A user workstation was infected with a new malware variant as a result of a drive-by download.
The security administrator reviews key controls on the infected workstation and discovers the following:

Which of the following would BEST prevent the problem from reoccurring in the future? (Choose two.)

• A.Install HIDS
• B.Install HIPS
• C.Enable DLP
• D.Enable application blacklisting
• E.Improve patch management processes
• F.Install EDR

Comment: *

Name: *

Email: *

Verification: *

A security administrator is advocating for enforcement of a new policy that would require employers with privileged access accounts to undergo periodic inspections and review of certain job performance dat a. To which of the following policies is the security administrator MOST likely referring?

• A.Separation of duties
• B.Mandatory vacation
• C.Least privilege
• D.Background investigation

Comment: *

Name: *

Email: *

Verification: *

A security consultant is attempting to discover if the company is utilizing databases on client machines to store the customer data. The consultant reviews the following information:

Which of the following commands would have provided this output?

• A.sqlmap -w
• B.netstat -a
• C.ifconfig -arp
• D.arp -s

Comment: *

Name: *

Email: *

Verification: *

After an employee was terminated, the company discovered the employee still had access to emails and attached content that should have been destroyed during the off-boarding. The employee's laptop and cell phone were confiscated and accounts were disabled promptly. Forensic investigation suggests the company's DLP was effective, and the content in question was not sent outside of work or transferred to removable medi a. Personality owned devices are not permitted to access company systems or information.
Which of the following would be the MOST efficient control to prevent this from occurring in the future?

• A.Prevent backup of mobile devices to personally owned computers.
• B.Perform unannounced insider threat testing on high-risk employees.
• C.Restrict access to company systems to expected times of day and geographic locations.
• D.Install application whitelist on mobile devices.
• E.Disallow side loading of applications on mobile devices.

Comment: *

Name: *

Email: *

Verification: *

Which of the following systems would be at the GREATEST risk of compromise if found to have an open vulnerability associated with perfect forward secrecy?

• A.Layer 2 switches
• B.Virtual hosts
• C.SIEM
• D.VPN concentrators
• E.Endpoints

Comment: *

Name: *

Email: *

Verification: *