A security analyst receives an alert from the SIEM regarding unusual activity on an authorized public SSH jump server. To further investigate, the analyst pulls the event logs directly from /var/log/auth.log: graphic.ssh_auth_log.
Which of the following actions would BEST address the potential risks by the activity in the logs?

• A.Implementing host-key preferences
• B.Alerting the misconfigured service account password
• C.Modifying the AllowUsers configuration directive
• D.Restricting external port 22 access

Comment: *

Name: *

Email: *

Verification: *

A company just released a new video card. Due to limited supply and nigh demand, attackers are employing automated systems to purchase the device through the company's web store so they can resell it on the secondary market. The company's Intended customers are frustrated. A security engineer suggests implementing a CAPTCHA system on the web store to help reduce the number of video cards purchased through automated systems. Which of the following now describes the level of risk?

• A.Transferred
• B.Mitigated
• C.Residual
• D.Inherent
  Low

Comment: *

Name: *

Email: *

Verification: *

A company is preparing to deploy a global service.
Which of the following must the company do to ensure GDPR compliance? (Choose two.)

• A.Inform users regarding what data is stored.
• B.Provide opt-in/out for marketing messages.
• C.Provide data deletion capabilities.
• D.Provide optional data encryption.
• E.Grant data access to third parties.
• F.Provide alternative authentication techniques.

Comment: *

Name: *

Email: *

Verification: *

An organization is preparing to migrate its production environment systems from an on-premises environment to a cloud service. The lead security architect is concerned that the organization's current methods for addressing risk may not be possible in the cloud environment.
Which of the following BEST describes the reason why traditional methods of addressing risk may not be possible in the cloud?

• A.Risks to data in the cloud cannot be mitigated.
• B.Migrating operations assumes the acceptance of all risk.
• C.Specific risks cannot be transferred to the cloud provider.
• D.Cloud providers are unable to avoid risk.

Comment: *

Name: *

Email: *

Verification: *

A security analyst notices a number of SIEM events that show the following activity:

Which of the following response actions should the analyst take FIRST?

• A.Restart Microsoft Windows Defender.
• B.Disable local administrator privileges on the endpoints.
• C.Disable powershell.exe on all Microsoft Windows endpoints.
• D.Configure the forward proxy to block 40.90.23.154.

Comment: *

Name: *

Email: *

Verification: *