An insurance company has two million customers and is researching the top transactions on its customer portal. It identifies that the top transaction is currently password reset. Due to users not remembering their secret questions, a large number of calls are consequently routed to the contact center for manual password resets. The business wants to develop a mobile application to improve customer engagement in the future, continue with a single factor of authentication, minimize management overhead of the solution, remove passwords, and eliminate to the contact center. Which of the following techniques would BEST meet the requirements? (Choose two.)

• A.Magic link sent to an email address
• B.Hardware tokens sent to customers
• C.Certificate sent to be installed on a device
• D.SMS with OTP sent to a mobile number
• E.Customer ID sent via push notification
• F.Third-party social login

Comment: *

Name: *

Email: *

Verification: *

There have been some failures of the company's internal facing website. A security engineer has found the WAF to be the root cause of the failures. System logs show that the WAF has been unavailable for 14 hours over the past month, in four separate situations. One of these situations was a two hour scheduled maintenance time, aimed at improving the stability of the WAF. Using the MTTR based on the last month's performance figures, which of the following calculations is the percentage of uptime assuming there were 722 hours in the month?

• A.92.24 percent
• B.98.06 percent
• C.98.34 percent
• D.99.72 percent

Comment: *

Name: *

Email: *

Verification: *

A company wants to configure its wireless network to require username and password authentication. Which of the following should the system administrator implement?

• A.WPS
• B.PKI
• C.TKIP
• D.PEAP

Comment: *

Name: *

Email: *

Verification: *

A security analyst works for a defense contractor that produces classified research on drones. The contractor faces nearly constant attacks from sophisticated nation-state actors and other APIs.
Which of the following would help protect the confidentiality of the research data?

• A.Purge all data remnants from client devices' volatile memory at regularly scheduled intervals
• B.Use only in-house developed applications that adhere to strict SDLC security requirements
• C.Implement non-heterogeneous components at the network perimeter
• D.Use diverse components in layers throughout the architecture

Comment: *

Name: *

Email: *

Verification: *

One of the objectives of a bank is to instill a security awareness culture. Which of the following are techniques that could help to achieve this? (Choose two.)

• A.Phishing simulations
• B.Separation of duties
• C.Blue teaming
• D.Lunch-and-learn
• E.Random audits
• F.Continuous monitoring

Comment: *

Name: *

Email: *

Verification: *