A large company is preparing to merge with a smaller company. The smaller company has been very profitable, but the smaller company's main applications were created in-house. Which of the following actions should the large company's security administrator take in preparation for the merger?

• A.A review of the mitigations implemented from the most recent audit findings of the smaller company should be performed.
• B.An ROI calculation should be performed to determine which company's application should be used.
• C.A security assessment should be performed to establish the risks of integration or co-existence.
• D.A regression test should be performed on the in-house software to determine security risks associated with the software.

Comment: *

Name: *

Email: *

Verification: *

A systems security engineer is assisting an organization's market survey team in reviewing requirements for an upcoming acquisition of mobile devices. The engineer expresses concerns to the survey team about a particular class of devices that uses a separate SoC for baseband radio I/O. For which of the following reasons is the engineer concerned?

• A.These devices can communicate over networks older than HSPA+ and LTE standards, exposing device communications to poor encryptions routines
• B.The organization will be unable to restrict the use of NFC, electromagnetic induction, and Bluetooth technologies
• C.The associated firmware is more likely to remain out of date and potentially vulnerable
• D.The manufacturers of the baseband radios are unable to enforce mandatory access controls within their driver set

Comment: *

Name: *

Email: *

Verification: *

A security engineer on a large enterprise network needs to schedule maintenance within a fixed window of time. A total outage period of four hours is permitted for servers.
Workstations can undergo maintenance from 8:00 pm to 6:00 am daily. Which of the following can specify parameters for the maintenance work? (Select TWO).

• A.Managed security service
• B.Memorandum of understanding
• C.Quality of service
• D.Network service provider
• E.Operating level agreement

Comment: *

Name: *

Email: *

Verification: *

CORRECT TEXT
A security analyst is reviewing logs and discovers that a company-owned computer issued to an employee is generating many alerts and analyst continues to review the log events and discovers that a non-company-owned device from a different, unknown IP address is general same events. The analyst informs the manager of these finding, and the manager explains that these activities are already known and . . . ongoing simulation. Given this scenario, which of the following roles are the analyst, the employee, and the manager fillings?

• A.The analyst is blue team
  The employee is red team
  The manager is white team
• B.The analyst is red team
  The employee is blue team
  The manager is white team
• C.The analyst is red team
  The employee is white team
  The manager is blue team
• D.The analyst is white team
  The employee is red team
  The manager is blue team

Comment: *

Name: *

Email: *

Verification: *

An engineer wants to assess the OS security configurations on a company's servers. The engineer has downloaded some files to orchestrate configuration checks When the engineer opens a file in a text editor, the following excerpt appears:

Which of the following capabilities would a configuration compliance checker need to support to interpret this file?

• A.Netcat
• B.SCAP
• C.WSDL
• D.Nessus
• E.Swagger file

Comment: *

Name: *

Email: *

Verification: *