Security+ 9.kisim

NO.256 A secullly operations analyst is using the company's SIEM solufon to correlate alens. Which

of the following stages of the Inciden reapanse process is this an example af?

• (A). Eradication

• (B). Recowery

• (C). identification

• (D). Preparation

NO.257 A security analyst is designing the appropnate controls to limit unauthorized access to a

physical site The analyst has a directive to utilize the lowest possible budget Which of the following

would BEST meet the requirements?

• (A). Preventive controls

• (B). Compensating controls

• (C). Deterrent controls

• (D). Detective controls

NO.258 Which of the following environments can be stood up in a short period of time, utilizes

either dummy data or actual data, and is used to demonstrate and model system capabilities and

functionality for a fixed, agreed-upon duration of time?

• (A). PoC

• (B). Production

• (C). Test

• (D). Development

NO.260 A network engineer at a company with a web server is building a new web environment

with the following requirements:

* Only one web server at a time can service requests.

* If the primary web server fails, a failover needs to occur to ensure the secondary web server

becomes the primary.

Which of the following load-balancing options BEST fits the requirements?

• (A). Cookie-based

• (B). Active-passive

• (C). Persistence

• (D). Round robin

NO.261 A company is required to continue using legacy software to support a critical service. Which

of the following BEST explains a risk of this practice?

• (A). Default system configuration

• (B). Unsecure protocols

• (C). Lack of vendor support

• (D). Weak encryption

NO.262 To reduce and limit software and infrastructure costs, the Chief Information Officer has

requested to move email services to the cloud. The cloud provider and the organization must have

security controls to protect sensitive dat a. Which of the following cloud services would BEST

accommodate the request?

• (A). laas

• (B). Paas

• (C). Daas

• (D). SaaS

NO.263 A security proposal was set up to track requests for remote access by creating a baseline of

the users' common sign-in properties. When a baseline deviation is detected, an Iv1FA challenge will

be triggered. Which of the following should be configured in order to deploy the proposal?

• (A). Context-aware authentication

• (B). Simultaneous authentication of equals

• (C). Extensive authentication protocol

• (D). Agentless network access control

NO.264 An attacker replaces a digitally signed document with another version that foes unnoticed.

Upon reviewing the document's contents, the author notices some additional verbaige that was not

originally in the document but can't validate an integrity issue. Which of the following attacks was

used?

• (A). Cryptomalware

• (B). Prepending

• (C). Collision

• (D). Phising

NO.265 A security administrator has discovered that workstations on the LAN are becoming infected

with malware. The cause of the infections appears to be users receiving phishing emails that are

bypassing the current email-filtering technology. As a result, users are being tricked into clicking on

malicious URLs, as no internal controls currently exist in the environment to evaluate their safety.

Which of the following would be BEST to implement to address the issue?

• (A). Forward proxy

• (B). HIDS

• (C). Awareness training

• (D). A jump server

• (E). IPS

NO.266 it a current private key is compromised, which of the following would ensure it cannot be

used to decrypt ail historical data?

• (A). Pertect forward secrecy

• (B). Eiliptic-curve cryptography

• (C). Key stretching

• (D). Homomorphic encryption