BNS6 PT6

Which of the following scenarios would make a DNS sinkhole effective in thwarting an attack?

• 1. An attacker is sniffing traffic to port 53, and the server is managed using unencrypted usernames and passwords.

• 1. An organization is experiencing excessive traffic on port 53 and suspects an attacker is trying to DoS

  the domain name server

• 1. Malware trying to resolve an unregistered domain name to determine if it is running in an isolated sandbox

• 1. Routing tables have been compromised, and an attacker is rerouting traffic to malicious websites

A security analyst reviews the datacenter access logs for a fingerprint scanner and notices an abundance of errors that correlate with users' reports of issues accessing the facility.

Which of the following MOST likely the cause of the cause of the access issues?

• 1. False rejection

• 1. Cross-over error rate

• 1. Efficacy rale

• Attestation

A company's Chief Information Security Officer (CISO) recently warned the security manager that the company's Chief Executive Officer (CEO) is planning to publish a controversial opinion article in a national newspaper, which may result in new cyberattacks.

Which of the following would be BEST for the security manager to use in a threat model?

• 1. Hacktivists

• 1. White-hat hackers

• 1. Script kiddies

• 1. Insider threats

When used at the design stage, which of the following improves the efficiency, accuracy, and speed of a database?

• 1. Tokenization

• 1. Data masking

• 1. Normalization

• Obfuscation

An analyst needs to set up a method for securely transferring files between systems. One of the requirements is to authenticate the IP header and the payload. Which of the following services would BEST meet the criteria?

• TLS

• PFS

• ESP

• AH

A company has determined that if its computer-based manufacturing is not functioning for 12 consecutive hours, it will lose more money that it costs to maintain the equipment. Which of the following must be less than 12 hours to maintain a positive total cost of ownership?

• 1. MTBF

• RPO

• RTO

• MTTR

Which of the following control sets should a well -written BCP include? (Select THREE)

• 1. Preventive

• 1. Detective

• 1. Corrective

• 1. Recovery

The manager who is responsible for a data set has asked a security engineer to apply encryption to the data on a hard disk. The security engineer is an example of a:

• 1. data controller.

• 1. data owner

• data custodian

• data Processor

Which of the following disaster recovery tests is The LEAST time-consuming for the disaster recovery team?

• 1. Tabletop

• 1. Parallel

• 1. Full interruption

• Simulation

Some laptops recently went missing from a locked storage area that is protected by keyless

RFID-enabled locks. There is no obvious damage to the physical space. The security manager identifies who unlocked the door, however, human resources confirms the employee was on vacation at the time of the incident. Which of the following describes what MOST likely occurred?

• 1. The employee's physical access card was cloned.

• 1. The employee is colluding with human resources

• 1. The employee's biometrics were harvested

• 1. A criminal used lock picking tools to open the door.