An organization is planning for disaster recovery and continuity of operations.
INSTRUCTIONS
Review the following scenarios and instructions. Match each relevant finding to the affected host.
After associating scenario 3 with the appropriate host(s), click the host to select the appropriate corrective action for that finding.
Each finding may be used more than once.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

A security analyst is investigating a series of suspicious emails by employees to the security team. The email appear to come from a current business partner and do not contain images or URLs. No images or URLs were stripped from the message by the security tools the company uses instead, the emails only include the following in plain text.

Which of the following should the security analyst perform?

• A.Configure the email gateway to automatically quarantine all messages originating from the business partner.
• B.Contact the security department at the business partner and alert them to the email event.
• C.Pull the devices of the affected employees from the network in case they are infected with a zero-day virus.
• D.Block the IP address for the business partner at the perimeter firewall.

Comment: *

Name: *

Email: *

Verification: *

A company suspects a web server may have been infiltrated by a rival corporation. The security engineer reviews the web server logs and finds the following:

The security engineer looks at the code with a developer, and they determine the log entry is created when the following line is run:

Which of the following is an appropriate security control the company should implement?

• A.Restrict directory permission to read-only access.
• B.Separate the items in the system call to prevent command injection.
• C.Use server-side processing to avoid XSS vulnerabilities in path input.
• D.Parameterize a query in the path variable to prevent SQL injection.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are risks associated with vendor lock-in? (Choose two.)

• A.The client experiences decreased quality of service.
• B.The vendor can change product offerings.
• C.The client experiences increased interoperability.
• D.The client can leverage a multicloud approach.
• E.The client can seamlessly move data.
• F.The client receives a sufficient level of service.

Comment: *

Name: *

Email: *

Verification: *

A security consultant needs to set up wireless security for a small office that does not have Active Directory. Despite the lack of central account management, the office manager wants to ensure a high level of defense to prevent brute-force attacks against wireless authentication.
Which of the following technologies would BEST meet this need?

• A.Faraday cage
• B.WPA2 PSK
• C.WPA3 SAE
• D.WEP 128 bit

Comment: *

Name: *

Email: *

Verification: *