After a security incident, a network security engineer discovers that a portion of the company's sensitive external traffic has been redirected through a secondary ISP that is not normally used.
Which of the following would BEST secure the routes while allowing the network to function in the event of a single provider failure?

• A.Disable BGP and implement a single static route for each internal network.
• B.Disable BGP and implement OSPF.
• C.Implement an inbound BGP prefix list.
• D.Implement a BGP route reflector.

Comment: *

Name: *

Email: *

Verification: *

A security engineer needs to implement a solution to increase the security posture of user endpoints by providing more visibility and control over local administrator accounts. The endpoint security team is overwhelmed with alerts and wants a solution that has minimal operational burdens. Additionally, the solution must maintain a positive user experience after implementation.
Which of the following is the BEST solution to meet these objectives?

• A.Implement EDR, keep users in the local administrators group, and enable user behavior analytics.
• B.Implement Privileged Access Management (PAM), keep users in the local administrators group, and enable local administrator account monitoring.
• C.Implement PAM, remove users from the local administrators group, and prompt users for explicit approval when elevated privileges are required.
• D.Implement EDR, remove users from the local administrators group, and enable privilege escalation monitoring.

Comment: *

Name: *

Email: *

Verification: *

A company is preparing to deploy a global service.
Which of the following must the company do to ensure GDPR compliance? (Choose two.)

• A.Provide optional data encryption.
• B.Provide opt-in/out for marketing messages.
• C.Provide alternative authentication techniques.
• D.Grant data access to third parties.
• E.Inform users regarding what data is stored.
• F.Provide data deletion capabilities.

Comment: *

Name: *

Email: *

Verification: *

An analyst execute a vulnerability scan against an internet-facing DNS server and receives the following report:

Which of the following tools should the analyst use FIRST to validate the most critical vulnerability?

• A.Account enumerator
• B.Password cracker
• C.Exploitation framework
• D.Port scanner

Comment: *

Name: *

Email: *

Verification: *

A security analyst is concerned that a malicious piece of code was downloaded on a Linux system. After some research, the analyst determines that the suspected piece of code is performing a lot of input/output (I/O) on the disk drive.

Based on the output above, from which of the following process IDs can the analyst begin an investigation?

• A.83
• B.65
• C.87
• D.77

Comment: *

Name: *

Email: *

Verification: *