A small company's Chief Executive Officer (CEO) has asked its Chief Security Officer (CSO) to improve the company's security posture quickly with regard to targeted attacks.
Which of the following should the CSO conduct FIRST?

• A.Survey threat feeds from services inside the same industry.
• B.Purchase multiple threat feeds to ensure diversity and implement blocks for malicious traffic.
• C.Conduct an internal audit against industry best practices to perform a qualitative analysis.
• D.Deploy a UTM solution that receives frequent updates from a trusted industry vendor.

Comment: *

Name: *

Email: *

Verification: *

Following a recent data breach, a company has hired a new Chief Information Security Officer (CISO). The CISO is very concerned about the response time to the previous breach and wishes to know how the security team expects to react to a future attack. Which of the following is the BEST method to achieve this goal while minimizing disruption?

• A.Hire an external red team audit
• B.Conduct an external vulnerability assessment.
• C.Conduct a tabletop exercise.
• D.Perform a black box assessment
• E.Recreate the previous breach.

Comment: *

Name: *

Email: *

Verification: *

A server (10.0.0.2) on the corporate network is experiencing a DoS from a number of marketing desktops that have been compromised and are connected to a separate network segment. The security engineer implements the following configuration on the management router:

Which of the following is the engineer implementing?

• A.Route protection
• B.Port security
• C.Transport security
• D.Remotely triggered black hole
• E.Address space layout randomization

Comment: *

Name: *

Email: *

Verification: *

A company has created a policy to allow employees to use their personally owned devices. The Chief Information Security Officer (CISO) is getting reports of company data appearing on unapproved forums and an increase in theft of personal electronic devices.
Which of the following security controls would BEST reduce the risk of exposure?

• A.Implementation of email digital signatures
• B.Multifactor authentication
• C.Disk encryption on the local drive
• D.Group policy to enforce failed login lockout

Comment: *

Name: *

Email: *

Verification: *

Following a merger, the number of remote sites for a company has doubled to 52. The company has decided to secure each remote site with an NGFW to provide web filtering, NIDS/NIPS, and network antivirus. The Chief Information Officer (CIO) has requested that the security engineer provide recommendations on sizing for the firewall with the requirements that it be easy to manage and provide capacity for growth.
The tables below provide information on a subset of remote sites and the firewall options:


Which of the following would be the BEST option to recommend to the CIO?

• A.Vendor D for all remote sites
• B.Vendor C for small remote sites, and Vendor B for large sites.
• C.Vendor B for all remote sites
• D.Vendor A for all remote sites
• E.Vendor C for all remote sites

Comment: *

Name: *

Email: *

Verification: *