532 PT 11

NO.256 An organization's corporate offices were destroyed due to a natural disaster, so the

organization is now setting up offices in a temporary work space. Which of the following will the

organization MOST likely consult?

• (A). The business continuity plan

• (B). The disaster recovery plan

• .(C). The communications plan

• (D). The incident response plan

NO.257 Which of the following describes the ability of code to target a hypervisor from inside

• (A). Fog computing

• (B). VM escape

• (C). Software-defined networking

• (D). Image forgery

NO.258 An information security policy stales that separation of duties is required for all highly

sensitive database changes that involve customers' financial data. Which of the following will this be

BEST to prevent?

• (A). Least privilege

• (B). An insider threat

• (C). A data breach

• (D). A change control violation

NO.259 A user recent an SMS on a mobile phone that asked for bank delays. Which of the following

social-engineering techniques was used in this case?

• (A). SPIM

• (B). Vishing

• (C). Spear phishing

• (D). Smishing

NO.260 A company wants to deploy PKI on its Internet-facing website. The applications that are

currently deployed are:

* www.company.com (main website)

* contactus.company.com (for locating a nearby location)

* quotes.company.com (for requesting a price quote)

The company wants to purchase one SSL certificate that will work for all the existing applications and

any future applications that follow the same naming conventions, such as store.company.com. Which

of the following certificate types would BEST meet the requirements?

• A. SAN

• B. Wildcard

• C. Extended validation

• D. self-signed

NO.261 An attack relies on an end user visiting a website the end user would typically visit, however,

the site is compromised and uses vulnerabilities in the end users browser to deploy malicious

software. Which of the blowing types of attack does this describe?

• (A). Smishing

• (B). Whaling

• (C). Watering hole

• (D). Phishing

NO.262 Which of the following will MOST likely adversely impact the operations of unpatched

traditional programmable-logic controllers, running a back-end LAMP server and OT systems with

human-management interfaces that are accessible over the Internet via a web interface? (Choose

two.)

• (A). Cross-site scripting

• (B). Data exfiltration

• (C). Poor system logging

• (D). Weak encryption

• (F). Server-side request forgery

NO.263 A systems analyst is responsible for generating a new digital forensics chain-of-custody form

Which of the following should the analyst Include in this documentation? (Select TWO).

• (A). The order of volatility

• (B). A checksum

• (C). The location of the artifacts

• (D). The vendor's name

• (E). The date and time

NO.264 The Chief Financial Officer (CFO) of an insurance company received an email from Ann, the

company's Chief Executive Officer (CEO), requesting a transfer of $10,000 to an account. The email

states Ann is on vacation and has lost her purse, containing cash and credit cards. Which of the

following social-engineering techniques is the attacker using?

• (A). Phishing

• (B). Whaling

• (C). Typo squatting

• (D). Pharming

NO.265 A software developer needs to perform code-execution testing, black-box testing, and non-

functional testing on a new product before its general release. Which of the following BEST describes

the tasks the developer is conducting?

• (A). Verification

• (B). Validation

• (C). Normalization

• (D). Staging