SEC+ 601 CLOUD DAY 3 (April 2023)

What allows a customer to use Virtual Desktops provided by the CSP, we are connecting using a low cost client device?

What type of security will protect Industrial Control Systems such as energy providers?

When considering a cloud solution for a government department, what would represent the greatest Risk?

The attacker “breaks out” of a VM’s normally isolated state and interacts directly with the hypervisor?

What are published by Mitre & NIST to allow an enterprise to scan for known vulnerabilities within their networks?

An amusment park needs to ensure customers are not inconvenienced when using facial recognician, what is important?

What protocol ensures a hacker cannot sniff all traffic when a technician connects to the terminal session of a router?

What does microsoft use to encourage external security experts, to audit their security posture, with financial rewards?

A security layer that protects an organization’s data when hosted in the cloud?

The Payroll team are using facial recognition to authenticate to the banking app, what could be used as a 2nd Factor?

What pentest is used when the team are given ALL relevent documentation?

Processing is distributed & de-centralized in real time before being sent or recieved by cloud applications, what is it?

When security professionals attend security conferences and sign up for threat feeds, what do they bring to the company?

A Security Team are currently working at 100% firefighting the same recurring incidents, what could reduce the workload?

What metric allows security professionals to prioritise the most critical vulnerabilities after a SCAP scan?

A user authenticates to Microsoft365, 30 minutes later a hacker uses the same account from Kazakstan & is refused, Why?

What technique is used when a pen tester maps out your systems and services?

What team will defend your network, during a drill - allowing the security team to remain aware of real world threats?

What cloud model is being used when my development team share responsibility with the cloud service provider

What Cloud Service would we use when users access software applications deployed by the Cloud Service Provider (CSP)?

What element within SOAR can reduce time to tasks and provide automated responses to threats?

What team will mimic external threat actors, during a simulated attack?

What automated protocol allows an enterprise to discover unsecured computer systems?

What allows for aggregation of log files, resulting in reporting dashboards, alerts and advanced analytics?

What is the Syslogging?

What type of Federation would be used, when enterprise users access business SaaS applications?