Quiz Review 3- Computer Science & Information Technology - Computer Security

Ed has been tasked with identifying a service that will provide a low-latency, highperformance, and high-availability way to host content for his employer. What type of solution should he seek out to ensure that his employer's customers around the world can access their content quickly, easily, and reliably?

23

NIST SP800-53 discusses a set of security controls as what type of security tool?

24

During a routine vulnerability assessment, the following command was successful: echo "vrfy 'perl -e 'print "hi" x 500 ' ' " | nc www.company.com 25Which of the following vulnerabilities is being exploited?

25

A small company's Chief Executive Officer (CEO) has asked its Chief Security Officer (CSO) to improve the company's security posture quickly with regard to targeted attacks.Which of the following should the CSO conduct FIRST?

26

The Chief Information Security Officer (CISO) is asking for ways to protect against zero-day exploits. The CISO is concerned that an unrecognized threat could compromise corporate data and result in regulatory fines as well as poor corporate publicity. The network is mostly flat, with split staff/guest wireless functionality.Which of the following equipment MUST be deployed to guard against unknown threats?

27

An organization identifies a number of hosts making outbound connections to a known malicious IP over port TCP 80. The organization wants to identify the data being transmitted and prevent future connections to this IP.Which of the following should the organization do to achieve this outcome?

28

An organization has several production-critical SCADA supervisory systems that cannot follow the normal 30- day patching policy.Which of the following BEST maximizes the protection of these systems from malicious software?

29

Legal authorities notify a company that its network has been compromised for the second time in two years. The investigation shows the attackers were able to use the same vulnerability on different systems in both attacks.Which of the following would have allowed the security team to use historical information to protect against the second attack?

30

A security analyst is inspecting the results of a recent internal vulnerability scan that was performed against intranet services.The scan reports include the following critical-rated vulnerability: Title: Remote Command Execution vulnerability in web server Rating: Critical (CVSS 10.0)Threat actor: any remote user of the web serverConfidence: certain -Recommendation: apply vendor patchesWhich of the following actions should the security analyst perform FIRST?

31

Company A agrees to provide perimeter protection, power, and environmental support with measurable goals for Company B, but will not be responsible for user authentication or patching of operating systems within the perimeter.Which of the following is being described?

32

A member of the admins group reports being unable to modify the "changes" file on a server.The permissions on the file are as follows:Permissions User Group File --rwxrw-r--+ Admins Admins changesBased on the output above, which of the following BEST explains why the user is unable to modify the "changes" file?

33

An in-house penetration tester has been asked to evade a new DLP system. The tester plans to exfiltrate data through steganography.Discovery of which of the following would help catch the tester in the act?

34

A vice president at a manufacturing organization is concerned about desktops being connected to the network. Employees need to log onto the desktops' local account to verify that a product is being created within specifications; otherwise, the desktops should be as isolated as possible. Which of the following is theBEST way to accomplish this?

35

An incident involving a workstation that is potentially infected with a virus has occurred. The workstation may have sent confidential data to an unknown internet server.Which of the following should a security analyst do FIRST?

36

As part of a new BYOD rollout, a security analyst has been asked to find a way to securely store company data on personal devices.Which of the following would BEST help to accomplish this?

37

A web server, which is configured to use TLS with AES-GCM-256, SHA-384, and ECDSA, recently suffered an information loss breach.Which of the following is MOST likely the cause?

38

A security administrator needs to address the following audit recommendations for a public-facingSFTP server:Users should be restricted to upload and download files to their own home directories only.Users should not be allowed to use interactive shell login.Which of the following configuration parameters should be implemented? (Choose two.).

39

A company is evaluating cloud providers to reduce the cost of its internal IT operations. The company's aging systems are unable to keep up with customer demand. Which of the following cloud models will the company MOST likely select?

40

After a security incident, management is meeting with involved employees to document the incident and its aftermath.Which of the following BEST describes this phase of the incident response process?

41

Users in a corporation currently authenticate with a username and password. A security administrator wishes to implement two-factor authentication to improve security.Which of the following authentication methods should be deployed to achieve this goal?

42

An organization recently moved its custom web applications to the cloud, and it is obtaining managed services of the back-end environment as part of its subscription. Which of the following types of services is this company now using?

43

Which of the following is commonly done as part of a vulnerability scan?

44

The POODLE attack is an MITM exploit that affects:

45

Ann, a security administrator, wants to ensure credentials are encrypted in transit when implementing a RADIUS server for SSO.Which of the following are needed given these requirements? (Choose two.)

46

A third-party penetration testing company was able to successfully use an ARP cache poison technique to gain root access on a server. The tester successfully moved to another server that was not in the original network.Which of the following is the MOST likely method used to gain access to the other host?

47

A web developer improves client access to the company's REST API. Authentication needs to be tokenized but not expose the client's password.Which of the following methods would BEST meet the developer's requirements?

48

The IT department is deploying new computers. To ease the transition, users will be allowed to access their old and new systems.The help desk is receiving reports that users are experiencing the following error when attempting to log in to their previous system:Logon Failure: Access Denied -Which of the following can cause this issue?

49

A vulnerability scan is being conducted against a desktop system. The scan is looking for files, versions, and registry values known to be associated with system vulnerabilities. Which of the following BEST describes the type of scan being performed?

50

Which of the following is the BEST reason for salting a password hash before it is stored in a database?

51

A penetration tester harvests potential usernames from a social networking site. The penetration tester then uses social engineering to attempt to obtain associated passwords to gain unauthorized access to shares on a network server.Which of the following methods is the penetration tester MOST likely using?

52

An actor downloads and runs a program against a corporate login page. The program imports a list of usernames and passwords, looking for a successful attempt.Which of the following terms BEST describes the actor in this situation?

53

Which of the following is the BEST choice for a security control that represents a preventive and corrective logical control at the same time?

Find your answers, solutions and more...

We made it much easier for you to find exactly what you're looking for on Sciemce. Enjoy our search engine "Clutch."

Save a GPA. Donate your notes with us.

Quiz Review 3- Computer Science & Information Technology - Computer Security

Recent Packs