Which of the following describes a risk and mitigation associated with cloud data storage?

• A.Risk: Shared hardware caused data leakage
  Mitigation: Strong encryption at rest
• B.Risk: Offsite replication
  Mitigation: Multi-site backups
• C.Risk: Data loss from de-duplication
  Mitigation: Dynamic host bus addressing
• D.Risk: Combined data archiving
  Mitigation: Two-factor administrator authentication

Comment: *

Name: *

Email: *

Verification: *

A company's Chief Information Security Officer (CISO) is reviewing KPls from me security operations team These KPls indicate the following trends
* The mean time to close security events that have been escalated to a Tier 2 analyst has not changed
* The average tenure for Tier 1 security analysts has fallen from 12 months to 9 months
* The percentage of events escalated from a Tier 1 analyst to a Tier 2 analyst has increased from 50 to 75.
* The mean time to pick up and respond to a security event has not changed
* Resource and event volumes have not changed
* The overall mean time to close security events has increased from 8 hours to 12 hours Which of the following actions is MOST likely to result in a sustainable improvement in these KPls?

• A.Increase the investment in training for Tier 1 analysts
• B.Move one or more security analysts from Tier 2 to Tier 1
• C.Promote the strongest Tier 1 analyst to Tier 2
• D.Increase the investment in training for Tier 2 analysts

Comment: *

Name: *

Email: *

Verification: *

A development team is testing an in-house-developed application for bugs. During the test, the application crashes several times due to null pointer exceptions. Which of the following tools, if integrated into an IDE during coding, would identify these bugs routinely?

• A.Static code analyzer
• B.Issue tracker
• C.Source code repository
• D.Fuzzing utility

Comment: *

Name: *

Email: *

Verification: *

Company ABC is hiring customer service representatives from Company XYZ. The representatives reside at Company XYZ's headquarters. Which of the following BEST prevents Company XYZ representatives from gaining access to unauthorized Company ABC systems?

• A.Require each Company XYZ employee to use an IPSec connection to the required systems
• B.Require Company XYZ employees to establish an encrypted VDI session to the required systems
• C.Require Company ABC employees to use two-factor authentication on the required systems
• D.Require a site-to-site VPN for intercompany communications

Comment: *

Name: *

Email: *

Verification: *

An engineer is reviewing the security architecture for an enterprise network. During the review, the engineer notices an undocumented node on the network. Which of the following approaches can be utilized to determine how this node operates? (Choose two.)

• A.Employ a static code analyzer
• B.Use reverse engineering and techniques
• C.Use a penetration testing framework to analyze the node
• D.Review network and traffic logs
• E.Assess the node within a continuous integration environment
• F.Analyze the output of a ping sweep

Comment: *

Name: *

Email: *

Verification: *