During a security event investigation, a junior analyst fails to create an image of a server's hard drive before removing the drive and sending it to the forensics analyst. Later, the evidence from the analysis is not usable in the prosecution of the attackers due to the uncertainty of tampering.
Which of the following should the junior analyst have followed?

• A.Order of volatility
• B.Chain of custody
• C.Data recovery
• D.Continuity of operations

Comment: *

Name: *

Email: *

Verification: *

A cloud architect needs to isolate the most sensitive portion of the network while maintaining hosting in a public cloud Which of the following configurations can be employed to support this effort?

• A.Sandbox the servers with the public cloud by server type
• B.Create a hybrid cloud with an on-premises instance for the most sensitive server types.
• C.Create a single-tenancy security group in the public cloud that hosts only similar types of servers
• D.Privatize the cloud by implementing an on-premises instance.

Comment: *

Name: *

Email: *

Verification: *

A penetration tester is conducting an assessment on Comptia.org and runs the following command from a coffee shop while connected to the public Internet:

Which of the following should the penetration tester conclude about the command output?

• A.192.168.102.67 is a backup mail server that may be more vulnerable to attack
• B.The public/private views on the Comptia.org DNS servers are misconfigured
• C.The DNS SPF records have not been updated for Comptia.org
• D.Comptia.org is running an older mail server, which may be vulnerable to exploits

Comment: *

Name: *

Email: *

Verification: *

During the deployment of a new system, the implementation team determines that APIs used to integrate the new system with a legacy system are not functioning properly Further investigation shows there is a misconfigured encryption algorithm used to secure data transfers between systems.
Which of the following should the project manager use to determine the source of the defined algorithm in use?

• A.Code repositories.
• B.Security requirements traceability matrix.
• C.Software development life cycle.
• D.Data design diagram.
• E.Roles matrix.
• F.Implementation guide.

Comment: *

Name: *

Email: *

Verification: *

During a sprint, developers are responsible for ensuring the expected outcome of a change is thoroughly evaluated for any security impacts. Any impacts must be reported to the team lead. Before changes are made to the source code, which of the following MUST be performed to provide the required information to the team lead?

• A.User story development
• B.Data abstraction
• C.Business impact assessment
• D.Risk assessment
• E.Regression testing

Comment: *

Name: *

Email: *

Verification: *