While preparing of an audit of information security controls in the environment an analyst outlines a framework control that has the following requirements: • All sensitive data must be classified • All sensitive data...
After a breach involving the exfiltration of a large amount of sensitive data a security analyst is reviewing the following firewall logs to determine how the breach occurred: Which of the following IP addresses...
A hybrid control is one that:A . is implemented differently on individual systemsB . is implemented at the enterprise and system levelsC . has operational and technical componentsD . authenticates using passwords and hardware...
An organization developed a comprehensive incident response policy. Executive management approved the policy and its associated procedures. Which of the following activities would be MOST beneficial to evaluate personnel’s familiarity with incident response procedures?A...
HOTSPOT Welcome to the Enterprise Help Desk System. Please work the ticket escalated to you in the desk ticket queue. INSTRUCTIONS Click on me ticket to see the ticket details Additional content is available...
Which of the following secure coding techniques can be used to prevent cross-site request forgery attacks?A . Input validationB . Output encodingC . Parameterized queriesD . TokenizationView AnswerAnswer: D
A developer wrote a script to make names and other Pll data unidentifiable before loading a database export into the testing system. Which of the following describes the type of control that is being...
An organization has several systems that require specific logons Over the past few months, the security analyst has noticed numerous failed logon attempts followed by password resets. Which of the following should the analyst...
Ransomware is identified on a company's network that affects both Windows and MAC hosts. The command and control channel for encryption for this variant uses TCP ports from 11000 to 65000. The channel goes...
An information security analyst on a threat-hunting team Is working with administrators to create a hypothesis related to an internally developed web application. The working hypothesis is as follows: • Due to the nature...
