A customer reports being unable to connect to a website at www.test.com to consume services. The customer notices the web application has the following published cipher suite:

Which of the following is the MOST likely cause of the customer's inability to connect?

• A.The server name should be test.com.
• B.The public key should be using ECDSA.
• C.The default should be on port 80.
• D.Weak ciphers are being used.

Comment: *

Name: *

Email: *

Verification: *

A company suspects a web server may have been infiltrated by a rival corporation. The security engineer reviews the web server logs and finds the following:

The security engineer looks at the code with a developer, and they determine the log entry is created when the following line is run:

Which of the following is an appropriate security control the company should implement?

• A.Separate the items in the system call to prevent command injection.
• B.Parameterize a query in the path variable to prevent SQL injection.
• C.Use server-side processing to avoid XSS vulnerabilities in path input.
• D.Restrict directory permission to read-only access.

Comment: *

Name: *

Email: *

Verification: *

A company has hired a security architect to address several service outages on the endpoints due to new malware. The Chief Executive Officer's laptop was impacted while working from home. The goal is to prevent further endpoint disruption. The edge network is protected by a web proxy.
Which of the following solutions should the security architect recommend?

• A.Add a firewall module on the current antivirus solution.
• B.Implement a deny list feature on the endpoints.
• C.Replace the current antivirus with an EDR solution.
• D.Remove the web proxy and install a UTM appliance.

Comment: *

Name: *

Email: *

Verification: *

A company security engineer arrives at work to face the following scenario:
1) Website defacement
2) Calls from the company president indicating the website needs to be fixed Immediately because It Is damaging the brand
3) A Job offer from the company's competitor
4) A security analyst's investigative report, based on logs from the past six months, describing how lateral movement across the network from various IP addresses originating from a foreign adversary country resulted in exfiltrated data
Which of the following threat actors Is MOST likely involved?

• A.Competitor
• B.Script kiddie
• C.Organized crime
• D.APT/nation-state

Comment: *

Name: *

Email: *

Verification: *

An organization's assessment of a third-party, non-critical vendor reveals that the vendor does not have cybersecurity insurance and IT staff turnover is high. The organization uses the vendor to move customer office equipment from one service location to another. The vendor acquires customer data and access to the business via an API.
Given this information, which of the following is a noted risk?

• A.The possibility of the vendor's business ceasing operations
• B.Technical impact to the API configuration
• C.Financial liability from a vendor data breach
• D.Feature delay due to extended software development cycles

Comment: *

Name: *

Email: *

Verification: *