stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
S+ Flashcards | StudBud
Explore
/
S+
S+
100 terms
·
StudBud Administration
·
177 plays
Imported from external platform
Flashcards
100 cards
F
Practice quiz
P
Host live
L
Questions
100
Answers
1
Question in picture
Data in transit
Encrypted
Critical
Intellectual property
2
Question in picture
Changing the remote desktop port to a non-standard number
Setting up a VPN and placing the jump server inside the firewall
Using a proxy for web connections from the remote desktop server
Connecting the remote server to the domain & increasing the password length
3
Question in picture
Blue
Purple
Yellow
Red
4
Question in picture
External audit
Insider threat
Phishing campaign
Penetration testing
5
Question in picture
Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53
Access list outbound permit 0.0.0.0/0 10.50.10.25/32 port 53
Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53ِ
Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53
6
Question in picture
Product software compatibility
Patch availability
Ease of recovery
Cost of replacement
7
Question in picture
Assigning individual user IDs
Reviewing logs more frequently
Using least privilege
Changing the default password
8
Question in picture
Input validation
Identify embedded keys
Code debugging
Static code analysis
9
Which of the following can be used to identify potential attacker activities without affecting production servers?
Zero Trust
Video surveillance
Geofencing
Honey pot
10
Question in picture
IMTTR
ARO
MTBF
RTO
11
Question in picture
Pushing GPO update
Updating EDR profiles
Deploying PowerShell scripts
Enabling PAP
12
Which of the following would be best suited for constantly changing environments?
Containers
SCADA
RTOS
Embedded systems
13
Question in picture
Permission restrictions
Data classification
Masking
Encryption at rest
14
Question in picture
Detection
Containment
Lessons learned
Analysis
15
Question in picture
User provisioning script
Ticketing workflow
Escalation script
Guard rail script
16
Question in picture
Secured zones
Threat scope reduction
Subject role
Adaptive identity
17
Question in picture
VPN IP address, company ID, facial structure
Password, authentication token, thumbprint
Company URL, TLS certificate, home address
Domain name, PKI, GeolP lookup
18
Question in picture
Non-repudiation
AAA
Zero Trust
CIA
19
Question in picture
Conduct a forensic investigation on the CEO's phone.
Issue a general email warning to the company.
Have the CEO change phone numbers.
Implement mobile device management.
Add a smishing exercise to the annual company training.
Cancel current employee recognition gift cards.
20
Question in picture
Red team
Open-source intelligence
Penetration testing
Bug bounty
21
Question in picture
Ease of deployment
Scalability
Availability
Cost
22
Which of the following involves an attempt to take advantage of database misconfigurations?
Buffer overflow
Memory injection
VM escape
SQL injection
23
Which of the following is used to add extra complexity before using a one-way data transformation algorithm?
Key stretching
Data masking
Salting
Steganography
24
Question in picture
An attacker is attempting to brute force ismith's account.
Ransomware has been deployed in the domain.
The user jsmith's account has been locked out.
A keylogger is installed on [smith's workstation
25
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
26
Question in picture
Testing input validation on the user input fields
Performing static code analysis on the software
Ensuring secure cookies are use
Performing code signing on company-developed software
27
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
28
Which of the following allows for the attribution of messages to individuals?
Access logs
Adaptive identity
Non-repudiation
Authentication
29
Question in picture
Logging endpoint and OS-specific security logs
Logging all NetFlow traffic into a SIEM
Enabling full packet capture for traffic entering and exiting the servers
Deploying network traffic sensors on the same subnet as the servers
30
Question in picture
Full disk
Asymmetric
Database
Partition
31
Question in picture
Automation
Manual audit
Attestation
Compliance checklist
32
Question in picture
Data in transit
Data sovereignty
Data in use
Geographic restrictions
33
Question in picture
Conduct a tabletop exercise with the team.
Set the maximum data retention policy.
Review the documents' data classification policy.
Securely store the documents on an air-gapped network.
34
Which of the following agreement types defines the time frame in which a vendor needs to respond?
MOU
MOA
SLA
SOW
35
Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? Select 2
Fencing
Sensor
Badge access
Sign-in sheet
Video surveillance
Access control vestibule
36
Which of the following incident response activities ensures evidence is properly handied?
Chain of custody
Legal hold
E-discovery
Preservation
37
Question in picture
Empty choice
Empty choice
Empty choice
Empty choice
Empty choice
Empty choice
38
Question in picture
Mitigate
Transfer
Accept
Avoid
39
Question in picture
A right to audit clause in vendor contracts and SOWs
A legally enforceable corporate acquisition policy
A thorough analysis of the supply chain
An in-depth penetration test of all suppliers and vendors
40
Question in picture
Query the file's metadata.
Use hexdump on the file's contents.
Check endpoint logs.
Obtain the file's SHA-256 hash.
41
Question in picture
Geographic dispersion
Platform diversity
Hot site
Load balancing
42
Question in picture
Logging controls should fail open.
Remote access points should fail closed.
Logical security controls should fail closed.
Safety controls should fail open.
43
Question in picture
Modify the content of recurring training.
Update the content of new hire documentation.
Send out periodic security reminders.
44
Question in picture
Proxy server
Jump server
Hypervisor
RDP server
45
Question in picture
Retraining requirements for individuals who fail phishing simulations
Channels by which the organization communicates with customers
The reporting mechanisms for ethics violations
Secure software development training for all personnel
Threat vectors based on the industry in which the organization operates
Cadence and duration of training events
46
Question in picture
Certificate authority linking
Digital signatures
Data tokenization
TPM presence
Public key management
Key escrow
47
Question in picture
Net Flow
Antivirus
DLP
SCAP
48
Question in picture
Data sovereignty regulation
Geolocation policy
Data masking
Encryption
49
Question in picture
Cross-site scripting
Jailbreaking
Buffer overflow
Side loading
50
Which of the following vulnerabilities is exploited when an attacker overwrites a register with a malicious address?
VM escape
Race condition
Buffer overflow
SQL injection
51
Question in picture
GPO
SPF
FIM
NAC
52
Question in picture
Failed password audit
Privilege escalation
Forgotten password by the user
Brute-force attack
53
Question in picture
IPSec
DHCP
EAP
NAT
54
Question in picture
Federation
Password complexity
Open authentication
Identity proofing
Password manager
Default password changes
55
Question in picture
Managerial
Operational
Technical
Physical
56
Which of the following describes the process of concealing code or text inside a graphical image?
Hashing
Data masking
Symmetric encryption
Steganography
57
Which of the following is the most likely to be included as an element of communication in a security awareness program?
Detecting insider threats using anomalous behavior recognition
Reporting phishing attempts or other suspicious activities
Verifying information when modifying wire transfer data
Performing social engineering as part of third-party penetration testing
58
Question in picture
Secure cookies
Code signing
Input validation
Version control
59
Question in picture
Geographic dispersion
Redundancy
Tablet exercise
Capacity planning
60
Question in picture
Security of cloud providers
Cost of implementation
Security of architecture
Ability of engineers
61
Question in picture
Create a rule to block outgoing email attachments.
Remove all user permissions from shares on the file server.
Apply classifications to the data.
Block access to cloud storage websites.
62
Question in picture
Non-repudiation
Confidentiality
Integrity
Availability
63
Question in picture
Rescan the network.
Submit a report.
Initiate a penetration test.
Conduct an audit.
64
Which of the following is the best reason to complete an audit in a banking environment?
Regulatory requirement
Organizational change
Service-level requirement
Self-assessment requirement
65
A security analyst is reviewing the following logs: Which of the following attacks is most likely occurring?
Pass-t he-hash
Brute-force
Account forgery
Password spraying
66
Question in picture
Corrective
Compensating
Preventive
Detective
67
Question in picture
Replacement
Insurance
Patching
Segmentation
68
Question in picture
Compensating controls exist.
It is considered noise.
A rescan is required.
It is a false positive.
69
Question in picture
Create a change control request.
Air gap the system.
Apply the patch to the system.
Move the system to a different network segment.
70
Question in picture
www.*.com
encryption=off\
:443
http://
71
Question in picture
Software as a service
Software-defined networking
Internet of Things
Infrastructure as code
72
Question in picture
Tuning the DLP rule that detects credit card data
Configuring the IPS to allow shopping
Creating a firewall rule to allow HTTPS traffic
Updating the categorization in the content filter
73
Question in picture
WAF
IDS
IPS
UAT
74
Which of the following is the most likely outcome if a large bank fails an internal PCI DSS compliance assessment?
Fines
Audit findings
Sanctions
Reputation damage
75
Question in picture
access-list inbound permit ig source 10.1.4.9/32 destination 0.0.0.0/0
access-list inbound deny ig source 10.1.4.9/32 destination 0.0.0.0/0
access-list inbound deny ig source 0.0.0.0/0 destination 10.1.4.9/32
access-list inbound permit ig source 0.0.0.0/0 destination 10.1.4.9/32
76
Question in picture
Impersonating
Whaling
Disinformation
Smishing
77
Which of the following security control types does an acceptable use policy best represent?
Compensating
Preventive
Detective
Corrective
78
Which of the following is a hardware-specific vulnerability?
SQL injection
Cross-site scripting
Buffer overflow
Firmware version
79
Question in picture
Insider threat
Social engineering
Unauthorized attacker
Watering-hole
80
Question in picture
Reflected denial of service
On-path resource consumption
Secure DNS cryptographic downgrade
Concurrent session usage
81
Question in picture
IPS
ACL
DLP
IDS
82
Which of the following enables the use of an input field to run commands that can view or manipulate data?
Side loading
Buffer overflow
SQL injection
Cross-site scripting
83
Question in picture
Organized crime
Whistleblower
Unskilled attacker
Hacktivist
84
Question in picture
Metadata
Packet captures
Vulnerability scans
Dashboard
85
Which of the following provides the details about the terms of a test with a third-party penetration tester?
Rules of engagement
Right to audit clause
Due diligence
Supply chain analysis
86
Question in picture
SDN
Serverless framework
SD-WAN
Type 1 hvpervisor
87
Question in picture
NDA
BPA
SOW
SLA
88
Question in picture
Hashing
Tokenization
Encryption
Masking
89
Question in picture
The end user changed the file permissions.
A rootkit was deployed.
A cryptographic collision was detected.
A snapshot of the file system was taken.
90
Which of the following would be the best way to block unknown programs from executing?
DLP solution
Host-based firewall
Access control list
Application allow list.
91
Question in picture
Building a load-balanced VPN solution with redundant internet
Purchasing a low-cost SD-WAN solution for VPN traffic
Using a cloud provider to create additional VPN concentrators
Deploying a SASE solution to remote employees
92
Question in picture
Content filtering
Data loss prevention
Group Policy
Access control lists
93
Question in picture
Quarantining
Archiving
Aggregating
Tuning
94
Question in picture
Warm
Hot
Real-time recovery
Cold
95
Which of the following describes the maximum allowance of accepted risk?
Risk threshold
Risk level
Risk score
Risk indicator
96
Which of the following should a security administrator adhere to when setting up a new set of firewall rules?
Business continuity plan
Disaster recovery plan
Change management procedure
Incident response procedure
97
Question in picture
Deterrent
Preventive
Corrective
Detective
98
Which of the following must be considered when designing a high-availability network? (Select two).
Ease of recovery
Physical isolation
Attack surface
Responsiveness
Extensible authentication
Ability to patch
99
Question in picture
Transfer of risk
SNMP traps
Compensating control
Network segmentation
100
Question in picture
Vulnerable software
Supply chain vendor
Default credentials
Non-segmented network
