A security analyst is reviewing the following pseudo-output snippet after running the command less
/tmp/file,tmp.

The information above was obtained from a public-facing website and used to identify military assets. Which of the following should be implemented to reduce the risk of a similar compromise?

• A.Install software to wipe data remnants on servers
• B.Implement a digital watermarking solution
• C.Deploy a solution to sanitize geotagging information
• D.Enforce proper input validation on mission-critical software

Comment: *

Name: *

Email: *

Verification: *

A security auditor suspects two employees of having devised a scheme to steal money from the company. While one employee submits purchase orders for personal items, the other employee approves these purchase orders. The auditor has contacted the human resources director with suggestions on how to detect such illegal activities. Which of the following should the human resource director implement to identify the employees involved in these activities and reduce the risk of this activity occurring in the future?

• A.Background checks
• B.Job rotation
• C.Least privilege
• D.Employee termination procedures

Comment: *

Name: *

Email: *

Verification: *

An internal application has been developed to increase the efficiency of an operational process of a global manufacturer. New code was implemented to fix a security bug, but it has caused operations to halt. The executive team has decided fixing the security bug is less important than continuing operations.
Which of the following would BEST support immediate rollback of the failed fix? (Choose two.)

• A.Version control
• B.Agile development
• C.Continuous integration
• D.Waterfall development
• E.Change management

Comment: *

Name: *

Email: *

Verification: *

A company's chief cybersecurity architect wants to configure mutual authentication to access an internal payroll website.
The architect has asked the administration team to determine the configuration that would provide the best defense against MITM attacks.
Which of the following implementation approaches would BEST support the architect's goals?

• A.Utilize a challenge-response prompt as required input at username/password entry.
• B.Implement TLS and require the client to use its own certificate during handshake.
• C.Install a reverse proxy in the corporate DMZ configured to decrypt TLS sessions.
• D.Configure a web application proxy and institute monitoring of HTTPS transactions.

Comment: *

Name: *

Email: *

Verification: *

An organization is selecting a SaaS provider to replace its legacy, in house Customer Resource Management (CRM) application. Which of the following ensures the organization mitigates the risk of managing separate user credentials?

• A.Ensure the SaaS provider supports dual factor authentication.
• B.Ensure the SaaS provider supports encrypted password transmission and storage.
• C.Ensure the SaaS provider supports secure hash file exchange.
• D.Ensure the SaaS provider supports role-based access control.
• E.Ensure the SaaS provider supports directory services federation.

Comment: *

Name: *

Email: *

Verification: *