stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Sec+ 701 Practice 7 Flashcards | StudBud
Explore
/
Sec+ 701 Practice 7
Sec+ 701 Practice 7
25 terms
·
StudBud Administration
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
Which of the following solutions should most likely be implemented?
IPsec
TLS
SD-WAN
EAP
2
Which of the following attacks is the organization experiencing?
Brute force
DDoS
ARP poisoning
Buffer overflow
3
A technician is deploying a new security camera. Which of the following should the technician do?
Configure the correct VLAN.
Conduct a site survey.
Disable unnecessary ports.
Perform a vulnerability scan.
4
Which of the following most impacts an administrator's ability to address CVEs discovered on a server?
Risk tolerance
Patch availability
Organizational impact
Rescanning requirements
5
Which of the following best describes this technique?
Tokenization
Data masking
Salting
Key stretching
6
Which of the following describes this example?
Salting
Asymmetric
Symmetric
Hashing
7
A software developer released a new application and is distributing application files via the developer's website.
Hashes
Certificates
Algorithms
Salting
8
Which of the following logs should be analyzed to identify the impacted host? (Choose two.)
Authentication
Network
Firewall
Application
DHCP
Database
9
Which of the following types of infections is present on the systems?
Trojan
Spyware
Virus
Ransomware
10
Which factors are most important to address when formulating a training plan for a security awareness program? Choose 2
Secure software development training for all personnel
Threat vectors based on the industry in which the organization operates
The reporting mechanisms for ethics violations
Channels by which the organization communicates with customers
Cadence and duration of training events
Retraining requirements for individuals who fail phishing simulations
11
Which of the following operating system security measures will the administrator most likely use?
Enabling PAC
Updating EDR profiles
Pushing GPO update
Deploying PowerShell scripts
12
Which of the following types of tests does this represent?
Defensive
Physical
Offensive
Passive
13
A bank set up a server with customers' PII. Which should the bank use to make sure sensitive data is not modified?
Full disk encryption
Network access control
User behavior analytics
File integrity monitoring
14
Which of the following fundamental security requirements does this project fulfil?
Availability
Integrity
Privacy
Confidentiality
15
Which would be most useful in determining whether the long-term cost to transfer a risk is less than impact of the risk?
RTO
RPO
ARO
ALE
SLE
16
A systems administrator would like to deploy a change to a production system.
Test procedure
Impact analysis
Backout plan
Approval procedure
17
Which of the following best describes the tool the administrator is using?
DLP
SCAP
IPS
SNMP traps
18
Which of the following describes effective change management procedures?
Using an automatic change control bypass for security updates
Having a backout plan when a patch fails
Using a spreadsheet for tracking changes
Approving the change after a successful deployment
19
Which of the following security infrastructure devices could have identified and blocked this activity?
NGFW utilizing application inspection
SD-WAN utilizing IPSec
UTM utilizing a threat feed
WAF utilizing SSL decryption
20
Which of the following should be configured on the existing network infrastructure to best prevent this activity?
Web application firewall
Virtual private network
Port security
Transport layer security
21
A security administrator is reissuing a former employee's laptop.
Sanitation
Data retention
Certification
Destruction
Enumeration
Classification
22
An organization wants to limit potential impact to its log-in database in the event of a breach.
Obfuscation
Tokenization
Hashing
Segmentation
23
Which of the following threat actors is the most likely to be motivated by profit?
Insider threat
Hacktivist
Organized crime
Shadow IT
24
Which of the following architectures is best suited for this goal?
Microservices
Serverless
Segmentation
Virtualization
25
Which of the following changes would allow users to access the site?
Creating a firewall rule to allow HTTPS traffic
Tuning the DLP rule that detects credit card data
Updating the categorization in the content filter
Configuring the IPS to allow shopping
