The Chief Information Security Officer (CISO) for an organization wants to develop custom IDS rulesets faster, prior to new rules being released by IDS vendors. Which of the following BEST meets this objective?

• A.Identify a third-party source for IDS rules and change the configuration on the applicable IDSs to pull in the new rulesets
• B.Encourage cybersecurity analysts to review open-source intelligence products and threat database to generate new IDS rules based on those sources
• C.Leverage the latest TCP- and UDP-related RFCs to arm sensors and IDSs with appropriate heuristics for anomaly detection
• D.Use annual hacking conventions to document the latest attacks and threats, and then develop IDS rules to counter those threats

Comment: *

Name: *

Email: *

Verification: *

An infrastructure team is at the end of a procurement process and has selected a vendor.
As part of the final negotiations, there are a number of outstanding issues, including:
1. Indemnity clauses have identified the maximum liability
2. The data will be hosted and managed outside of the company's geographical location The number of users accessing the system will be small, and no sensitive data will be hosted in the solution. As the security consultant on the project, which of the following should the project's security consultant recommend as the NEXT step?

• A.Require the solution owner to accept the identified risks and consequences
• B.Develop a security exemption, as it does not meet the security policies
• C.Review the entire procurement process to determine the lessons learned
• D.Mitigate the risk by asking the vendor to accept the in-country privacy principles

Comment: *

Name: *

Email: *

Verification: *

A security technician receives a copy of a report that was originally sent to the board of directors by the Chief Information Security Officer (CISO).
The report outlines the following KPVKRI data for the last 12 months:

Which of the following BEST describes what could be interpreted from the above data?

• A.1. AV coverage across the fleet declined2. There is no correlation between infected systems and AV coverage.3. A correlation between phishing attempts and infected systems appears to exist4. There is no correlation between the threat landscape rating and the security team's performance5. Effectiveness and performance of the security team appears to be degrading.
• B.1. AV signature coverage has remained consistently high2. AV coverage across the fleet improved3. A correlation between phishing attempts and infected systems appears to exist4. There is a correlation between the threat landscape rating and the security team's performance.5. There is no correlation between detected phishing attempts and infected systems
• C.1. AV coverage across the fleet improved2. There is no correlation between infected systems and AV coverage.3. There is no correlation between detected phishing attempts and infected systems4. A correlation between threat landscape rating and infected systems appears to exist.5. Effectiveness and performance of the security team appears to be degrading.
• D.1. There is no correlation between infected systems and AV coverage2. AV coverage across the fleet improved3. A correlation between phishing attempts and infected systems appears to exist4. There is no correlation between the threat landscape rating and the security team's performance.5. There is a correlation between detected phishing attempts and infected systems

Comment: *

Name: *

Email: *

Verification: *

An internal penetration tester was assessing a recruiting page for potential issues before it was pushed to the production website. The penetration tester discovers an issue that must be corrected before the page goes live.
The web host administrator collects the log files below and gives them to the development team so improvements can be made to the security design of the website.

Which of the following types of attack vector did the penetration tester use?

• A.TOC/TOU
• B.CSRF
• C.SQL injection
• D.XSS
• E.Brute force

Comment: *

Name: *

Email: *

Verification: *

A company is not familiar with the risks associated with IPv6. The systems administrator wants to isolate IPv4 from IPv6 traffic between two different network segments. Which of the following should the company implement? (Select TWO)

• A.Use an internal firewall to block UDP port 3544.
• B.Disable network discovery protocol on all company routers.
• C.Block IP protocol 41 using Layer 3 switches.
• D.Disable the DHCPv6 service from all routers.
• E.Drop traffic for ::/0 at the edge firewall.
• F.Implement a 6in4 proxy server.

Comment: *

Name: *

Email: *

Verification: *