An organization recently experienced a ransomware attack. The security team leader is concerned about the attack reoccurring. However, no further security measures have been implemented.
Which of the following processes can be used to identify potential prevention recommendations?

• A.Recovery
• B.Detection
• C.Remediation
• D.Preparation

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reviewing the following output:

Which of the following would BEST mitigate this type of attack?

• A.Deploying a honeypot
• B.Placing a WAF inline
• C.Implementing an IDS
• D.Installing a network firewall

Comment: *

Name: *

Email: *

Verification: *

city government's IT director was notified by the City council that the following cybersecurity requirements must be met to be awarded a large federal grant:
+ Logs for all critical devices must be retained for 365 days to enable monitoring and threat hunting.
+ All privileged user access must be tightly controlled and tracked to mitigate compromised accounts.
+ Ransomware threats and zero-day vulnerabilities must be quickly identified.
Which of the following technologies would BEST satisfy these requirements? (Select THREE).

• A.Endpoint protection
• B.Log aggregator
• C.Zero trust network access
• D.PAM
• E.Cloud sandbox
• F.SIEM
• G.NGFW

Comment: *

Name: *

Email: *

Verification: *

A security engineer needs 10 implement a CASB to secure employee user web traffic. A Key requirement is mat relevant event data must be collected from existing on-premises infrastructure components and consumed by me CASB to expand traffic visibility. The solution must be nighty resilient to network outages. Which of the following architectural components would BEST meet these requirements?

• A.Reverse proxy
• B.API mode
• C.Log collection
• D.AWAF

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reading the results of a successful exploit that was recently conducted by third-party penetration testers. The testers reverse engineered a privileged executable. In the report, the planning and execution of the exploit is detailed using logs and outputs from the test However, the attack vector of the exploit is missing, making it harder to recommend remediation's. Given the following output:

The penetration testers MOST likely took advantage of:

• A.A plain-text password disclosure
• B.A TOC/TOU vulnerability
• C.An integer overflow vulnerability
• D.A buffer overflow vulnerability

Comment: *

Name: *

Email: *

Verification: *