SEC+ Network Security JAN 2022 (Day 3 AM)

hackers managed to invoke command interpreters using native tools, how can we prevent this Happening in the future?

Acme decides to move to a 3rd party SAAS provider to deliver payroll services for staff. What is the Risk Management?

users need to access a windows 10 desktop, in the datacenter what is a secure cost effective device for the users?

administrators have installed un-authorized tools on their workstations, how can we prevent this Happening in the future

A company needs to centralize its logs to create a baseline and have visibility on its security events?

Which of the following methods of authentication are known as two-factor authentication?

A company wants to start accepting credit cards for payment, which requires compliance with which security standard?

During a blackbox pen test engagement, the pentester must map out all services on the customers network. What tool?

How to test a if web application will be able to handle unexpected or random input without crashing?

How can we segment business units on a common switch stack?

What will technicians use to ensure confidentiality whilst remotely managing network devices?

You are configuring firewall rules to allow DNS for external name resolution, what port will you allow?

A company addresses risk by moving an in-house service to a third-party SaaS provider. What management strategy?

Logs show thousands of half-open connections to port 443 on the web server. They originate from different IP addresses?

What gateway setting will reduce security but reduce traffic handled by the VPN concentrator?

Ann recieves an SMS that asked for bank details. What type of social engineering technique was used?

Users access corporate data on a personal mobile device, What protects the company data from being mingled with users?

What will be used to transfer photos from a mobile device to a printer when it is tapped against the reader?

What must I ensure is configured to route ALL traffic through VPN concentrator?

FISMA Regulatory compliance insists Remote administration must be end to end encrypted, What protocol would allow this?

A program that may be unwanted, the user consented to download it. It may include spyware or adware?

what command will list all the assigned permissions to files in the folder?

What is used to discover vulnerabilities on my datacenter servers?

How can we prevent looping on our switches?

Mary is managing the company’s wireless network that will use WPA2-PSK what Block cipher is MOST likely to be used?

what command will set all the permissions to full control for all files in the folder?

an analyst, is reviewing information regarding recent vulnerabilities. What will best indicate the platforms affected?

As part of a cost saving initiative you need to move your software development environment into the cloud, what service?

A CSO wants to validate the business's involvement in the incident response plan. What will the CSO MOST likely use?

How can I ensure IDS, DLP, and SIEM are able to view un-encrypted traffic transiting the perimeter network?

What is it when we use a wordlist against a list of employee accounts?

An embedded OS shows vulnerabilities during each monthly assessment. What BEST explains the OS vulnerable state?

a method for determining the tactics, techniques, and procedures of a threat against the organization's network

What account setting prevents user account being used in Canada and then in Scotland 30 minutes later?

identify applications a user was running and files that were open before the user's computer was shut off?

You are selecting a cloud model for a federal government department would would be the most appropriate?

What support is required on the hardware platform to ensure support for secure boot?

How can we separate finance and development networks whilst using existing network infrastructure?

You need to ensure servers are able to communicate with external stratum0 time servers, what protocol will be used?

We need to block access to Microsoft Netbios services on the firewall. What port should we block?

You must configure the firewall to allow for encrypted web traffic and allow technicians to securely configure networks?

A delivery driver follows an employee into a secure building, before the door shuts. What is this?

A technician is deploying an IDS solution, it must see all egress & ingress traffic for the network. Can this be done?

What will we use to ensure e-mail is secured when passing through hostile networks?

Research data does not need to be accessible by corporate networks or the Internet. What BEST protects the data?

A company's password database was posted on an internet forum. The username and passwords are stored in plan text.

Management insist Network Engineers must deploy all new servers in the cloud, they must maintain full control.

You must configure rules to allow technicians to quickly transfer config files & allow admins to securely copy files?

HIPPA Regulatory compliance insists patient records must be encrypted at rest, What algorithm would best achieve this?

how can we mitigate clients being redirected to malicious sites by corrupted name resolution?