Which security techniques should developers use to strengthen their web app against web-based attacks?

Input validation, Static code analysis

What is the main purpose of using access control lists (ACLs) in computer systems and networks?

To enforce mandatory access controls (MAC) on Linux systems

Upon alert of possible threat activity, what is the team’s first step in the incident response lifecycle?

Wait for more alerts to confirm the incident before taking any action

Which technique should the analyst consider applying to mitigate potential risks associated with NFC technology?

Enable NFC chip reading for all devices to enhance connectivity options.

Which tool would the consultant recommend to automate secure baseline deployment across all systems?

Center for Internet Security Configuration Assessment Tool(CIS-CAT) Pro

What should the sec team's primary initiative be to help employees identify and understand social engineering attacks?

Conducting situational awareness training

What is the MOST critical step in assessing third-party vendors to protect a company’s intellectual property?

Analyzing the potential vendors' past project completion times

Which strategy BEST minimizes misconfigurations and vulnerabilities in automation and orchestration systems?

Implement auto without understanding underlying sec policies and controls

Which of the following statements about applying common security techniques to computing resources is correct?

SSL primarily secures File Transfer Protocol (FTP) communications.

Which of the following actions should the administrator take to ensure the secure use of SNMP?

Leave the SNMP comm name blank or set to default to block unauthaccess

What is the purpose of implementing the principle of least privilege in endpoint protection?

To restrict user access to specific network resources

What is the CPO considering to ensure compliance with cross-border data regulations?

Auditing physical access controls at data centers to ensure compliance

What is the primary purpose of User Behavior Analytics (UBA) or User and Entity Behavior Analytics (UEBA)?

To automatically block or mitigate threats on individual hosts

What is the team's primary objective in the final phase of the inc response cycle after containing a major data breach?

Identifying stakeholders and reporting it to relevant parties

What security function would accomplish the need to ensure that sensitive information is not transmitted out via email?

Simple Network Management Protocol

What is the attacker doing to the organization in a bluesnarfing attack?

Stealing info from someone else's phone by using an exploit in Bluetooth

Which system should the team focus on to modify traffic in real time and block active threats?

Intrusion Detection System (IDS)

What is one of the key benefits of web filtering in cybersecurity operations?

Blocking encrypted web traffic (HTTPS) to prevent malicious activities

What is the BEST approach the security team should employ when incorporating automation?

Deploying automation scripts without testing or validation

What strategies should the IT manager prioritize to achieve secure automation?

Implementing a manual approval process for all automated tasks

What is the primary objective of the containment phase in the incident response cycle?

To identify the type of incident and impacted resources

What is the main goal of the containment phase in managing a cybersecurity incident involving a user account?

Remove all traces of the incident from affected systems, Limit the imm impact of the inc while securing data and notify stakeholder

What is the primary objective of the security team's threat-hunting exercise?

To reactively respond to alerts generated by incident management systems.

Which strategy MOST effectively achieves the corporation's goals regarding IT infrastructure upgrades?

Implementing auto and scripting to perform tasks quickly and efficiently

How can the sec lead justify implementing secure baselines for network devices, software, and other components to exec?

It enhances IT security and operational efficiencies.

Which of the following would be the MOST effective metric for tracking regulatory compliance risk?

The employee percentage who have received compliance training

What is the analysis phase primarily focused on achieving in the incident response cycle?

To remove the intrusion tools and unauth configuration changes from systems

Which legal document BEST outlines a project’s scope, deliverables, and timeline?

Memorandum of Understanding (MOU)

Which of the following is the MOST appropriate step for the risk manager?

Identify and assess the potential vuln and threats associated with the risk

What is an effective way to assess a vendor’s capabilities, security, and compliance before a partnership?

Gather and analyze the vendor's $ stability, rep, and tech capabilities

Which area will experience minimal improvement by implementing automation and orchestration?

Customization and application of vulnerability scanning

studbud

Cybersecurity final exam practice

103 termsStudBud Administration1 play

Test your knowledge on cybersecurity incident response procedures, threat detection, and attack types in this engaging quiz.

Flashcards103 cardsFPractice quizPHost liveL

Questions 103

Answers

1
Which security techniques should developers use to strengthen their web app against web-based attacks?
Input validation
Static code analysis
Secure cookies
Code signing
2
What is the main purpose of using access control lists (ACLs) in computer systems and networks?
To regulate and manage permissions for resource access and actions
To centrally manage and configure operating systems via Active Directory.
To establish standardized configuration baselines for devices
To enforce mandatory access controls (MAC) on Linux systems
3
Which network access control method should the CISO use to validate users and devices and prevent unauth access?
Media Access Control address filtering
Virtual Private Network concentrator
Stateless firewall
802.1X
4
What type of attack has the hacker achieved by exfiltrating a database of user passwords?
Dictionary
Password spraying
Offline
Brute force
5
Which type of assessment provides a broad evaluation of an organization's performance, practices, and capabilities?
Internal compliance assessment
Self-assessment
External assessment
Internal audit committee
6
Upon alert of possible threat activity, what is the team’s first step in the incident response lifecycle?
Immediately disconnect the affected server from the network to isolate it
Wait for more alerts to confirm the incident before taking any action
Notify the executive decision-maker to authorize actions before proceeding
Analyze the alert and its context to determine if a gen incident has occ
7
What must the team do next after completing the third step in the CompTIA incident response lifecycle?
Containment
Analysis
Detection
Preparation
8
Which technique should the analyst consider applying to mitigate potential risks associated with NFC technology?
Use NFC for direct payment transactions without mobile wallet apps.
Increase the NFC signal range to improve communication.
Apply encryption to NFC data to prevent eavesdropping and on-path attacks.
Enable NFC chip reading for all devices to enhance connectivity options.
9
Which tool would the consultant recommend to automate secure baseline deployment across all systems?
Center for Internet Security Configuration Assessment Tool(CIS-CAT) Pro
Puppet
Security Content Automation Protocol (SCAP)
Security Technical Implementation Guides (STIGs)
10
What should the sec team's primary initiative be to help employees identify and understand social engineering attacks?
Updating password policies
Completing a data privacy course
Conducting situational awareness training
Deploying a new firewall
11
Which protocol is BEST for securely transferring large financial files between offices in different cities?
SMTP
HTTP
FTP
SFTP
12
Which two methods are MOST effective for securing a company's sensitive financial information?
Tokenization and masking
Encryption and hashing
Permission restrictions and geographic restrictions
Obfuscation and segmentation
13
What type of attack is the user's post alluding to?
Command injection attack
Application attack
Injection attack
Forgery attack
14
Which wireless encryption standard provides the MOST robust protection for wireless data and is preferred by many org?
Wi-Fi Protected Access 3
Temporal Key Integrity Protocol
Wi-Fi Protected Access
Wired Equivalent Privacy
15
What is the MOST critical step in assessing third-party vendors to protect a company’s intellectual property?
Assess vendors by their sec practices comp record and data handling exp
Assess the potential vendor software dev method and programming languages
Comparing the cost of services offered by the potential vendors
Analyzing the potential vendors' past project completion times
16
Which strategy BEST minimizes misconfigurations and vulnerabilities in automation and orchestration systems?
Rely solely on vendor-supplied sec features without add validation or test
a threat model approach to identify potential vuln during the design phase
Outsourcing the autodev to the low bidder without considering sec expertise
Implement auto without understanding underlying sec policies and controls
17
Which of the following statements about applying common security techniques to computing resources is correct?
TLS 1.3 cipher suites include Rivest, Shamir, and Adelman for bulk encrypt
TLS 1.3 prevents downgrade attacks, reducing handshake messages
Hypertext Transfer Protocol Secure (HTTPS) operates over port 80 by default
SSL primarily secures File Transfer Protocol (FTP) communications.
18
Which of the following actions should the administrator take to ensure the secure use of SNMP?
Utilize SNMP v3 with a strong user base auth and encryption for secur monit
Leave the SNMP comm name blank or set to default to block unauthaccess
Use SNMP v1 or v2 since SNMP v3 is more complex and difficult to configure.
Set up SNMP agents to send community names in plaintext for ease of comm
19
What is the purpose of implementing the principle of least privilege in endpoint protection?
To enforce mandatory security configurations on devices
To manage firewall rules across an organization's network
To grant minimum permissions needed to perform tasks
To restrict user access to specific network resources
20
What kind of reporting is taking place when sending data access logs to healthcare regulatory authorities?
Privacy impact assessment
Internal compliance reporting
External compliance reporting
Data retention policy enforcement
21
What is the CPO considering to ensure compliance with cross-border data regulations?
Updating the corporation's firewall configuration for the new cloud service
Ensuring adherence to global data transfer frameworks and agreements
Auditing physical access controls at data centers to ensure compliance
Implementing region-specific data minimization practice for data collection
22
What is the primary purpose of User Behavior Analytics (UBA) or User and Entity Behavior Analytics (UEBA)?
To detect, investigate, and respond to advanced endpoint threats
To monitor and analyze users' behavior to detect potential threats
To establish a baseline profile for users' physical locations
To automatically block or mitigate threats on individual hosts
23
What is the team's primary objective in the final phase of the inc response cycle after containing a major data breach?
Restoring the affected system to a secure state to reintegrate it
Analyzing the incident to improve procedures or systems
Determining the root cause of the incident to eradicate it
Identifying stakeholders and reporting it to relevant parties
24
What is the CEO primarily concerned with after a data breach where sensitive customer financial data leaked?
Security infrastructure overhaul
Reputational damage
Privacy policy updates
Fines
25
What security function would accomplish the need to ensure that sensitive information is not transmitted out via email?
Secure File Transfer Protocol
Data loss protection
Simple Network Management Protocol
File Transfer Protocol
26
What is the CCO primarily concentrating on to minimize risks related to the handling of patient data?
Due diligence and care
Employee training program
Attestation and acknowledgment
Data encryption strategy
27
What is the attacker doing to the organization in a bluesnarfing attack?
Stealing info from someone else's phone by using an exploit in Bluetooth
Compromising any active and unpatched system, regardless if disc is enabled
Launchin effective attack using a peripheral device with malicious firmware
Sending unsolicited text messages or vCards to a discoverable device
28
Which system should the team focus on to modify traffic in real time and block active threats?
Network-based Intrusion Detection System (NIDS)
Intrusion Detection System (IDS)
Host-based Intrusion Detection System (HIDS)
Intrusion Prevention System (IPS)
29
Which security feature in the Linux kernel supports access control sec policies, including mandatory access cont (MAC)?
Group policy
SELinux
Configuration drift
Application allow lists
30
What is one of the key benefits of web filtering in cybersecurity operations?
Allowing access to inapp or non-work-related content for employee satis
Preventing malware infections and phishing attacks from malicious websites
Monitoring web activity to identify potential policy violations
Blocking encrypted web traffic (HTTPS) to prevent malicious activities
31
What is the BEST approach the security team should employ when incorporating automation?
Outsourcing automation development to a non-specialized third-party vendor
Deploying automation scripts without testing or validation
Utilizing a manual-only approach without integrating any automation tools
Integrating auto tools with real-time monitoring and alerting capabilities
32
What type of attack occurs when a website user requests a file in attempts of getting to the parent directory?
Injection attack
Directory traversal attack
Forgery attack
33
What strategies should the IT manager prioritize to achieve secure automation?
Outsourcing the dev of automation scripts to a specialized cybersec firm
Utilizing auto tools with built-in sec features and compliance monitoring
Implementing a manual approval process for all automated tasks
Introducing a proprietary system for auto without collab with secexperts
34
What is the primary objective of the containment phase in the incident response cycle?
To analyze the threat intelligence gathered during the incident
To isolate the attack to prevent further exploitation
To identify the type of incident and impacted resources
To fully restore affected systems from secure backups
35
What is the main goal of the containment phase in managing a cybersecurity incident involving a user account?
Remove all traces of the incident from affected systems
Disable a user account
Identify the root cause of the incident and gather evidenc for legal action
Limit the imm impact of the inc while securing data and notify stakeholder
36
Which practice is key to maintaining constant security awareness in a SOC?
Incident response planning
Log analysis and review
Threat intelligence gathering
Reporting and monitoring
37
What is the primary objective of the security team's threat-hunting exercise?
To reactively respond to alerts generated by incident management systems.
outsource incident response to third-party agencies for efficient handling
proactively discover evidence of known TTPs and indicator within network
completely isolate affected sys from the network to prevent further spread
38
Which protocol should the network administrator choose to secure communications between the org web server and clients?
Telnet
HTTP
HTTPS
SSH
39
What is the primary concern surrounding location services in mobile devices?
Battery consumption
Lack of accuracy
Limited availability
Privacy
40
Which strategy MOST effectively achieves the corporation's goals regarding IT infrastructure upgrades?
Manual monitoring of sec controls and change management protocols
Outsourcing the entire IT operations to a third-party vendor
Using proprietary security solutions without automation
Implementing auto and scripting to perform tasks quickly and efficiently
41
What type of attack is indicated by signs of forced entry on a window leading into a control room?
Distributed denial of service
On-path
Network
Brute force (physical)
42
How can the sec lead justify implementing secure baselines for network devices, software, and other components to exec?
It enhances IT security and operational efficiencies.
It reduces the need for logging and monitoring.
It promotes the use of default configurations.
It simplifies the process of patching and updates.
43
Which of the following would be the MOST effective metric for tracking regulatory compliance risk?
The employee percentage who have received compliance training
The number of market competitors the company has identified
The frequency of audits conducted by the regulatory authority
The total revenue the company generated from the new region
44
What is the analysis phase primarily focused on achieving in the incident response cycle?
To investigate the data and determine the type of incident and its severity
To restore the affected systems to their previous operational state.
To identify the root cause of the incident and implement preventive measure
To remove the intrusion tools and unauth configuration changes from systems
45
Which role is the startup playing when it collects user feedback and has subcontracted a third-party analytics firm?
Data custodian
Data subject
Data processor
Data controller
46
Which legal document BEST outlines a project’s scope, deliverables, and timeline?
Service level agreement (SLA) and statement of work (SOW)
Business Partnership Agreement (BPA) and Rules of Engagement (RoE)
Questionnaires and master services agreement (MSA)
Memorandum of Understanding (MOU)
47
Which of the following is the MOST appropriate step for the risk manager?
company’s mission-essential function and assess how the risk impact
Identify and assess the potential vuln and threats associated with the risk
Determine the likelihood and impact of the risk on the company's operations
Update the risk register with the mit strat and inform the stakeholders
48
What is an effective way to assess a vendor’s capabilities, security, and compliance before a partnership?
Rely on the vendors self-reported info and assurances of sec and compliance
Assess vendor's price and immediate avail of services and their capability
Evaluate the vendor's market mats and promo campaign checking their quality
Gather and analyze the vendor's $ stability, rep, and tech capabilities
49
Which area will experience minimal improvement by implementing automation and orchestration?
Manually initiated threat detection and response
Customization and application of vulnerability scanning
Monitoring systems solely for anomalous activities
Face-to-face cyber risk awareness training
50
What type of virus is the network administrator dealing with if it gained SYSTEM-level access and cleans logs?
Trojan
Malware
Rootkit
Ransomware
51
What incident response steps are MOST relevant for addressing the targeted data exfiltration incident?
Detection and recovery
Preparation and response
Containment and eradication
Analysis and lessons learned
52
What type of attack is indicated by incredibly slow connections and problems logging into user accounts?
Denial of Service
Ransomware
Trojan
Account compromise
53
What type of attack involves sending data that alters commands to a server?
Forgery attack
Injection attack
Replay attack
Cross-site Scripting
54
What method detects changes in normal baseline operating data sequences and identifies abnormal sequences?
Network traffic analysis
Behavioral-based detection
Signature-based detection
Network behavior and anomaly detection
55
What should the initial responder do first when a security breach is detected?
Notify law enforce auth about the incident to initiate immediate action
Disconnect affected server from the network isolating it from the prod env
Restore affect system from secure backups to recover and eliminate threat
threat hunting to find evidence of tactics techniques procedure proactively
56
What should the CIRT do in the containment phase to address an advanced spear phishing attack?
Immediate restore aff sys from BU and apply patches to stop further attack
Disconnect all affected host from the network and shut down all com channel
Temp disable all user account and application to prevent further spread
Use network segmentation to isolate and monitor infected systems.
57
What type of work environment best supports secure, resilient access to critical network resources?
Third-party outsourced work environment
Fully remote work environment
Hybrid work environment
On-premises work environment
58
Which mobile device deployment model gives the organization the MOST control over the device, thereby improving security
CYOD
COBO
BYOD
COPE
59
How can a healthcare provider meet data retention laws when patients request changes to their information?
Establishing a specific data retention policy
Regularly reviewing and updating privacy policies
Complying with mandated regulations
Maintaining extended data inventory
60
Which risk assessment methodology is the consultant MOST likely using?
Ad hoc risk assessments
Qualitative risk assessments
Qualitative and quantitative
Quantitative risk assessments
61
What is the primary objective of the "containment" phase in the CompTIA incident response lifecycle?
Restoring the affected system to a secure state
Identifying indicators of threat actor activity
Analyzing the incident and improving procedures or systems
Securing data and limiting the immediate impact
62
What order must the CIRT follow when performing the CompTIA incident response process?
Detection, analysis, eradication, restoration, improvement
Isolation, analysis, restoration, eradication, improvement
Preparation, analysis, isolation, containment, recovery
Detection, analysis, containment, eradication, recovery
63
Which action will the admin MOST likely take to refine the ACL and allow only necessary services to access the server?
Permit all incoming traffic to maintain functionality
Permit traffic only from trusted MAC addresses
Implement a stateful firewall for the server
Deny all traffic and allow exceptions based on requirement
64
Which intrusion detection method uses a baseline of normal traffic to detect and alert on anomalies?
Behavioral- and anomaly-based detection
Signature-based detection
Network traffic analysis (NTA)
Trend analysis
65
Which security technique would be MOST suitable for securing computing resources?
Applying context-aware auth to restrict resource access based on user loc
Indoor Positioning System to determine the phys position of employee device
Add geofencing to create a virtual boundary around the company's office
GPS tagging to add geo identification metadata to a company sensitive files
66
Which method replaces WPS as a more secure way to configure client devices for Wi-Fi access?
Device Provisioning Protocol (DPP)
Simultaneous Authentication of Equals (SAE)
Wi-Fi Protected Access 3 (WPA3)
Enhanced Open
67
What is the purpose of using a sandbox in endpoint security?
To manage group policies and access control lists
To restrict internet access on endpoint devices
To isolate and contain malicious files or processes
To enforce strong password policies for user accounts
68
What attacks could the company be experiencing if it is adding resiliency and high availability services?
Denial of Service
Cryptographic
On-path
Rogue Access Point
69
What type of security governance should they follow?
Centralized security governance
Decentralized security governance
Data protection authorities
Governance committees
70
What type of virus was the users comp MOST likely infected with if it shows a countdown clock threaten to encrypt files?
Ransomware
Crypto-ransomware
Logic bomb
Cryptojacking malware
71
What key personnel does the manager need support from to implement change management?
Stakeholders
Owner
Processor
Controller
72
What approach should the company use to ensure the vendor complies with the appropriate sec standards and regulations?
Ensure the vendor agrees to reg pen testing to verify security practices.
Prioritize the vendor's cost and ease of use over sec considerations
Sign a cont without requiring regular assess or audits of the vendor’s sec.
Rely on the vendor's repwithout the need to do any further assessments.
73
How can the cybersecurity manager explain the goal of physical port hardening to senior management?
It enables automatic network connections.
It blocks incoming and outgoing network traffic.
It encrypts data on USB drives.
It restricts access to physical interfaces.
74
Which approach BEST reflects using secure baselines when establishing consistent sec in the org's cloud infrastructure?
Implementing encryption for Data-at-Rest
Establishing standardized configurations for devices and software
Enforcing password complexity requirements
Setting up a virtual private network (VPN) for remote access
75
Which phase of the incident response lifecycle involves investigating the reported unusual network activity?
Analysis
Preparation
Containment
Eradication
76
What could have prevented the instabilities in existing software after implementing a mandatory security update?
Request for change
Stakeholders
Change management
Dependencies
77
What is the significance of ensuring the evidence is a true copy of the system state at the time of the breach?
It establishes the credibility and integrity of the evidence
It accelerates recovery by restor the system to the state before the breach
It eliminates the need for documentation in the investigation
It prevents unauthorized user access to the investigation
78
Which LDAP authentication method ensures secure access while minimizing open firewall ports?
It requires no authentication method
Simple Authentication and Security Layer
Lightweight Directory Access Protocol Secure
Simple Bind authentication method
79
WPA3 feature replaces the PSK exchange in WPA2 to stop attackers from intercept the Wi-Fi password after login capture?
Simultaneous authentication of equals (SAE)
Enhanced Open
Updated cryptographic protocols
Wi-Fi Easy Connect (DPP)
80
Which internal assessment method BEST evaluates control effectiveness and identifies risk or noncompliance?
Self-assessment
Regulatory assessment
Compliance assessment
Using an audit committee
81
What kind of attack is described when the HOSTS file was manipulated redirecting the CEO to a malicious website?
Domain name system poisoning
Domain name system attack indicators
Domain name system-based on-path attack
Domain name system client cache poisoning
82
Which control did the IT team use to protect ICS and SCADA systems?
Transport encryption protocols
Network segmentation
Regular system updates
Secure boot mechanisms
83
Which of the following considerations would be the MOST important in the vendor assessment process?
The vendor's market rep and branding to check for reliability and quality
Finding a vendor who can offer the low price for data sec and compliance
The vendor's geo location and proximity to the company's headquarters
The vendor's financial stability, op reliability, and data sec practices
84
Why would an organization use host-based intrusion detection/prevention (HIDS/HIPS) for security?
To protect beyond endpoints and include data from multiple infrastr comp
To protect individual hosts from unauthorized access or malicious activity.
To analyze user behavior and detect anomalies that suggest potential threat
To isolate malware on a host and restore the device to its original state.
85
What should be the security team's immediate initiative to mitigate the risk of weak and reused passwords?
Password management
Increasing the frequency of security audits
Upgrading the antivirus software
Implementing network segmentation
86
Which Wi-Fi auth method BEST meets the IT manager’s need to verify device identity and provide strong user auth?
Wi-Fi Protected Access3-Enterprise
Wired Equivalent Privacy
Open System Authentication
Wi-Fi Protected Access3-Pre-shared Key
87
Why is the security team implementing threat-hunting tactics?
To harden systems and create incident response resources.
To proactively discover evidence of threat actor activity.
To respond to security incidents after they have occurred.
To recover systems and restore data from backup.
88
Which sec technique is the admin preparing to implement to ensure consistent security configurations across all systems?
Multifactor authentication (MFA)
Intrusion detection system (IDS)
Patch management
Secure baselines
89
What should the employee have followed to build the server correctly?
Guidelines
Access control models
Standards
Policy
90
What is the purpose of the analysis engine in the IDS?
To update the signatures and rules for attack patterns
To capture network traffic
To interpret and scan captured traffic for suspicious activity
To generate incident reports for security analysts
91
What crucial benefit does implementing automation and orchestration in security operations provide?
Automation reduce human error by efficiently handling repetitive tasks.
Automation help simplify the nature of threat thus reducing the volume
Auto and orchestration eliminate the need for human interven in many sec op
Automation and orchestration lower costs by reducing cybersec staffneeds.
92
What is commonly associated with potentially unwanted programs?
It is software that is installed alongside a package selected by the user.
It is also known as grayware or bloatware.
It spread through concealment within the executable code of another process
It is malware concealed within an installer package that appears legitimate
93
What is the BEST explanation for how another user accessed the accounts after a hacker infiltrated the network?
Users sharing passwords
A backdoor virus
Installation of a key logger
A botnet
94
What should the risk manager prioritize in the risk management strategy?
Increasing the MTD for the function
Reducing the MTTR of the server
Extending the RTO for the function
Improving the MTBF of the server
95
Which cybersecurity approach analyzes user behavior to detect threats like insider attacks, account compromise, or fraud
Extended Detection and Response (XDR)
Endpoint Detection and Response (EDR)
User Behavior Analytics (UBA)/User and Entity Behavior Analytics (UEBA)
Host-based intrusion detection/prevention (HIDS/HIPS)
96
Why is the order of volatility significant during the data acquisition process?
Order of volatility ensure more vol evidence is collect before less voldata
Order of volatility helps ensure data is legally seized during an investig
Order of volatil applies to phys not digitalcrime scenes in investigations.
Order of volatility affect whether collected evidence is admissible n court
97
What part of the change plan will assist in returning systems to full operations immediately?
Impact analysis
Test results
Backout plan
Standard operating procedures
98
What type of virus is infecting the computers if containment is unknown due to the virus changing its code?
Boot
Polymorphic
Trojan
Script
99
What should the healthcare organization prioritize to clearly define expectations and responsibilities for both parties?
Establishing a verbal agreement without written documentation
Ignoring the need for clear communication between both parties
Focusing solely on the financial aspects of the partnership
both parties understanding their roles and responsibilities
100
Which action would MOST effectively reduce the risks associated with unauthorized use of portable storage devices?
Increasing the frequency of employee cybersecurity training
Regularly updating the company's firewall settings
Implementing a strict removable media policy
Replacing all Ethernet cables with shielded versions
101
Which Key Risk Indicator (KRI) metric is MOST critical for managing risks associated with new market expansion?
The number of regulatory violations reported by regulatory authorities
The number of new customers acquired in the new market expansion
The frequency of security incidents involving sensitive customer data
The level of market volatility currently affecting the corporation
102
Why is it crucial to ensure the admissibility of digital evidence collected from computer systems?
Digital evidence is often visible to the naked eye, ensuring its auth
Threat actors can tamper with dig evidence without affecting its integrity.
Digital evidence makes it easy to identify threat actors and their location
Due process and the fair app of laws require prop handl of digital evidence
103
Which of the following measures should the IT administrator implement to ensure the security of the LDAP directservice?
Use Simple Bind with plaintext of distinguished name and password
Use LDAP Secure on port 636 for secure user credential exchange
Allow anonymous access to the directory for easy user onboarding
Use the basic LDAP protocol without any additional security mechanisms

Cybersecurity final exam practice Flashcards | StudBud