Which of the following factors are the most important to address when formulating a training curriculum plan for a secur

Threat vectors based on the industry in which the organization operates, Cadence and duration of training events

An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess

Implement security awareness training.

A utility company is designing a new platform that will host all the virtual machines used by business applications. The

Transitioning the platform to an laaS provider

Which of the following describes effective change management procedures?

Having a backout plan when a patch fails

A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes t

To prevent a single point of failure

Which of the following considerations is the most important for an organization to evaluate as it establishes and mainta

Role as controller or processor

A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover

There is a single point of failure.

Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric char

Including a requirement for at least one special character., Increasing the minimum password length to 14 characters.

studbud

Master Security+ Question 2

99 termsStudBud Administration

Imported from external platform

Flashcards99 cardsFPractice quizPHost liveL

Questions 99

Answers

1
An IT manager is increasing the security capabilities of an organization after a data classification initiative determin
DMARC
SPF
DLP
XDR
2
A new employee logs in to the email system for the first time and notices a message from human resources about onboardin
Social engineering
Business email
Unsecured network
Default credentials
3
After creating a contract for IT contractors, the human resources department changed several clauses. The contract has g
Version validation
Version control
Version changes
Version updates
4
The Chief Information Security Officer (CISO) has determined the company is non-compliant with local data privacy regula
Reputational damage
Sanctions
Contractual implications
Fines
5
Which of the following factors are the most important to address when formulating a training curriculum plan for a secur
Channels by which the organization communicates with customers
The reporting mechanisms for ethics violations
Threat vectors based on the industry in which the organization operates
Cadence and duration of training events
6
An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess
Update the acceptable use policy.
Decrease the level of the web filter settings.
Implement security awareness training.
Deploy multifactor authentication.
7
Which of the following teams is best suited to determine whether a company has systems that can be exploited by a potent
Blue team
Red team
White team
Purple team
8
Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving later
NAC
ACL
EDR
IDS
9
The marketing department set up its own project management software without telling the appropriate departments. Which o
Service disruption
Insider threat
Shadow IT
Data exfiltration
10
A utility company is designing a new platform that will host all the virtual machines used by business applications. The
Deploying multiple large NAS devices for each host
Configuring network load balancing for multiple paths
Connecting dual PDUs to redundant power supplies
Transitioning the platform to an laaS provider
11
A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices
URL scanning
Policy review
End user training
Plain text email
12
To improve the security at a data center, a security administrator implements a CCTV system and posts several signs abou
Corrective
Detective
Deterrent
Preventive
13
Which of the following describes effective change management procedures?
Using an automatic change control bypass for security updates
Approving the change after a successful deployment
Having a backout plan when a patch fails
Using a spreadsheet for tracking changes
14
A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of
Infrastructure as code
Virtualization
Microservices
Containerization
15
A company wants to ensure that the software it develops will not be tampered with after the final version is completed.
Encryption
Baselines
Tokenization
Hashing
16
Which of the following describes the understanding between a company and a client about what will be provided and the ac
MOU
BPA
MOA
SLA
17
Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than th
ARO
RPO
ALE
RTO
18
A company is reviewing options to enforce user logins after several account takeovers. The following conditions must be
Trusted devices
Smart cards
Geotagging
Time-based logins
19
Which of the following best describes the practice of researching laws and regulations related to information security o
Due diligence
GDPR
Compliance reporting
Attestation
20
Which of the following should a security operations center use to improve its incident response procedure?
Baselines
Frameworks
Playbooks
Benchmarks
21
A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then
Salting
Symmetric
Hashing
Asymmetric
22
A bank set up a new server that contains customers' PIl. Which of the following should the bank use to make sure the sen
Full disk encryption
File integrity monitoring
Network access control
User behavior analytics
23
A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes t
To remediate technical debt
To reduce implementation cost
To identify complexity
To prevent a single point of failure
24
A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data
Certification
Data retention
Destruction
Sanitization
25
Which of the following considerations is the most important for an organization to evaluate as it establishes and mainta
Request process for data subject access
Physical location of the company
Role as controller or processor
Reporting structure for the data privacy officer
26
A healthcare organization wants to provide a web application that allows individuals to digitally report health emergenc
Cost
Ease of deployment
Scalability
Availability
27
Which of the following describes the category of data that is most impacted when it is lost?
Confidential
Public
Private
Critical
28
A technician is deploying a new security camera. Which of the following should the technician do?
Disable unnecessary ports.
Perform a vulnerability scan.
Conduct a site survey.
Configure the correct VLAN.
29
Employees located off-site must have access to company resources in order to complete their assigned tasks. These employ
Proxy server
Security zone
VPN
NGFW
30
Which of the following agreement types defines the time frame in which a vendor needs to respond?
SOW
SLA
MOA
MOU
31
Which of the following threat actors is the most likely to be motivated by profit?
Hacktivist
Insider Threat
Organized Crime
Shadow IT
32
A systems administrator is advised that an external web server is not functioning property. The administrator reviews th
DDoS
HTTPS downgrade
Brute-force
Directory traversal
33
A software developer released a new application and is distributing application files via the developer's website. Which
Algorithms
Certificates
Hashes
Salting
34
A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of th
NGFW
Port security
IPS
Load balancer
35
A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover
There is a single point of failure.
The equipment MTBF is unknown.
An RPO has not been determined.
The ISP has no SLA.
36
A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control s
IPS
Windows security
Firewall
ACL
37
An important patch for a critical application has just been released, and a systems administrator is identifying all of
Procurement process
Data certification
Network enumeration
Asset inventory
38
Which of the following methods to secure credit card data is best to use when a requirement is to see only the last four
Encryption
Tokenization
Hashing
Masking
39
A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following mod
Audit
Active
Sensor
Monitor
40
An organization would like to calculate the time needed to resolve a hardware issue with a server. Which of the followin
Recovery point objective
Recovery time objective
Mean time to repair
Mean time between failures
41
Which of the following phases of an incident response involves generating reports?
Preparation
Recovery
Containment
Lessons learned
42
A business needs a recovery site but does not require immediate failover. The business also wants to reduce the workload
Cold
Warm
Geographically dispersed
Hot
43
Which of the following is classified as high availability in a cloud environment?
Access broker
WAF
Load balancer
Cloud HSM
44
Which of the following is the best way to secure an on-site data center against intrusion from an insider?
Bollards
Video surveillance
Motion sensor
Access badge
45
Which of the following most likely describes why a security engineer would configure all outbound emails to use S/MIME d
To meet compliance standards
To block phishing attacks
To increase delivery rates
To ensure non-repudiation
46
A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a secu
Replay attack
Buffer overflow attack
On-path attack
Memory leak
47
An engineer moved to another team and is unable to access the new team's shared folders while still being able to access
Time of day
Discretionary
Least privilege
Role-based
48
Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric char
Increasing the maximum password age to 120 days.
Including a requirement for at least one special character.
Upgrading the password hashing algorithm from MD5 to SHA-512.
Increasing the minimum password length to 14 characters.
49
An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following
Hashing
Obfuscation
Segmentation
Tokenization
50
An enterprise is working with a third party and needs to allow access between the internal networks of both parties for
IPSec
TLS
SD-WAN
EAP
51
Which of the following security measures is required when using a cloud-based platform for loT management?
Federated identity
Firewall
Encrypted connection
Single sign-on
52
An administrator finds that all user workstations and servers are displaying a message that is associated with files con
Virus
Ransomware
Spyware
Trojan
53
Which of the following best describes a use case for a DNS sinkhole?
A DNS sinkhole can be set up to attract potential attackers away from a com
A DNS sinkhole can be used to capture traffic to known-malicious domains us
Attackers can see a DNS sinkhole as a highly valuable resource to identify
A DNS sinkhole can be used to draw employees away from known-good websites
54
An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to em
IPS
SNMP traps.
DLP
SCAP
55
Which of the following methods would most likely be used to identify legacy systems?
Vulnerability scan
Package monitoring
Dynamic analysis
Bug bounty program
56
After conducting a vulnerability scan, a systems administrator notices that one of the identified vulnerabilities is not
False positive
True negative
False negative
True positive
57
A systems administrator would like to deploy a change to a production system. Which of the following must the administra
Test procedure
Approval procedure
Impact analysis
Backout plan
58
A company wants to verify that the software the company is deploying came from the vendor the company purchased the soft
Validate the code signature.
Search the executable for ASCIl strings.
Execute the code in a sandbox.
Generate a hash of the files.
59
Which of the following describes an executive team that is meeting in a board room and testing the company's incident re
Continuity of operations
Tabletop exercise
Parallel processing
Capacity planning
60
An IT manager is putting together a documented plan describing how the organization will keep operating in the event of
Disaster recovery
Change management
Physical security
Business continuity
61
A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the followi
Remote wipe
Containerization
Full disk encryption
Application management
62
Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate e
To continuously the monitor hardware inventory
To hunt for active attackers in the network
To track the status of patching installations
To find shadow IT cloud deployments
63
A security team is setting up a new environment for hosting the organization's on-premises software application as a clo
Strong authentication policies
Data encryption
Virtualization and isolation of resources
Network segmentation
64
An organization completed a project to deploy SSO across all business applications last year. Recently, the finance depa
OpenID
RADIUS
EAP
SAML
65
Which of the following alert types is the most likely to be ignored over time?
False positive
True negative
False negative
True positive
66
A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of t
Integrity
Availability
Confidentiality
Privacy
67
A security analyst is investigating an application server and discovers that software on the server is behaving abnormal
Side loading
Race condition
Memory injection
SQL injection
68
A Chief Information Security Officer would like to conduct frequent, détailed reviews of systems and procedures to track
Penetration testing
Internal auditing
Vulnerability scans
Third-party attestation
69
Which of the following most impacts an administrator's ability to address CVEs discovered on a server?
Risk tolerance
Organizational impact
Patch availability
Rescanning requirements
70
An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which
Impersonating
Disinformation
Smishing
Whaling
71
The Chief Information Security Officer (CISO) at a large company would like to gain an understanding of how the company'
Penetration test
Attestation
Internal audit
External examination
72
Which of the following methods can be used to detect attackers who have successfully infiltrated a network? (Choose two.
CI/CD
DNS sinkhole
Tokenization
Honeypots
73
A company that is located in an area prone to hurricanes is developing a disaster recovery plan and looking at site cons
Tertiary
Warm
Hot
Cold
74
An administrator needs to perform server hardening before deployment. Which of the following steps should the administra
Disable default accounts.
Add the server to the asset inventory.
Remove unnecessary services.
Document default passwords.
75
A systems administrator notices that the research and development department is not using the company VPN when accessing
Espionage
Nation-state attack
Shadow IT
Data exfiltration
76
A company is experiencing a web services outage on the public network. The services are up and available but inaccessibl
Buffer Overflow
ARP Poisoining
DDoS
Brute Force
77
A user would like to install software and features that are not available with a smartphone's default software. Which of
Side loading
Cross-site scripting
Jailbreaking
SQLi
78
An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs
Firewall
Authentication
Application
Network
79
A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the
Port security
Transport layer security
Virtual private network
Web application firewall
80
An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which
Encrypted data
Metadata
Log data
Sensitive data
81
A systems administrator notices that one of the systems critical for processing customer transactions is running an end-
Installing HIDS on the system
Encrypting the system's hard drive
Placing the system in an isolated VLAN
Decommissioning the system
82
A company allows customers to upload PDF documents to its public e-commerce website. Which of the following would a secu
Utilizing attack signatures in an IDS
Enabling malware detection through a UTM
Blocking command injections via a WAF
Limiting the affected servers with a load balance
83
Which of the following security controls is most likely being used when a critical legacy server is segmented into a pri
Compensating
Preventative
Corrective
Deterrent
84
In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to t
Salting
Tokenization
Data masking
Key stretching
85
Which of the following is a feature of a next-generation SIEM system?
Vulnerability scanning
Security agent deployment
Automated response actions
Virus signatures
86
During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following
Physical
Offensive
Passive
Defensive
87
Which of the following is a possible factor for MFA?
Somewhere you are
Something you exhibit
Someone you know
Something you have
88
The executive management team is mandating the company develop a disaster recovery plan. The cost must be kept to a mini
Warm site
Failover site
Hot site
Cold site
89
Which of the following best describes the risk present after controls and mitigating factors have been applied?
Inherent
Avoided
Residual
Operational
90
A systems administrator is changing the password policy within an enterprise environment and wants this update implement
Enabling PAP
Deploying Power Shell scripts
Pushing GPO update
Updating EDR profiles
91
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the foll
Virtualization
Serverless
Segmentation
Microservices
92
Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gam
Updating the categorization in the content filter
Creating a firewall rule to allow HTTPS traffic
Configuring the IPS to allow shopping
Tuning the DLP rule that detects credit card data
93
A software development team asked a security administrator to recommend techniques that should be used to reduce the cha
Digitally signing the software
Using compile flags
Limiting the use of third-party libraries
Performing code obfuscation
94
A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but canno
Compensating
Managerial
Technical
Physical
95
The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIR
NGEW utilizing application inspection
WAF utilizing SSL decryption
UTM utilizing a threat feed
SD-WAN utilizing IPSec
96
A user downloaded software from an online forum. After the user installed the software, the security team observed exter
The user's computer had a fileless virus.
The software had a hidden keylogger.
The software contained a backdoor.
The software was ransomware.
97
Client files can only be accessed by employees who need to know the information and have specified roles in the company.
Integrity
Confidentiality
Non-repudiation
Availability
98
Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?
Spear phishing emails
Default network device credentials
Unidentified removable devices
Impersonation of business units through typosquatting
99
Which of the following security concepts is accomplished with the installation of a RADIUS server?
ACL
PEM
CIA
AAA

Master Security+ Question 2 Flashcards | StudBud