Questões (81-90)

An administrator is reviewing a single server's security logs and discovers the following: Which of the following best describes the action captured in this log file?

• A. Brute-force attack
• B. Privilege escalation
• C. Failed password audit
• D. Forgotten password by the user

A security engineer is implementing FDE for all laptops in an organization. Which of the following are the most important for the engineer to consider as part of the planning process? (Choose two.)

• A. Key escrow
• B. TPM presence
• C. Digital signatures
• D. Data tokenization
• E. Public key management

A security analyst scans a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the security analyst recommend?

• A. Changing the remote desktop port to a non-standard number
• B. Setting up a VPN and placing the jump server inside the firewall
• C. Using a proxy for web connections from the remote desktop server
• D. Connecting the remote server to the domain and increasing the password length

An enterprise has been experiencing attacks focused on exploiting vulnerabilities in older browser versions with well-known exploits. Which of the following security solutions should be configured to best provide the ability to monitor and block these known signature-based attacks?

• A. ACL
• B. DLP
• C. IDS
• D. IPS

Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?

• A. Remote access points should fail closed.
• B. Logging controls should fail open.
• C. Safety controls should fail open.
• D. Logical security controls should fail closed.

Which of the following would be best suited for constantly changing environments?

• A. RTOS
• B. Containers
• C. Embedded systems
• D. SCADA

Which of the following incident response activities ensures evidence is properly handled?

• A. E-discovery
• B. Chain of custody
• C. Legal hold
• D. Preservation

An accounting clerk sent money to an attacker's bank account after receiving fraudulent instructions to use a new account. Which of the following would most likely prevent this activity in the future?

• A. Standardizing security incident reporting
• B. Executing regular phishing campaigns
• C. Implementing insider threat detection measures
• D. Updating processes for sending wire transfers

A systems administrator is creating a script that would save time and prevent human error when performing account creation for a large number of end users. Which of the following would be a good use case for this task?

• A. Off-the-shelf software
• B. Orchestration
• C. Baseline
• D. Policy enforcement

A company's marketing department collects, modifies, and stores sensitive customer data. The infrastructure team is responsible for securing the data while in transit and at rest. Which of the following data roles describes the customer?

• A. Processor
• B. Custodian
• C. Subject
• D. Owner