Which of the following describes effective change management procedures?

Having a backout plan when a patch fails

An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess

Implement security awareness training.

An administrator needs to perform server hardening before deployment. Which of the following steps should the administra

Disable default accounts., Remove unnecessary services.

The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIR

NGEW utilizing application inspection

Which of the following factors are the most important to address when formulating a training curriculum plan for a secur

Cadence and duration of training events, Threat vectors based on the industry in which the organization operates

A security team is setting up a new environment for hosting the organization's on-premises software application as a clo

Virtualization and isolation of resources

A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes t

To prevent a single point of failure

A systems administrator notices that one of the systems critical for processing customer transactions is running an end-

Placing the system in an isolated VLAN

studbud

Master Security+ Question 2

99 termsStudBud Administration

Imported from external platform

Flashcards99 cardsFPractice quizPHost liveL

Questions 99

Answers

1
A systems administrator is advised that an external web server is not functioning property. The administrator reviews th
Brute-force
DDoS
HTTPS downgrade
Directory traversal
2
A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of th
Load balancer
NGFW
Port security
IPS
3
Which of the following describes effective change management procedures?
Using a spreadsheet for tracking changes
Using an automatic change control bypass for security updates
Having a backout plan when a patch fails
Approving the change after a successful deployment
4
An administrator at a small business notices an increase in support calls from employees who receive a blocked page mess
Implement security awareness training.
Deploy multifactor authentication.
Decrease the level of the web filter settings.
Update the acceptable use policy.
5
Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than th
ALE
ARO
RTO
RPO
6
A systems administrator would like to deploy a change to a production system. Which of the following must the administra
Approval procedure
Test procedure
Impact analysis
Backout plan
7
A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a secu
Buffer overflow attack
On-path attack
Replay attack
Memory leak
8
Which of the following is the best way to secure an on-site data center against intrusion from an insider?
Access badge
Motion sensor
Bollards
Video surveillance
9
A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control s
Windows security
ACL
IPS
Firewall
10
The marketing department set up its own project management software without telling the appropriate departments. Which o
Insider threat
Shadow IT
Service disruption
Data exfiltration
11
An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following
Obfuscation
Hashing
Segmentation
Tokenization
12
An engineer moved to another team and is unable to access the new team's shared folders while still being able to access
Time of day
Role-based
Discretionary
Least privilege
13
Which of the following threat actors is the most likely to be motivated by profit?
Insider Threat
Hacktivist
Shadow IT
Organized Crime
14
An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs
Authentication
Network
Application
Firewall
15
A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following mod
Audit
Active
Monitor
Sensor
16
Which of the following is a feature of a next-generation SIEM system?
Automated response actions
Virus signatures
Security agent deployment
Vulnerability scanning
17
A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data
Data retention
Certification
Sanitization
Destruction
18
A software developer released a new application and is distributing application files via the developer's website. Which
Hashes
Salting
Algorithms
Certificates
19
Which of the following methods would most likely be used to identify legacy systems?
Vulnerability scan
Bug bounty program
Dynamic analysis
Package monitoring
20
Which of the following should a security operations center use to improve its incident response procedure?
Frameworks
Baselines
Benchmarks
Playbooks
21
To improve the security at a data center, a security administrator implements a CCTV system and posts several signs abou
Corrective
Preventive
Deterrent
Detective
22
An administrator needs to perform server hardening before deployment. Which of the following steps should the administra
Disable default accounts.
Document default passwords.
Remove unnecessary services.
Add the server to the asset inventory.
23
A technician is deploying a new security camera. Which of the following should the technician do?
Configure the correct VLAN.
Disable unnecessary ports.
Conduct a site survey.
Perform a vulnerability scan.
24
An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to em
IPS
DLP
SNMP traps.
SCAP
25
A new employee logs in to the email system for the first time and notices a message from human resources about onboardin
Default credentials
Unsecured network
Social engineering
Business email
26
In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to t
Tokenization
Key stretching
Data masking
Salting
27
Which of the following methods to secure credit card data is best to use when a requirement is to see only the last four
Encryption
Hashing
Tokenization
Masking
28
Client files can only be accessed by employees who need to know the information and have specified roles in the company.
Availability
Non-repudiation
Confidentiality
Integrity
29
Which of the following is a possible factor for MFA?
Somewhere you are
Something you have
Someone you know
Something you exhibit
30
A security analyst is investigating an application server and discovers that software on the server is behaving abnormal
Side loading
Race condition
SQL injection
Memory injection
31
The executive management team is mandating the company develop a disaster recovery plan. The cost must be kept to a mini
Cold site
Failover site
Hot site
Warm site
32
The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIR
NGEW utilizing application inspection
SD-WAN utilizing IPSec
WAF utilizing SSL decryption
UTM utilizing a threat feed
33
Which of the following security controls is most likely being used when a critical legacy server is segmented into a pri
Compensating
Deterrent
Corrective
Preventative
34
A bank set up a new server that contains customers' PIl. Which of the following should the bank use to make sure the sen
Network access control
File integrity monitoring
Full disk encryption
User behavior analytics
35
Which of the following most impacts an administrator's ability to address CVEs discovered on a server?
Rescanning requirements
Patch availability
Organizational impact
Risk tolerance
36
During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following
Defensive
Offensive
Physical
Passive
37
Which of the following is classified as high availability in a cloud environment?
WAF
Access broker
Load balancer
Cloud HSM
38
An enterprise is working with a third party and needs to allow access between the internal networks of both parties for
EAP
TLS
IPSec
SD-WAN
39
An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which
Sensitive data
Encrypted data
Metadata
Log data
40
A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then
Asymmetric
Hashing
Salting
Symmetric
41
Which of the following factors are the most important to address when formulating a training curriculum plan for a secur
Channels by which the organization communicates with customers
Cadence and duration of training events
Threat vectors based on the industry in which the organization operates
The reporting mechanisms for ethics violations
42
A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but canno
Managerial
Compensating
Technical
Physical
43
A security team is setting up a new environment for hosting the organization's on-premises software application as a clo
Virtualization and isolation of resources
Strong authentication policies
Network segmentation
Data encryption
44
A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes t
To prevent a single point of failure
To reduce implementation cost
To identify complexity
To remediate technical debt
45
A systems administrator notices that one of the systems critical for processing customer transactions is running an end-
Decommissioning the system
Encrypting the system's hard drive
Installing HIDS on the system
Placing the system in an isolated VLAN
46
After conducting a vulnerability scan, a systems administrator notices that one of the identified vulnerabilities is not
True positive
True negative
False negative
False positive
47
Which of the following methods can be used to detect attackers who have successfully infiltrated a network? (Choose two.
DNS sinkhole
CI/CD
Honeypots
Tokenization
48
A healthcare organization wants to provide a web application that allows individuals to digitally report health emergenc
Ease of deployment
Scalability
Cost
Availability
49
Which of the following phases of an incident response involves generating reports?
Recovery
Preparation
Lessons learned
Containment
50
Which of the following teams is best suited to determine whether a company has systems that can be exploited by a potent
Purple team
Red team
Blue team
White team
51
Employees located off-site must have access to company resources in order to complete their assigned tasks. These employ
VPN
Security zone
NGFW
Proxy server
52
Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate e
To find shadow IT cloud deployments
To continuously the monitor hardware inventory
To track the status of patching installations
To hunt for active attackers in the network
53
Which of the following describes the category of data that is most impacted when it is lost?
Private
Public
Critical
Confidential
54
A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover
The ISP has no SLA.
The equipment MTBF is unknown.
There is a single point of failure.
An RPO has not been determined.
55
A company wants to ensure that the software it develops will not be tampered with after the final version is completed.
Baselines
Encryption
Tokenization
Hashing
56
A utility company is designing a new platform that will host all the virtual machines used by business applications. The
Transitioning the platform to an laaS provider
Deploying multiple large NAS devices for each host
Configuring network load balancing for multiple paths
Connecting dual PDUs to redundant power supplies
57
A user downloaded software from an online forum. After the user installed the software, the security team observed exter
The software contained a backdoor.
The software was ransomware.
The user's computer had a fileless virus.
The software had a hidden keylogger.
58
A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of
Virtualization
Containerization
Infrastructure as code
Microservices
59
Which of the following considerations is the most important for an organization to evaluate as it establishes and mainta
Reporting structure for the data privacy officer
Request process for data subject access
Role as controller or processor
Physical location of the company
60
A company is experiencing a web services outage on the public network. The services are up and available but inaccessibl
ARP Poisoining
DDoS
Buffer Overflow
Brute Force
61
Which of the following describes the understanding between a company and a client about what will be provided and the ac
MOA
MOU
SLA
BPA
62
An IT manager is increasing the security capabilities of an organization after a data classification initiative determin
DLP
SPF
XDR
DMARC
63
A Chief Information Security Officer would like to conduct frequent, détailed reviews of systems and procedures to track
Internal auditing
Vulnerability scans
Penetration testing
Third-party attestation
64
A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the followi
Full disk encryption
Application management
Remote wipe
Containerization
65
Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric char
Upgrading the password hashing algorithm from MD5 to SHA-512.
Increasing the maximum password age to 120 days.
Increasing the minimum password length to 14 characters.
Including a requirement for at least one special character.
66
A company wants to verify that the software the company is deploying came from the vendor the company purchased the soft
Search the executable for ASCIl strings.
Execute the code in a sandbox.
Validate the code signature.
Generate a hash of the files.
67
A company allows customers to upload PDF documents to its public e-commerce website. Which of the following would a secu
Blocking command injections via a WAF
Limiting the affected servers with a load balance
Enabling malware detection through a UTM
Utilizing attack signatures in an IDS
68
An organization would like to calculate the time needed to resolve a hardware issue with a server. Which of the followin
Mean time between failures
Mean time to repair
Recovery time objective
Recovery point objective
69
Which of the following security measures is required when using a cloud-based platform for loT management?
Encrypted connection
Single sign-on
Federated identity
Firewall
70
Which of the following alert types is the most likely to be ignored over time?
False negative
True negative
False positive
True positive
71
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the foll
Virtualization
Serverless
Segmentation
Microservices
72
A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the
Virtual private network
Port security
Transport layer security
Web application firewall
73
An administrator finds that all user workstations and servers are displaying a message that is associated with files con
Virus
Trojan
Spyware
Ransomware
74
A systems administrator notices that the research and development department is not using the company VPN when accessing
Espionage
Shadow IT
Nation-state attack
Data exfiltration
75
A systems administrator is changing the password policy within an enterprise environment and wants this update implement
Pushing GPO update
Updating EDR profiles
Enabling PAP
Deploying Power Shell scripts
76
An organization completed a project to deploy SSO across all business applications last year. Recently, the finance depa
SAML
RADIUS
OpenID
EAP
77
A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of t
Integrity
Privacy
Availability
Confidentiality
78
After creating a contract for IT contractors, the human resources department changed several clauses. The contract has g
Version control
Version changes
Version updates
Version validation
79
A company is reviewing options to enforce user logins after several account takeovers. The following conditions must be
Geotagging
Trusted devices
Smart cards
Time-based logins
80
An important patch for a critical application has just been released, and a systems administrator is identifying all of
Asset inventory
Data certification
Procurement process
Network enumeration
81
Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?
Impersonation of business units through typosquatting
Default network device credentials
Unidentified removable devices
Spear phishing emails
82
Which of the following describes an executive team that is meeting in a board room and testing the company's incident re
Tabletop exercise
Continuity of operations
Capacity planning
Parallel processing
83
Which of the following security concepts is accomplished with the installation of a RADIUS server?
ACL
PEM
AAA
CIA
84
An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which
Whaling
Smishing
Disinformation
Impersonating
85
A software development team asked a security administrator to recommend techniques that should be used to reduce the cha
Using compile flags
Performing code obfuscation
Digitally signing the software
Limiting the use of third-party libraries
86
Which of the following best describes a use case for a DNS sinkhole?
A DNS sinkhole can be used to draw employees away from known-good websites
A DNS sinkhole can be set up to attract potential attackers away from a com
Attackers can see a DNS sinkhole as a highly valuable resource to identify
A DNS sinkhole can be used to capture traffic to known-malicious domains us
87
The Chief Information Security Officer (CISO) at a large company would like to gain an understanding of how the company'
Internal audit
External examination
Penetration test
Attestation
88
Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gam
Updating the categorization in the content filter
Tuning the DLP rule that detects credit card data
Creating a firewall rule to allow HTTPS traffic
Configuring the IPS to allow shopping
89
Which of the following agreement types defines the time frame in which a vendor needs to respond?
SLA
SOW
MOA
MOU
90
Which of the following most likely describes why a security engineer would configure all outbound emails to use S/MIME d
To meet compliance standards
To increase delivery rates
To ensure non-repudiation
To block phishing attacks
91
A user would like to install software and features that are not available with a smartphone's default software. Which of
Jailbreaking
Cross-site scripting
SQLi
Side loading
92
The Chief Information Security Officer (CISO) has determined the company is non-compliant with local data privacy regula
Reputational damage
Fines
Sanctions
Contractual implications
93
Which of the following best describes the practice of researching laws and regulations related to information security o
Attestation
Compliance reporting
Due diligence
GDPR
94
A company that is located in an area prone to hurricanes is developing a disaster recovery plan and looking at site cons
Warm
Cold
Hot
Tertiary
95
A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices
End user training
URL scanning
Policy review
Plain text email
96
Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving later
NAC
IDS
EDR
ACL
97
Which of the following best describes the risk present after controls and mitigating factors have been applied?
Avoided
Operational
Inherent
Residual
98
A business needs a recovery site but does not require immediate failover. The business also wants to reduce the workload
Warm
Cold
Geographically dispersed
Hot
99
An IT manager is putting together a documented plan describing how the organization will keep operating in the event of
Disaster recovery
Physical security
Business continuity
Change management

Master Security+ Question 2 Flashcards | StudBud