All staff at a company have started working remotely due to a global pandemic. To transition to remote work, the company has migrated to SaaS collaboration tools. The human resources department wants to use these tools to process sensitive information but is concerned the data could be:
Leaked to the media via printing of the documents
Sent to a personal email address
Accessed and viewed by systems administrators
Uploaded to a file storage site
Which of the following would mitigate the department's concerns?

• A.VDI, proxy, CASB, and DRM
• B.Data loss detection, reverse proxy, EDR, and PGP
• C.Watermarking, forward proxy, DLP, and MFA
• D.Proxy, secure VPN, endpoint encryption, and AV

Comment: *

Name: *

Email: *

Verification: *

A networking team was asked to provide secure remote access to all company employees. The team decided to use client-to-site VPN as a solution. During a discussion, the Chief Information Security Officer raised a security concern and asked the networking team to route the Internet traffic of remote users through the main office infrastructure. Doing this would prevent remote users from accessing the Internet through their local networks while connected to the VPN.
Which of the following solutions does this describe?

• A.Full tunneling
• B.Asymmetric routing
• C.SSH tunneling
• D.Split tunneling

Comment: *

Name: *

Email: *

Verification: *

A security auditor needs to review the manner in which an entertainment device operates. The auditor is analyzing the output of a port scanning tool to determine the next steps in the security review. Given the following log output.
The best option for the auditor to use NEXT is:

• A.A SCAP assessment.
• B.Network interception.
• C.Reverse engineering
• D.Fuzzing

Comment: *

Name: *

Email: *

Verification: *

An analyst execute a vulnerability scan against an internet-facing DNS server and receives the following report:

Which of the following tools should the analyst use FIRST to validate the most critical vulnerability?

• A.Account enumerator
• B.Port scanner
• C.Exploitation framework
• D.Password cracker

Comment: *

Name: *

Email: *

Verification: *

A security architect needs to implement a CASB solution for an organization with a highly distributed remote workforce. One Of the requirements for the implementation includes the capability to discover SaaS applications and block access to those that are unapproved or identified as risky. Which of the following would BEST achieve this objective?

• A.Implement cloud infrastructure to proxy all user web traffic and control access according to centralized policy.
• B.Deploy endpoint agents that monitor local web traffic to enforce DLP and encryption policies.
• C.Implement cloud infrastructure to proxy all user web traffic to enforce DI-P and encryption policies.
• D.Deploy endpoint agents that monitor local web traffic and control access according to centralized policy.

Comment: *

Name: *

Email: *

Verification: *