A company provides on-demand cloud computing resources for a sensitive project. The company implements a fully virtualized datacenter and terminal server access with two- factor authentication for customer access to the administrative website. The security administrator at the company has uncovered a breach in data confidentiality. Sensitive data from customer A was found on a hidden directory within the VM of company B.
Company B is not in the same industry as company A and the two are not competitors. Which of the following has MOST likely occurred?

• A.Both VMs were left unsecured and an attacker was able to exploit network vulnerabilities to access each and move the data.
• B.A stolen two factor token was used to move data from one virtual guest to another host on the same network segment.
• C.A hypervisor server was left un-patched and an attacker was able to use a resource exhaustion attack to gain unauthorized access.
• D.An employee with administrative access to the virtual guests was able to dump the guest memory onto a mapped disk.

Comment: *

Name: *

Email: *

Verification: *

The board of a financial services company has requested that the senior security analyst acts as a cybersecurity advisor in order to comply with recent federal legislation. The analyst is required to give a report on current cybersecurity and threat trends in the financial services industry at the next board meeting. Which of the following would be the BEST methods to prepare this report? (Choose two.)

• A.Review the CVE database for critical exploits over the past year
• B.Use intelligence gathered from the Internet relay chat channels
• C.Perform a penetration test of the competitor's network and share the results with the board
• D.Request information from security vendors and government agencies
• E.Use social media to contact industry analysts

Comment: *

Name: *

Email: *

Verification: *

A legacy web application, which is being used by a hospital, cannot be upgraded for 12 months. A new vulnerability is found in the legacy application, and the networking team is tasked with mitigation.
Middleware for mitigation will cost $100,000 per year. Which of the following must be calculated to determine ROI? (Choose two.)

• A.ARO
• B.MTBF
• C.RTO
• D.RPO
• E.ALE

Comment: *

Name: *

Email: *

Verification: *

A security analyst is inspecting pseudocode of the following multithreaded application:

Which of the following security concerns is evident in the above pseudocode?

• A.Time of check/time of use
• B.Resource exhaustion
• C.Improper storage of sensitive data
• D.Privilege escalation

Comment: *

Name: *

Email: *

Verification: *

A security consultant is attempting to discover if the company is utilizing databases on client machines to store the customer data. The consultant reviews the following information:

Which of the following commands would have provided this output?

• A.arp -s
• B.sqlmap -w
• C.netstat -a
• D.ifconfig -arp

Comment: *

Name: *

Email: *

Verification: *