"

which is the following attack?

Which of the following provides the details about the terms of a test with a 3rd party pen test?

3rd-party vendor to do a penetration test that targets a spacific device. The org has provided basic info about the devi

Following roles, accoriding to the shared respon model, is responsible for sec the compa's database in IaaS cloud enviro

Which of the following incident response activities ensures evidence is properly handied?

Which of the following vulnerabilities is exploited when an attacker overwrites a register whith a malicious address?

Which of the following much be considered when designing a high-availability network? (Select two)

Which of the following is a hardware-specific vulnerability?

Which of the following exercises should an organization use to improve its incident response process?

Sec consultant needs sec, remote access to a client environ. What should the sec consultant use to gain access?

Which of the following should a sec adm adhere to when setting up a new set of firewall rules?

Cybersecurity knowledge wants the board of directors to recieve a quarterly report detailing the # of incidents.

Newly identified net access vulnerability has been found in the OS of legacy IoT devices. Best way to mitigate this?

Following factors are the most important to add when formulating a traning curriculum plan for a sec awarenss (select 2)

Alert from file integrity monitoring tool: hash of the cmd.exe file has changed. The sys admin checks the OS logs.

Which of the following describes the maximum allowance of accepted risk?