cysa+ 112 ( 2 )

Which type of network analysis decodes the content of packets to see the application data moving through the network?

• A. Flow Analysis

• B. DNS Analysis

• C. Protocol Analysis

• D. Packet Analysis

Which form of email security infrastructure specifically focuses on digital signatures of outbound email from a mail server?

• A. DNS

• DMARC

• C. DKIM

• D. SPF

Which type of email-related concern escalates most of the other security concerns?

• A. Embedded links

• B. Forwarderredirection

• C. Social engineering

• D. Attachments

Which type of impact is best described as the impact to the data within a company?

• A. Local

• B. Organizational

• C. Total

• D. Immediate

Which permissions would let someone view and launch a file that used memory triggering a CPU process? (Choose two)

• A. Delete

• B. Permissions

• C. Read

• D. Write

• E. Execute

Which of the following are the best candidates for a blacklist? (Choose two

• A. Firewalls

• B. Network ACLs

• C. Malware

• D. Malicious traffic patterns

• E. Permissions

Regarding firewall passwords, which of the following typically cause the greatest vulnerabilities? (Choose two)

• A. Config files

• B. Updates

• C.Zones

• D. Defaults

• E. Rules

When IPS traffic is allowed through to the network when it should have been blocked, it's referred to as which of the following?

• A. False negative

• B. False positive

• C. Out-of-band enforcement

• D. Baseline

Which of the following are likely areas of management in a Data Loss Prevention system? (Choose three)

• A. Printing

• B. Permissions

• C. Email

• D. Software

• E. UserAuthentication

Which location is typical for an EDR agent installation?

• A. Firewall

• B.Virtual Server

• C. Router

• D. Switch