SEC+ 001-025

Question #:1

A security administrator needs a method to secure data in an environment that includes some form of checks so that the administrator can track any changes. Which of the following should the administrator set up to achieve this goal?

• A

  SPF

• B

  GPO

• C

  NAC

• D

  FIM

Question #:2

The local administrator account for a company's VPN appliance was unexpectedly used to log in to the remote management interface. Which of the following would have most likely prevented this from happening'?

• A

  Using least privilege

• B

  Changing the default password

• C

  Assigning individual user IDs

• D

  Reviewing logs more frequently

Question #:3

A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO's report?

• A

  Insider threat

• B

  Hacktivist

• C

  Nation-state

• D

  Organized crime

Question #:4

A security consultant needs secure, remote access to a client environment. Which of the following should the

security consultant most likely use to gain access?

• A

  EAP

• B

  DHCP

• C

  IPSec

• D

  NAT

Question #:5

A systems administrator set up a perimeter firewall but continues to notice suspicious connections between internal endpoints. Which of the following should be set up in order to mitigate the threat posed by the suspicious activity?

• A

  Host-based firewall

• B

  Web application firewall

• C

  Access control list

• D

  Application allow list

Question #:6

An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period. Which of the following data policies is the administrator carrying out?

• A

  Compromise

• B

  Retention

• C

  Analysis

• D

  Transfer

• E

  Inventory

Question #:7

Which of the following is a hardware-specific vulnerability?

• A

  Firmware version

• B

  Buffer overflow

• C

  SQL injection

• D

  Cross-site scripting

Question #:8

After an audit, an administrator discovers all users have access to confidential data on a file server. Which of the following should the administrator use to restrict access to the data quickly?

• A

  Group Policy

• B

  Content filtering

• C

  Data loss prevention

• D

  Access control lists

Question #:9

Which of the following scenarios describes a possible business email compromise attack?

• An employee receives a gift card request in an email that has an executive's name in the display field of the email.

• Employees who open an email attachment receive messages demanding payment in order to access files.

• A service desk employee receives an email from the HR director asking for log-in credentials to a cloud administrator account.

• An employee receives an email with a link to a phishing site that is designed to look like the company's email portal.

Question #:10

An enterprise has been experiencing attacks focused on exploiting vulnerabilities in older browser versions with well-known exploits. Which of the following security solutions should be configured to best provide the ability to monitor and block these known signature-based attacks?

• A

  ACL

• B

  DLP

• C

  IDS

• D

  IPS