SEC+ Network Security JAN 2022 (Day 3 AM)

administrators have installed un-authorized tools on their workstations, how can we prevent this Happening in the future

An embedded OS shows vulnerabilities during each monthly assessment. What BEST explains the OS vulnerable state?

What will be used to transfer photos from a mobile device to a printer when it is tapped against the reader?

how can we mitigate clients being redirected to malicious sites by corrupted name resolution?

Management insist Network Engineers must deploy all new servers in the cloud, they must maintain full control.

Research data does not need to be accessible by corporate networks or the Internet. What BEST protects the data?

What account setting prevents user account being used in Canada and then in Scotland 30 minutes later?

You are selecting a cloud model for a federal government department would would be the most appropriate?

How to test a if web application will be able to handle unexpected or random input without crashing?

A technician is deploying an IDS solution, it must see all egress & ingress traffic for the network. Can this be done?

what command will list all the assigned permissions to files in the folder?

You must configure rules to allow technicians to quickly transfer config files & allow admins to securely copy files?

Mary is managing the company’s wireless network that will use WPA2-PSK what Block cipher is MOST likely to be used?

What is used to discover vulnerabilities on my datacenter servers?

what command will set all the permissions to full control for all files in the folder?

What gateway setting will reduce security but reduce traffic handled by the VPN concentrator?

Logs show thousands of half-open connections to port 443 on the web server. They originate from different IP addresses?

What is it when we use a wordlist against a list of employee accounts?

You need to ensure servers are able to communicate with external stratum0 time servers, what protocol will be used?

As part of a cost saving initiative you need to move your software development environment into the cloud, what service?

an analyst, is reviewing information regarding recent vulnerabilities. What will best indicate the platforms affected?

We need to block access to Microsoft Netbios services on the firewall. What port should we block?

a method for determining the tactics, techniques, and procedures of a threat against the organization's network

What will we use to ensure e-mail is secured when passing through hostile networks?

You are configuring firewall rules to allow DNS for external name resolution, what port will you allow?

A program that may be unwanted, the user consented to download it. It may include spyware or adware?

You must configure the firewall to allow for encrypted web traffic and allow technicians to securely configure networks?

A company's password database was posted on an internet forum. The username and passwords are stored in plan text.

Which of the following methods of authentication are known as two-factor authentication?

A company needs to centralize its logs to create a baseline and have visibility on its security events?

A CSO wants to validate the business's involvement in the incident response plan. What will the CSO MOST likely use?

users need to access a windows 10 desktop, in the datacenter what is a secure cost effective device for the users?

Ann recieves an SMS that asked for bank details. What type of social engineering technique was used?

How can I ensure IDS, DLP, and SIEM are able to view un-encrypted traffic transiting the perimeter network?

identify applications a user was running and files that were open before the user's computer was shut off?

What must I ensure is configured to route ALL traffic through VPN concentrator?

How can we separate finance and development networks whilst using existing network infrastructure?

hackers managed to invoke command interpreters using native tools, how can we prevent this Happening in the future?

What support is required on the hardware platform to ensure support for secure boot?

How can we prevent looping on our switches?

HIPPA Regulatory compliance insists patient records must be encrypted at rest, What algorithm would best achieve this?

Users access corporate data on a personal mobile device, What protects the company data from being mingled with users?

How can we segment business units on a common switch stack?

What will technicians use to ensure confidentiality whilst remotely managing network devices?

A company wants to start accepting credit cards for payment, which requires compliance with which security standard?

Acme decides to move to a 3rd party SAAS provider to deliver payroll services for staff. What is the Risk Management?

During a blackbox pen test engagement, the pentester must map out all services on the customers network. What tool?

A delivery driver follows an employee into a secure building, before the door shuts. What is this?

FISMA Regulatory compliance insists Remote administration must be end to end encrypted, What protocol would allow this?

A company addresses risk by moving an in-house service to a third-party SaaS provider. What management strategy?