Q

Question 1

Which of the following tools would work best to prevent the exposure of PII outside of an organization?
A. Pam
B. IDS
C. Pki
D. DLP

Answer 1

D. DLP
Data loss prevention technologies helps prevent unauthorized access, sharing, or exposure of sensitive data

Question 2

Which of the following items should be included in a vulnerability scan report? Choose 2.
A. Lessons learned
B. Service-level agreement
C. Playbook
D. Affected hosts
E. Risk score
F. Education plan

Answer 2

D. Affected hosts
E. Risk score

Question 3

Which of the following scripting languages was used in the script using get-aduser
A. Powershell
B. Ruby
C. Python
D. Shell script

Answer 3

A. Powershell
PowerShell’s the only language that uses - get

Question 4

A security analyst received a malicious binary file to analyze. Which of the following is the best technique to perform the analysis?
A. Code analysis
B. Static analysis
C. Reverse engineering
D. Fuzzing

Answer 4

Static analysis

Question 5

A breach of customer transactions
Under the terms of PCI das, which of the following groups should the organization report the breach to?
A. PCI security standards council
B. Local law enforcement
C. Federal law enforcement
D. Card issuer

Answer 5

Card issuer

Question 6

Which is the best metric for an organization to focus on given recent investments in SIEM, soar, and a ticketing system?
A. Mean time to detect
B. Number of exploits by tactic
C. Alert volume
D. Quantity of intrusion attempts

Answer 6

Mean time to detect
Tells you how long it takes to detect an incident

Question 7

First Step that should be performed unseen establishing a disaster recovery plan?
A. Agree on goals
B. Determine the site to be used during a disaster
C. Adherence to a disaster process
D. Identify applications

Answer 7

Agree on goals of the disaster recovery plan

Question 8

After applying a patch, what should happen next?
A. Testing
B. Implementation
C. Validation
D. Rollback

Answer 8

Validation

Question 9

Which allows S6 to no longer jump between tools?
A. Data enrichment
B. Security central plane
C. Threat feed combination
D. Single pane of glass

Answer 9

Single pane of glass is when s6 can manage the network from one place

Question 10

When starting an investigation, which should happen first?
A. Notify the law
B. Secure the scene
C. Seize evidence
D. Interview witnesses

Answer 10

Always secure the scene first before doing anything else