A new web server must comply with new secure-by-design principles and PCI DSS. This includes mitigating the risk of an on-path attack. A security analyst is reviewing the following web server configuration:

Which of the following ciphers should the security analyst remove to support the business requirements?

• A.TLS_AES_128_CCM_8_SHA256
• B.TLS_DHE_DSS_WITH_RC4_128_SHA
• C.TLS_CHACHA20_POLY1305_SHA256
• D.TLS_AES_128_GCM_SHA256

Comment: *

Name: *

Email: *

Verification: *

Device event logs sources from MDM software as follows:

Which of the following security concerns and response actions would BEST address the risks posed by the device in the logs?

• A.Resource leak; recover the device for analysis and clean up the local storage.
• B.Falsified status reporting; remotely wipe the device.
• C.Malicious installation of an application; change the MDM configuration to remove application ID 1220.
• D.Impossible travel; disable the device's account and access while investigating.

Comment: *

Name: *

Email: *

Verification: *

A security engineer has been asked to close all non-secure connections from the corporate network. The engineer is attempting to understand why the corporate UTM will not allow users to download email via IMAPS. The engineer formulates a theory and begins testing by creating the firewall ID 58, and users are able to download emails correctly by using IMAP instead. The network comprises three VLANs:

The security engineer looks at the UTM firewall rules and finds the following:

Which of the following should the security engineer do to ensure IMAPS functions properly on the corporate user network?

• A.Make sure the UTM certificate is imported on the corporate computers.
• B.Contact the email service provider and ask if the company IP is blocked.
• C.Create an IMAPS firewall rule to ensure email is allowed.
• D.Confirm the email server certificate is installed on the corporate computers.

Comment: *

Name: *

Email: *

Verification: *

A company that uses AD is migrating services from LDAP to secure LDAP. During the pilot phase, services are not connecting properly to secure LDAP. Block is an except of output from the troubleshooting session:

Which of the following BEST explains why secure LDAP is not working? (Select TWO.)

• A.Secure LDAP does not support wildcard certificates.
• B.The company is using the wrong port. It should be using port 389 for secure LDAP.
• C.The clients may not trust Chicago by default.
• D.The clients may not trust idapt by default.
• E.Danvills.com is under a DDoS-inator attack and cannot respond to OCSP requests.
• F.The secure LDAP service is not started, so no connections can be made.
• G.Secure LDAP should be running on UDP rather than TCP.

Comment: *

Name: *

Email: *

Verification: *

Users are claiming that a web server is not accessible. A security engineer logs for the site. The engineer connects to the server and runs netstat -an and receives the following output:
Which of the following is MOST likely happening to the server?

• A.Port scanning
• B.ARP spoofing
• C.Buffer overflow
• D.Denial of service

Comment: *

Name: *

Email: *

Verification: *