An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess

Implement security awareness training.

The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIR

NGEW utilizing application inspection

An administrator needs to perform server hardening before deployment. Which of the following steps should the administra

Remove unnecessary services., Disable default accounts.

A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover

There is a single point of failure.

A utility company is designing a new platform that will host all the virtual machines used by business applications. The

Transitioning the platform to an laaS provider

A security team is setting up a new environment for hosting the organization's on-premises software application as a clo

Virtualization and isolation of resources

A systems administrator notices that one of the systems critical for processing customer transactions is running an end-

Placing the system in an isolated VLAN

A company allows customers to upload PDF documents to its public e-commerce website. Which of the following would a secu

Enabling malware detection through a UTM

Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric char

Increasing the minimum password length to 14 characters., Including a requirement for at least one special character.

Which of the following factors are the most important to address when formulating a training curriculum plan for a secur

Cadence and duration of training events, Threat vectors based on the industry in which the organization operates

studbud

Master Security+ Question 2

99 termsStudBud Administration

Imported from external platform

Flashcards99 cardsFPractice quizPHost liveL

Questions 99

Answers

1
Which of the following is a feature of a next-generation SIEM system?
Virus signatures
Automated response actions
Vulnerability scanning
Security agent deployment
2
A business needs a recovery site but does not require immediate failover. The business also wants to reduce the workload
Geographically dispersed
Hot
Cold
Warm
3
An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess
Deploy multifactor authentication.
Decrease the level of the web filter settings.
Update the acceptable use policy.
Implement security awareness training.
4
A software development team asked a security administrator to recommend techniques that should be used to reduce the cha
Using compile flags
Performing code obfuscation
Digitally signing the software
Limiting the use of third-party libraries
5
Which of the following teams is best suited to determine whether a company has systems that can be exploited by a potent
Red team
White team
Blue team
Purple team
6
The Chief Information Security Officer (CISO) at a large company would like to gain an understanding of how the company'
External examination
Attestation
Penetration test
Internal audit
7
A company wants to ensure that the software it develops will not be tampered with after the final version is completed.
Tokenization
Hashing
Baselines
Encryption
8
The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIR
WAF utilizing SSL decryption
NGEW utilizing application inspection
SD-WAN utilizing IPSec
UTM utilizing a threat feed
9
After conducting a vulnerability scan, a systems administrator notices that one of the identified vulnerabilities is not
False positive
True positive
False negative
True negative
10
Which of the following security concepts is accomplished with the installation of a RADIUS server?
CIA
AAA
PEM
ACL
11
Which of the following best describes the risk present after controls and mitigating factors have been applied?
Operational
Avoided
Inherent
Residual
12
During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following
Defensive
Physical
Passive
Offensive
13
The executive management team is mandating the company develop a disaster recovery plan. The cost must be kept to a mini
Warm site
Failover site
Hot site
Cold site
14
Which of the following threat actors is the most likely to be motivated by profit?
Insider Threat
Shadow IT
Hacktivist
Organized Crime
15
An administrator needs to perform server hardening before deployment. Which of the following steps should the administra
Remove unnecessary services.
Add the server to the asset inventory.
Document default passwords.
Disable default accounts.
16
An administrator finds that all user workstations and servers are displaying a message that is associated with files con
Virus
Spyware
Trojan
Ransomware
17
A user would like to install software and features that are not available with a smartphone's default software. Which of
Side loading
SQLi
Jailbreaking
Cross-site scripting
18
To improve the security at a data center, a security administrator implements a CCTV system and posts several signs abou
Preventive
Deterrent
Corrective
Detective
19
A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices
Plain text email
URL scanning
End user training
Policy review
20
A company is reviewing options to enforce user logins after several account takeovers. The following conditions must be
Trusted devices
Smart cards
Geotagging
Time-based logins
21
Which of the following is a possible factor for MFA?
Something you exhibit
Something you have
Somewhere you are
Someone you know
22
Which of the following describes an executive team that is meeting in a board room and testing the company's incident re
Parallel processing
Continuity of operations
Capacity planning
Tabletop exercise
23
Which of the following phases of an incident response involves generating reports?
Lessons learned
Containment
Preparation
Recovery
24
A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover
There is a single point of failure.
The equipment MTBF is unknown.
An RPO has not been determined.
The ISP has no SLA.
25
An engineer moved to another team and is unable to access the new team's shared folders while still being able to access
Discretionary
Role-based
Time of day
Least privilege
26
A utility company is designing a new platform that will host all the virtual machines used by business applications. The
Deploying multiple large NAS devices for each host
Configuring network load balancing for multiple paths
Connecting dual PDUs to redundant power supplies
Transitioning the platform to an laaS provider
27
Which of the following is the best way to secure an on-site data center against intrusion from an insider?
Motion sensor
Video surveillance
Access badge
Bollards
28
A systems administrator is changing the password policy within an enterprise environment and wants this update implement
Enabling PAP
Deploying Power Shell scripts
Updating EDR profiles
Pushing GPO update
29
An organization completed a project to deploy SSO across all business applications last year. Recently, the finance depa
RADIUS
SAML
OpenID
EAP
30
Which of the following describes the category of data that is most impacted when it is lost?
Confidential
Critical
Private
Public
31
A security team is setting up a new environment for hosting the organization's on-premises software application as a clo
Data encryption
Strong authentication policies
Network segmentation
Virtualization and isolation of resources
32
A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of th
Port security
IPS
Load balancer
NGFW
33
Which of the following should a security operations center use to improve its incident response procedure?
Playbooks
Frameworks
Benchmarks
Baselines
34
An IT manager is increasing the security capabilities of an organization after a data classification initiative determin
XDR
DLP
DMARC
SPF
35
In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to t
Salting
Key stretching
Tokenization
Data masking
36
A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then
Hashing
Symmetric
Salting
Asymmetric
37
A systems administrator notices that one of the systems critical for processing customer transactions is running an end-
Encrypting the system's hard drive
Decommissioning the system
Placing the system in an isolated VLAN
Installing HIDS on the system
38
A company allows customers to upload PDF documents to its public e-commerce website. Which of the following would a secu
Blocking command injections via a WAF
Enabling malware detection through a UTM
Limiting the affected servers with a load balance
Utilizing attack signatures in an IDS
39
Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric char
Increasing the maximum password age to 120 days.
Increasing the minimum password length to 14 characters.
Including a requirement for at least one special character.
Upgrading the password hashing algorithm from MD5 to SHA-512.
40
An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following
Segmentation
Tokenization
Hashing
Obfuscation
41
A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of
Virtualization
Containerization
Microservices
Infrastructure as code
42
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the foll
Serverless
Virtualization
Segmentation
Microservices
43
Which of the following factors are the most important to address when formulating a training curriculum plan for a secur
Cadence and duration of training events
Channels by which the organization communicates with customers
The reporting mechanisms for ethics violations
Threat vectors based on the industry in which the organization operates
44
A new employee logs in to the email system for the first time and notices a message from human resources about onboardin
Default credentials
Business email
Social engineering
Unsecured network
45
Which of the following best describes the practice of researching laws and regulations related to information security o
Compliance reporting
GDPR
Attestation
Due diligence
46
Employees located off-site must have access to company resources in order to complete their assigned tasks. These employ
VPN
Proxy server
Security zone
NGFW
47
A systems administrator would like to deploy a change to a production system. Which of the following must the administra
Approval procedure
Backout plan
Test procedure
Impact analysis
48
An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which
Metadata
Log data
Sensitive data
Encrypted data
49
After creating a contract for IT contractors, the human resources department changed several clauses. The contract has g
Version updates
Version validation
Version changes
Version control
50
Which of the following is classified as high availability in a cloud environment?
Cloud HSM
Access broker
WAF
Load balancer
51
A security analyst is investigating an application server and discovers that software on the server is behaving abnormal
Race condition
SQL injection
Memory injection
Side loading
52
A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the
Virtual private network
Transport layer security
Web application firewall
Port security
53
A company is experiencing a web services outage on the public network. The services are up and available but inaccessibl
ARP Poisoining
Brute Force
Buffer Overflow
DDoS
54
Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gam
Updating the categorization in the content filter
Configuring the IPS to allow shopping
Creating a firewall rule to allow HTTPS traffic
Tuning the DLP rule that detects credit card data
55
A technician is deploying a new security camera. Which of the following should the technician do?
Conduct a site survey.
Disable unnecessary ports.
Perform a vulnerability scan.
Configure the correct VLAN.
56
Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?
Impersonation of business units through typosquatting
Unidentified removable devices
Default network device credentials
Spear phishing emails
57
A software developer released a new application and is distributing application files via the developer's website. Which
Hashes
Certificates
Salting
Algorithms
58
A company wants to verify that the software the company is deploying came from the vendor the company purchased the soft
Search the executable for ASCIl strings.
Execute the code in a sandbox.
Validate the code signature.
Generate a hash of the files.
59
Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than th
RTO
ALE
RPO
ARO
60
An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to em
IPS
SCAP
DLP
SNMP traps.
61
Client files can only be accessed by employees who need to know the information and have specified roles in the company.
Availability
Confidentiality
Non-repudiation
Integrity
62
An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which
Disinformation
Whaling
Smishing
Impersonating
63
Which of the following agreement types defines the time frame in which a vendor needs to respond?
SLA
MOA
MOU
SOW
64
An important patch for a critical application has just been released, and a systems administrator is identifying all of
Network enumeration
Procurement process
Data certification
Asset inventory
65
An IT manager is putting together a documented plan describing how the organization will keep operating in the event of
Disaster recovery
Physical security
Change management
Business continuity
66
A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes t
To reduce implementation cost
To identify complexity
To remediate technical debt
To prevent a single point of failure
67
A Chief Information Security Officer would like to conduct frequent, détailed reviews of systems and procedures to track
Third-party attestation
Internal auditing
Vulnerability scans
Penetration testing
68
A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the followi
Application management
Full disk encryption
Remote wipe
Containerization
69
An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs
Firewall
Network
Authentication
Application
70
A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a secu
Buffer overflow attack
Replay attack
Memory leak
On-path attack
71
Which of the following most impacts an administrator's ability to address CVEs discovered on a server?
Risk tolerance
Rescanning requirements
Patch availability
Organizational impact
72
A user downloaded software from an online forum. After the user installed the software, the security team observed exter
The software was ransomware.
The software had a hidden keylogger.
The software contained a backdoor.
The user's computer had a fileless virus.
73
A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control s
Windows security
Firewall
ACL
IPS
74
Which of the following most likely describes why a security engineer would configure all outbound emails to use S/MIME d
To meet compliance standards
To block phishing attacks
To increase delivery rates
To ensure non-repudiation
75
A company that is located in an area prone to hurricanes is developing a disaster recovery plan and looking at site cons
Tertiary
Cold
Warm
Hot
76
Which of the following methods to secure credit card data is best to use when a requirement is to see only the last four
Hashing
Masking
Encryption
Tokenization
77
An organization would like to calculate the time needed to resolve a hardware issue with a server. Which of the followin
Recovery point objective
Mean time to repair
Recovery time objective
Mean time between failures
78
A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of t
Privacy
Integrity
Confidentiality
Availability
79
A systems administrator is advised that an external web server is not functioning property. The administrator reviews th
Brute-force
Directory traversal
HTTPS downgrade
DDoS
80
The Chief Information Security Officer (CISO) has determined the company is non-compliant with local data privacy regula
Contractual implications
Fines
Sanctions
Reputational damage
81
Which of the following describes the understanding between a company and a client about what will be provided and the ac
SLA
MOU
BPA
MOA
82
A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data
Certification
Sanitization
Destruction
Data retention
83
An enterprise is working with a third party and needs to allow access between the internal networks of both parties for
SD-WAN
EAP
IPSec
TLS
84
Which of the following methods would most likely be used to identify legacy systems?
Vulnerability scan
Package monitoring
Bug bounty program
Dynamic analysis
85
Which of the following alert types is the most likely to be ignored over time?
False negative
False positive
True positive
True negative
86
Which of the following security controls is most likely being used when a critical legacy server is segmented into a pri
Compensating
Deterrent
Preventative
Corrective
87
The marketing department set up its own project management software without telling the appropriate departments. Which o
Insider threat
Service disruption
Data exfiltration
Shadow IT
88
A systems administrator notices that the research and development department is not using the company VPN when accessing
Espionage
Nation-state attack
Shadow IT
Data exfiltration
89
A bank set up a new server that contains customers' PIl. Which of the following should the bank use to make sure the sen
Network access control
Full disk encryption
User behavior analytics
File integrity monitoring
90
Which of the following considerations is the most important for an organization to evaluate as it establishes and mainta
Physical location of the company
Role as controller or processor
Reporting structure for the data privacy officer
Request process for data subject access
91
Which of the following describes effective change management procedures?
Using an automatic change control bypass for security updates
Having a backout plan when a patch fails
Approving the change after a successful deployment
Using a spreadsheet for tracking changes
92
Which of the following security measures is required when using a cloud-based platform for loT management?
Firewall
Federated identity
Single sign-on
Encrypted connection
93
Which of the following best describes a use case for a DNS sinkhole?
A DNS sinkhole can be used to draw employees away from known-good websites
A DNS sinkhole can be used to capture traffic to known-malicious domains us
A DNS sinkhole can be set up to attract potential attackers away from a com
Attackers can see a DNS sinkhole as a highly valuable resource to identify
94
Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate e
To hunt for active attackers in the network
To continuously the monitor hardware inventory
To find shadow IT cloud deployments
To track the status of patching installations
95
A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following mod
Audit
Monitor
Sensor
Active
96
Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving later
ACL
NAC
EDR
IDS
97
Which of the following methods can be used to detect attackers who have successfully infiltrated a network? (Choose two.
CI/CD
DNS sinkhole
Tokenization
Honeypots
98
A healthcare organization wants to provide a web application that allows individuals to digitally report health emergenc
Availability
Ease of deployment
Scalability
Cost
99
A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but canno
Physical
Managerial
Compensating
Technical

Master Security+ Question 2 Flashcards | StudBud