A company has issued a new mobile device policy permitting BYOD and company-issued devices. The company-issued device has a managed middleware client that restricts the applications allowed on company devices and provides those that are approved. The middleware client provides configuration standardization for both company owned and BYOD to secure data and communication to the device according to industry best practices. The policy states that,
"BYOD clients must meet the company's infrastructure requirements to permit a connection." The company also issues a memorandum separate from the policy, which provides instructions for the purchase, installation, and use of the middleware client on BYOD. Which of the following is being described?

• A.Asset management
• B.IT governance
• C.Change management
• D.Transference of risk

Comment: *

Name: *

Email: *

Verification: *

A security administrator must configure the database server shown below to comply with the four requirements listed. Drag and drop the appropriate ACL that should be configured on the database server to its corresponding requirement. Answer options may be used once or not at all.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

A security engineer is attempting to convey the importance of including job rotation in a company's
standard security policies. Which of the following would be the BEST justification?

• A.Forcing different people to perform the same job minimizes the amount of time malicious actions go
  undetected by forcing malicious actors to attempt collusion between two or more people.
• B.It eliminates the need to share administrative account passwords because employees gain
  administrative rights as they rotate into a new job area.
• C.Administrators and engineers who perform multiple job functions throughout the day benefit from being
  cross-trained in new job areas.
• D.Making employees rotate through jobs ensures succession plans can be implemented and prevents
  single point of failure.

Comment: *

Name: *

Email: *

Verification: *

An administrator is tasked with securing several website domains on a web server. The administrator elects to secure www.example.com, mail.example.org, archive.example.com, and www.example.org with the same certificate. Which of the following would allow the administrator to secure those domains with a single issued certificate?

• A.Intermediate Root Certificate
• B.Wildcard Certificate
• C.EV x509 Certificate
• D.Subject Alternative Names Certificate

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer (CISO) is running a test to evaluate the security of the corporate network and attached devices. Which of the following components should be executed by an outside vendor?

• A.Penetration tests
• B.Tabletop exercises
• C.Vulnerability assessment
• D.Blue-team operations

Comment: *

Name: *

Email: *

Verification: *