Exam

Question 1

EndPoint Security Settings: - Archives

Answer 1

Client Server - Allow - Alert - None

Question 2

EndPoint Security Settings: - Documents

Answer 2

Client Server - Allow - Alert - None

Question 3

EndPoint Security Settings: - Email

Answer 3

Client - Allow - Alert - None

Question 4

EndPoint Security Settings: - Executables

Answer 4

Client - Wait - Quarantine - Development

Question 5

EndPoint Security Settings: - Scripts

Answer 5

Client - Wait - Quarantine - Development

Question 6

What does Carving Refer to?

Answer 6

Data Recovery

Question 7

Determine a solution that can combine with a cloud access security broker (CASB) to provide a wholly cloud-hosted platform for client access?

Answer 7

Next Generation Security Web Gateweay

Question 8

IT discovers a flaw in a web application where it allows queries without encryption. As a result, requests are being spoofed and directories containing private files are viewable. What is happening?

Answer 8

Extensible Markup Language (XML) injection

Question 9

What is Homomorphic?

Answer 9

Homomorphic encryption is an encryption method that allows computation to be performed directly on encrypted data without requiring access to a secret key. Analysis can apply functions on encrypted data without needing to reveal the values of the data.

Question 10

Users are only allowed to work in the office. Account policies must provide login security measures. So, users are only working during normal business hours. Identify the policy that establishes the maximum amount of time an account may be logged in for at the workplace?

Answer 10

Time-based login policy

Question 11

A logistics company requires a supervisory control and data acquisition (SCADA) system to collect and analyze real-time tracking of equipment and to monitor delays in shipping and receiving. The SCADA must provide reports to management to facilitate data-driven decisions on transporting equipment. What is the SCADA a part of?

Answer 11

An industrial control system (ICS) is a complex integration of hardware and software with network connectivity to support the critical infrastructure of a large industry. Supervisory control and data acquisition (SCADA) controls an ICS and can be used in the logistics industry.

Question 12

A company allows the use of corporate apps on employee-owned mobile devices. Mobile application management (MAM) services make this possible. Examining the list of available enterprise mobility management (EMM) features in today’s market, which of the following would NOT be available for use in this case? (Select all that apply.)

Answer 12

Manage camera use and Ability to Remote Wipe

Question 13

The company’s current network utilizes EAP-TTLS (EAP-Tunneled TLS) for supplicant clients connecting to the network. Newer model devices and systems are deployed on the network and are not compatible with EAP-TTLS. These systems require MS-CHAPv2 for authentication. Which of the following options will support these new systems?

Answer 13

PEAP uses MSCHAPv2 in PEAPv0 (also known as EAP-MSCHAPv2). Where required, another iteration called PEAPv2 (also known as EAP-GTC), which is a Cisco implementation, can be used.

Question 14

What is an antivirus and anti-malware software capable of doing to protect a computer system? (Select all that apply.)

Answer 14

Signature-based detection

Detect Trojans

Question 15

Which of the following is a computer that uses remote desktop protocol to run resources stored on a central server instead of a localized hard drive and provides minimal operating system services?

Answer 15

Thin client

Question 16

Which control types does a systems engineer implement when an initial locking mechanism does not perform as expected? (Select all that apply.)

Answer 16

Compensating
Preventative

Question 17

A global corporation assesses risk appetite and how risks in various regions could influence mission-critical operations. They are assessing compliance with local laws and licensing requirements to prevent financial risk or resolve security risks, and changing the risk posture and implementing risk controls to compensate. Conclude what type of assessment the team is performing.

Answer 17

Risk control assessment

Question 18

Which of the following will reduce the risk of data exposure between containers on a cloud platform? (Select all that apply.)

Answer 18

Namespaces
Control Groups

Question 19

hile assisting a customer over the phone to connect a laptop to a new wireless router, the user suddenly reports it is connected. Upon further inquiry into how the connection occurred, the user stated they pushed a circular button. Analyze the situation and determine which button the user pressed, and how it functions. (Select all that appl

Answer 19

WPS and 8 Character PIN

Question 20

A network administrator sets up a stateless firewall using an open-source application running on a Linux virtual machine. The immediate benefit of this setup is that it was easy to set up quickly with basic rules. What other reasons may have influenced the administrator’s decision to deploy a stateless rather than a stateful firewall? (Select all that apply.)

Answer 20

Block TCP ports

Allow network protocols

Question 21

Finance representatives at an organization meet professional standards by providing reports that are highly detailed and designed to be restricted. As members of the American Institute of Certified Public Accountants (AICPA), which standards do the finance representatives follow?

Answer 21

SSAE SOC 2 Type II

Question 22

Which of the following attacks would allow an attacker to sniff all traffic on a switched network?

Answer 22

Address Resolution Protocol (ARP) poisoning

Question 23

An attacker is preparing a phishing email mimicking the contents of a legitimate company email. The email will include a fake invoice to request payment for medical services and an email address that looks convincing. What can the attacker modify on the email to make it more convincing?

Answer 23

Prepend “RE:” to the subject line.

Question 24

MTD?

Answer 24

96

Question 25

RTO

Answer 25

Amount of Data loss a system can sustain = 10

Question 26

MTBF

Answer 26

Devices * hours/failures = 1500

Question 27

MTTF

Answer 27

devices * hours/devices = 1000

Question 28

MTTR

Answer 28

24