A small company recently developed prototype technology for a military program. The company's security engineer is concerned about potential theft of the newly developed, proprietary information.
Which of the following should the security engineer do to BEST manage the threats proactively?

• A.Leverage the MITRE ATT&CK framework to map the TTR.
• B.Use OSINT techniques to evaluate and analyze the threats.
• C.Update security awareness training to address new threats, such as best practices for data security.
• D.Join an information-sharing community that is relevant to the company.

Comment: *

Name: *

Email: *

Verification: *

A security analyst is concerned that a malicious piece of code was downloaded on a Linux system. After some research, the analyst determines that the suspected piece of code is performing a lot of input/output (I/O) on the disk drive.

Based on the output above, from which of the following process IDs can the analyst begin an investigation?

• A.65
• B.87
• C.77
• D.83

Comment: *

Name: *

Email: *

Verification: *

A security analyst is trying to identify the source of a recent data loss incident. The analyst has reviewed all the for the time surrounding the identified all the assets on the network at the time of the data loss. The analyst suspects the key to finding the source was obfuscated in an application. Which of the following tools should the analyst use NEXT?

• A.Static code analysis
• B.Network enurrerator
• C.Software Decomplier
• D.Log reduction and analysis tool

Comment: *

Name: *

Email: *

Verification: *

Which of the following allows computation and analysis of data within a ciphertext without knowledge of the plaintext?

• A.Quantum computing
• B.Asymmetric cryptography
• C.Lattice-based cryptography
• D.Homomorphic encryption

Comment: *

Name: *

Email: *

Verification: *

A security engineer was auditing an organization's current software development practice and discovered that multiple open-source libraries were Integrated into the organization's software. The organization currently performs SAST and DAST on the software it develops.
Which of the following should the organization incorporate into the SDLC to ensure the security of the open-source libraries?

• A.Perform additional SAST/DAST on the open-source libraries.
• B.Track the library versions and monitor the CVE website for related vulnerabilities.
• C.Implement the SDLC security guidelines.
• D.Perform unit testing of the open-source libraries.

Comment: *

Name: *

Email: *

Verification: *