Updating the categorization in the content filter

Threat vectors based on the industry in which the organization operates, Cadence and duration of training events

Apply classifications to the data.

Conduct a tabletop exercise with the team.

Password, authentication token, thumbprint

A thorough analysis of the supply chain

Modify the content of recurring training.

Federation, Password complexity

Issue a general email warning to the company., Add a smishing exercise to the annual company training.

Which of the following must be considered when designing a high-availability network? (Select two).

Attack surface, Ease of recovery

Deploying a SASE solution to remote employees

studbud

S+

100 termsStudBud Administration177 plays

Imported from external platform

Flashcards100 cardsFPractice quizPHost liveL

Questions 100

Answers

1
Question in picture
encryption=off\
www.*.com
http://
:443
2
Question in picture
Tuning the DLP rule that detects credit card data
Creating a firewall rule to allow HTTPS traffic
Updating the categorization in the content filter
Configuring the IPS to allow shopping
3
Question in picture
Proxy server
Hypervisor
RDP server
Jump server
4
Which of the following should a security administrator adhere to when setting up a new set of firewall rules?
Change management procedure
Disaster recovery plan
Incident response procedure
Business continuity plan
5
Question in picture
Red team
Bug bounty
Open-source intelligence
Penetration testing
6
Question in picture
The reporting mechanisms for ethics violations
Threat vectors based on the industry in which the organization operates
Cadence and duration of training events
Retraining requirements for individuals who fail phishing simulations
Channels by which the organization communicates with customers
Secure software development training for all personnel
7
Which of the following describes the process of concealing code or text inside a graphical image?
Data masking
Steganography
Symmetric encryption
Hashing
8
Question in picture
Identify embedded keys
Static code analysis
Code debugging
Input validation
9
Question in picture
Detection
Analysis
Containment
Lessons learned
10
Question in picture
Enabling PAP
Updating EDR profiles
Deploying PowerShell scripts
Pushing GPO update
11
Question in picture
Corrective
Detective
Deterrent
Preventive
12
Question in picture
External audit
Insider threat
Phishing campaign
Penetration testing
13
Question in picture
FIM
SPF
NAC
GPO
14
Question in picture
Create a rule to block outgoing email attachments.
Block access to cloud storage websites.
Apply classifications to the data.
Remove all user permissions from shares on the file server.
15
Which of the following is used to add extra complexity before using a one-way data transformation algorithm?
Key stretching
Data masking
Salting
Steganography
16
Question in picture
Set the maximum data retention policy.
Review the documents' data classification policy.
Conduct a tabletop exercise with the team.
Securely store the documents on an air-gapped network.
17
Question in picture
Data masking
Data sovereignty regulation
Encryption
Geolocation policy
18
Question in picture
On-path resource consumption
Secure DNS cryptographic downgrade
Concurrent session usage
Reflected denial of service
19
Question in picture
Conduct an audit.
Rescan the network.
Submit a report.
Initiate a penetration test.
20
Question in picture
IPSec
DHCP
EAP
NAT
21
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
22
Question in picture
Cold
Hot
Warm
Real-time recovery
23
Which of the following is the best reason to complete an audit in a banking environment?
Service-level requirement
Regulatory requirement
Self-assessment requirement
Organizational change
24
Question in picture
Masking
Permission restrictions
Encryption at rest
Data classification
25
Question in picture
Ease of recovery
Product software compatibility
Cost of replacement
Patch availability
26
Question in picture
Company URL, TLS certificate, home address
Domain name, PKI, GeolP lookup
VPN IP address, company ID, facial structure
Password, authentication token, thumbprint
27
Question in picture
A thorough analysis of the supply chain
An in-depth penetration test of all suppliers and vendors
A legally enforceable corporate acquisition policy
A right to audit clause in vendor contracts and SOWs
28
Question in picture
Full disk
Asymmetric
Database
Partition
29
Question in picture
Geographic restrictions
Data sovereignty
Data in transit
Data in use
30
Question in picture
Load balancing
Geographic dispersion
Platform diversity
Hot site
31
Question in picture
Modify the content of recurring training.
Send out periodic security reminders.
Update the content of new hire documentation.
32
Which of the following can be used to identify potential attacker activities without affecting production servers?
Geofencing
Zero Trust
Video surveillance
Honey pot
33
Question in picture
Supply chain vendor
Non-segmented network
Default credentials
Vulnerable software
34
Question in picture
Use hexdump on the file's contents.
Obtain the file's SHA-256 hash.
Check endpoint logs.
Query the file's metadata.
35
Question in picture
Secure cookies
Version control
Input validation
Code signing
36
A security analyst is reviewing the following logs: Which of the following attacks is most likely occurring?
Password spraying
Brute-force
Account forgery
Pass-t he-hash
37
Question in picture
Open authentication
Federation
Identity proofing
Default password changes
Password manager
Password complexity
38
Question in picture
Tokenization
Encryption
Masking
Hashing
39
Which of the following is a hardware-specific vulnerability?
Cross-site scripting
Buffer overflow
Firmware version
SQL injection
40
Question in picture
Serverless framework
SD-WAN
Type 1 hvpervisor
SDN
41
Which of the following would be the best way to block unknown programs from executing?
DLP solution
Application allow list.
Access control list
Host-based firewall
42
Question in picture
UAT
IDS
IPS
WAF
43
Question in picture
Have the CEO change phone numbers.
Cancel current employee recognition gift cards.
Conduct a forensic investigation on the CEO's phone.
Issue a general email warning to the company.
Implement mobile device management.
Add a smishing exercise to the annual company training.
44
Question in picture
Transfer
Avoid
Accept
Mitigate
45
Which of the following must be considered when designing a high-availability network? (Select two).
Attack surface
Ability to patch
Ease of recovery
Physical isolation
Responsiveness
Extensible authentication
46
Question in picture
Zero Trust
CIA
AAA
Non-repudiation
47
Which of the following would be best suited for constantly changing environments?
Containers
Embedded systems
RTOS
SCADA
48
Question in picture
Using a cloud provider to create additional VPN concentrators
Building a load-balanced VPN solution with redundant internet
Purchasing a low-cost SD-WAN solution for VPN traffic
Deploying a SASE solution to remote employees
49
Which of the following involves an attempt to take advantage of database misconfigurations?
Buffer overflow
SQL injection
Memory injection
VM escape
50
Question in picture
Side loading
Buffer overflow
Cross-site scripting
Jailbreaking
51
Question in picture
Tablet exercise
Capacity planning
Geographic dispersion
Redundancy
52
Question in picture
Social engineering
Insider threat
Watering-hole
Unauthorized attacker
53
Question in picture
Internet of Things
Software-defined networking
Software as a service
Infrastructure as code
54
Question in picture
Testing input validation on the user input fields
Performing code signing on company-developed software
Performing static code analysis on the software
Ensuring secure cookies are use
55
Question in picture
The user jsmith's account has been locked out.
A keylogger is installed on [smith's workstation
Ransomware has been deployed in the domain.
An attacker is attempting to brute force ismith's account.
56
Question in picture
User provisioning script
Ticketing workflow
Escalation script
Guard rail script
57
Which of the following is the most likely to be included as an element of communication in a security awareness program?
Performing social engineering as part of third-party penetration testing
Verifying information when modifying wire transfer data
Reporting phishing attempts or other suspicious activities
Detecting insider threats using anomalous behavior recognition
58
Question in picture
Replacement
Insurance
Segmentation
Patching
59
Which of the following vulnerabilities is exploited when an attacker overwrites a register with a malicious address?
Buffer overflow
Race condition
VM escape
SQL injection
60
Question in picture
Dashboard
Metadata
Vulnerability scans
Packet captures
61
Question in picture
Ease of deployment
Scalability
Cost
Availability
62
Which of the following is the most likely outcome if a large bank fails an internal PCI DSS compliance assessment?
Sanctions
Fines
Reputation damage
Audit findings
63
Which of the following security control types does an acceptable use policy best represent?
Preventive
Corrective
Compensating
Detective
64
Question in picture
Using least privilege
Reviewing logs more frequently
Changing the default password
Assigning individual user IDs
65
Which of the following enables the use of an input field to run commands that can view or manipulate data?
SQL injection
Buffer overflow
Cross-site scripting
Side loading
66
Question in picture
It is a false positive.
It is considered noise.
A rescan is required.
Compensating controls exist.
67
Question in picture
Technical
Physical
Operational
Managerial
68
Which of the following agreement types defines the time frame in which a vendor needs to respond?
SOW
MOU
MOA
SLA
69
Question in picture
Remote access points should fail closed.
Safety controls should fail open.
Logical security controls should fail closed.
Logging controls should fail open.
70
Question in picture
Yellow
Purple
Red
Blue
71
Question in picture
Threat scope reduction
Adaptive identity
Secured zones
Subject role
72
Question in picture
Antivirus
Net Flow
DLP
SCAP
73
Question in picture
SLA
SOW
NDA
BPA
74
Question in picture
Disinformation
Impersonating
Smishing
Whaling
75
Question in picture
TPM presence
Public key management
Data tokenization
Key escrow
Digital signatures
Certificate authority linking
76
Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? Select 2
Access control vestibule
Badge access
Sensor
Fencing
Sign-in sheet
Video surveillance
77
Question in picture
Logging endpoint and OS-specific security logs
Logging all NetFlow traffic into a SIEM
Deploying network traffic sensors on the same subnet as the servers
Enabling full packet capture for traffic entering and exiting the servers
78
Question in picture
Compensating control
SNMP traps
Transfer of risk
Network segmentation
79
Question in picture
ACL
IPS
DLP
IDS
80
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
81
Question in picture
Brute-force attack
Forgotten password by the user
Failed password audit
Privilege escalation
82
Question in picture
Whistleblower
Organized crime
Unskilled attacker
Hacktivist
83
Question in picture
Group Policy
Access control lists
Data loss prevention
Content filtering
84
Question in picture
A snapshot of the file system was taken.
A cryptographic collision was detected.
The end user changed the file permissions.
A rootkit was deployed.
85
Question in picture
Using a proxy for web connections from the remote desktop server
Setting up a VPN and placing the jump server inside the firewall
Connecting the remote server to the domain & increasing the password length
Changing the remote desktop port to a non-standard number
86
Question in picture
Compliance checklist
Automation
Manual audit
Attestation
87
Which of the following describes the maximum allowance of accepted risk?
Risk score
Risk indicator
Risk threshold
Risk level
88
Question in picture
access-list inbound deny ig source 0.0.0.0/0 destination 10.1.4.9/32
access-list inbound permit ig source 0.0.0.0/0 destination 10.1.4.9/32
access-list inbound permit ig source 10.1.4.9/32 destination 0.0.0.0/0
access-list inbound deny ig source 10.1.4.9/32 destination 0.0.0.0/0
89
Question in picture
Corrective
Detective
Compensating
Preventive
90
Question in picture
Apply the patch to the system.
Create a change control request.
Air gap the system.
Move the system to a different network segment.
91
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
Empty choice
Empty choice
92
Question in picture
Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53ِ
Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53
Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53
Access list outbound permit 0.0.0.0/0 10.50.10.25/32 port 53
93
Question in picture
Tuning
Archiving
Aggregating
Quarantining
94
Which of the following allows for the attribution of messages to individuals?
Access logs
Authentication
Adaptive identity
Non-repudiation
95
Which of the following incident response activities ensures evidence is properly handied?
E-discovery
Preservation
Legal hold
Chain of custody
96
Question in picture
Intellectual property
Encrypted
Data in transit
Critical
97
Question in picture
IMTTR
MTBF
RTO
ARO
98
Which of the following provides the details about the terms of a test with a third-party penetration tester?
Right to audit clause
Due diligence
Supply chain analysis
Rules of engagement
99
Question in picture
Integrity
Non-repudiation
Availability
Confidentiality
100
Question in picture
Ability of engineers
Security of cloud providers
Security of architecture
Cost of implementation

S+ Flashcards | StudBud

S+

100 termsStudBud Administration177 plays

Imported from external platform

Flashcards100 cardsFPractice quizPHost liveL

Questions 100

Answers

1
Question in picture
encryption=off\
www.*.com
http://
:443
2
Question in picture
Tuning the DLP rule that detects credit card data
Creating a firewall rule to allow HTTPS traffic
Updating the categorization in the content filter
Configuring the IPS to allow shopping
3
Question in picture
Proxy server
Hypervisor
RDP server
Jump server
4
Which of the following should a security administrator adhere to when setting up a new set of firewall rules?
Change management procedure
Disaster recovery plan
Incident response procedure
Business continuity plan
5
Question in picture
Red team
Bug bounty
Open-source intelligence
Penetration testing
6
Question in picture
The reporting mechanisms for ethics violations
Threat vectors based on the industry in which the organization operates
Cadence and duration of training events
Retraining requirements for individuals who fail phishing simulations
Channels by which the organization communicates with customers
Secure software development training for all personnel
7
Which of the following describes the process of concealing code or text inside a graphical image?
Data masking
Steganography
Symmetric encryption
Hashing
8
Question in picture
Identify embedded keys
Static code analysis
Code debugging
Input validation
9
Question in picture
Detection
Analysis
Containment
Lessons learned
10
Question in picture
Enabling PAP
Updating EDR profiles
Deploying PowerShell scripts
Pushing GPO update
11
Question in picture
Corrective
Detective
Deterrent
Preventive
12
Question in picture
External audit
Insider threat
Phishing campaign
Penetration testing
13
Question in picture
FIM
SPF
NAC
GPO
14
Question in picture
Create a rule to block outgoing email attachments.
Block access to cloud storage websites.
Apply classifications to the data.
Remove all user permissions from shares on the file server.
15
Which of the following is used to add extra complexity before using a one-way data transformation algorithm?
Key stretching
Data masking
Salting
Steganography
16
Question in picture
Set the maximum data retention policy.
Review the documents' data classification policy.
Conduct a tabletop exercise with the team.
Securely store the documents on an air-gapped network.
17
Question in picture
Data masking
Data sovereignty regulation
Encryption
Geolocation policy
18
Question in picture
On-path resource consumption
Secure DNS cryptographic downgrade
Concurrent session usage
Reflected denial of service
19
Question in picture
Conduct an audit.
Rescan the network.
Submit a report.
Initiate a penetration test.
20
Question in picture
IPSec
DHCP
EAP
NAT
21
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
22
Question in picture
Cold
Hot
Warm
Real-time recovery
23
Which of the following is the best reason to complete an audit in a banking environment?
Service-level requirement
Regulatory requirement
Self-assessment requirement
Organizational change
24
Question in picture
Masking
Permission restrictions
Encryption at rest
Data classification
25
Question in picture
Ease of recovery
Product software compatibility
Cost of replacement
Patch availability
26
Question in picture
Company URL, TLS certificate, home address
Domain name, PKI, GeolP lookup
VPN IP address, company ID, facial structure
Password, authentication token, thumbprint
27
Question in picture
A thorough analysis of the supply chain
An in-depth penetration test of all suppliers and vendors
A legally enforceable corporate acquisition policy
A right to audit clause in vendor contracts and SOWs
28
Question in picture
Full disk
Asymmetric
Database
Partition
29
Question in picture
Geographic restrictions
Data sovereignty
Data in transit
Data in use
30
Question in picture
Load balancing
Geographic dispersion
Platform diversity
Hot site
31
Question in picture
Modify the content of recurring training.
Send out periodic security reminders.
Update the content of new hire documentation.
32
Which of the following can be used to identify potential attacker activities without affecting production servers?
Geofencing
Zero Trust
Video surveillance
Honey pot
33
Question in picture
Supply chain vendor
Non-segmented network
Default credentials
Vulnerable software
34
Question in picture
Use hexdump on the file's contents.
Obtain the file's SHA-256 hash.
Check endpoint logs.
Query the file's metadata.
35
Question in picture
Secure cookies
Version control
Input validation
Code signing
36
A security analyst is reviewing the following logs: Which of the following attacks is most likely occurring?
Password spraying
Brute-force
Account forgery
Pass-t he-hash
37
Question in picture
Open authentication
Federation
Identity proofing
Default password changes
Password manager
Password complexity
38
Question in picture
Tokenization
Encryption
Masking
Hashing
39
Which of the following is a hardware-specific vulnerability?
Cross-site scripting
Buffer overflow
Firmware version
SQL injection
40
Question in picture
Serverless framework
SD-WAN
Type 1 hvpervisor
SDN
41
Which of the following would be the best way to block unknown programs from executing?
DLP solution
Application allow list.
Access control list
Host-based firewall
42
Question in picture
UAT
IDS
IPS
WAF
43
Question in picture
Have the CEO change phone numbers.
Cancel current employee recognition gift cards.
Conduct a forensic investigation on the CEO's phone.
Issue a general email warning to the company.
Implement mobile device management.
Add a smishing exercise to the annual company training.
44
Question in picture
Transfer
Avoid
Accept
Mitigate
45
Which of the following must be considered when designing a high-availability network? (Select two).
Attack surface
Ability to patch
Ease of recovery
Physical isolation
Responsiveness
Extensible authentication
46
Question in picture
Zero Trust
CIA
AAA
Non-repudiation
47
Which of the following would be best suited for constantly changing environments?
Containers
Embedded systems
RTOS
SCADA
48
Question in picture
Using a cloud provider to create additional VPN concentrators
Building a load-balanced VPN solution with redundant internet
Purchasing a low-cost SD-WAN solution for VPN traffic
Deploying a SASE solution to remote employees
49
Which of the following involves an attempt to take advantage of database misconfigurations?
Buffer overflow
SQL injection
Memory injection
VM escape
50
Question in picture
Side loading
Buffer overflow
Cross-site scripting
Jailbreaking
51
Question in picture
Tablet exercise
Capacity planning
Geographic dispersion
Redundancy
52
Question in picture
Social engineering
Insider threat
Watering-hole
Unauthorized attacker
53
Question in picture
Internet of Things
Software-defined networking
Software as a service
Infrastructure as code
54
Question in picture
Testing input validation on the user input fields
Performing code signing on company-developed software
Performing static code analysis on the software
Ensuring secure cookies are use
55
Question in picture
The user jsmith's account has been locked out.
A keylogger is installed on [smith's workstation
Ransomware has been deployed in the domain.
An attacker is attempting to brute force ismith's account.
56
Question in picture
User provisioning script
Ticketing workflow
Escalation script
Guard rail script
57
Which of the following is the most likely to be included as an element of communication in a security awareness program?
Performing social engineering as part of third-party penetration testing
Verifying information when modifying wire transfer data
Reporting phishing attempts or other suspicious activities
Detecting insider threats using anomalous behavior recognition
58
Question in picture
Replacement
Insurance
Segmentation
Patching
59
Which of the following vulnerabilities is exploited when an attacker overwrites a register with a malicious address?
Buffer overflow
Race condition
VM escape
SQL injection
60
Question in picture
Dashboard
Metadata
Vulnerability scans
Packet captures
61
Question in picture
Ease of deployment
Scalability
Cost
Availability
62
Which of the following is the most likely outcome if a large bank fails an internal PCI DSS compliance assessment?
Sanctions
Fines
Reputation damage
Audit findings
63
Which of the following security control types does an acceptable use policy best represent?
Preventive
Corrective
Compensating
Detective
64
Question in picture
Using least privilege
Reviewing logs more frequently
Changing the default password
Assigning individual user IDs
65
Which of the following enables the use of an input field to run commands that can view or manipulate data?
SQL injection
Buffer overflow
Cross-site scripting
Side loading
66
Question in picture
It is a false positive.
It is considered noise.
A rescan is required.
Compensating controls exist.
67
Question in picture
Technical
Physical
Operational
Managerial
68
Which of the following agreement types defines the time frame in which a vendor needs to respond?
SOW
MOU
MOA
SLA
69
Question in picture
Remote access points should fail closed.
Safety controls should fail open.
Logical security controls should fail closed.
Logging controls should fail open.
70
Question in picture
Yellow
Purple
Red
Blue
71
Question in picture
Threat scope reduction
Adaptive identity
Secured zones
Subject role
72
Question in picture
Antivirus
Net Flow
DLP
SCAP
73
Question in picture
SLA
SOW
NDA
BPA
74
Question in picture
Disinformation
Impersonating
Smishing
Whaling
75
Question in picture
TPM presence
Public key management
Data tokenization
Key escrow
Digital signatures
Certificate authority linking
76
Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? Select 2
Access control vestibule
Badge access
Sensor
Fencing
Sign-in sheet
Video surveillance
77
Question in picture
Logging endpoint and OS-specific security logs
Logging all NetFlow traffic into a SIEM
Deploying network traffic sensors on the same subnet as the servers
Enabling full packet capture for traffic entering and exiting the servers
78
Question in picture
Compensating control
SNMP traps
Transfer of risk
Network segmentation
79
Question in picture
ACL
IPS
DLP
IDS
80
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
81
Question in picture
Brute-force attack
Forgotten password by the user
Failed password audit
Privilege escalation
82
Question in picture
Whistleblower
Organized crime
Unskilled attacker
Hacktivist
83
Question in picture
Group Policy
Access control lists
Data loss prevention
Content filtering
84
Question in picture
A snapshot of the file system was taken.
A cryptographic collision was detected.
The end user changed the file permissions.
A rootkit was deployed.
85
Question in picture
Using a proxy for web connections from the remote desktop server
Setting up a VPN and placing the jump server inside the firewall
Connecting the remote server to the domain & increasing the password length
Changing the remote desktop port to a non-standard number
86
Question in picture
Compliance checklist
Automation
Manual audit
Attestation
87
Which of the following describes the maximum allowance of accepted risk?
Risk score
Risk indicator
Risk threshold
Risk level
88
Question in picture
access-list inbound deny ig source 0.0.0.0/0 destination 10.1.4.9/32
access-list inbound permit ig source 0.0.0.0/0 destination 10.1.4.9/32
access-list inbound permit ig source 10.1.4.9/32 destination 0.0.0.0/0
access-list inbound deny ig source 10.1.4.9/32 destination 0.0.0.0/0
89
Question in picture
Corrective
Detective
Compensating
Preventive
90
Question in picture
Apply the patch to the system.
Create a change control request.
Air gap the system.
Move the system to a different network segment.
91
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
Empty choice
Empty choice
92
Question in picture
Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53ِ
Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53
Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53
Access list outbound permit 0.0.0.0/0 10.50.10.25/32 port 53
93
Question in picture
Tuning
Archiving
Aggregating
Quarantining
94
Which of the following allows for the attribution of messages to individuals?
Access logs
Authentication
Adaptive identity
Non-repudiation
95
Which of the following incident response activities ensures evidence is properly handied?
E-discovery
Preservation
Legal hold
Chain of custody
96
Question in picture
Intellectual property
Encrypted
Data in transit
Critical
97
Question in picture
IMTTR
MTBF
RTO
ARO
98
Which of the following provides the details about the terms of a test with a third-party penetration tester?
Right to audit clause
Due diligence
Supply chain analysis
Rules of engagement
99
Question in picture
Integrity
Non-repudiation
Availability
Confidentiality
100
Question in picture
Ability of engineers
Security of cloud providers
Security of architecture
Cost of implementation