A business wants to migrate its workloads from an exclusively on-premises IT infrastructure to the cloud but cannot implement all the required controls. Which of the following BEST describes the risk associated with this implementation?

• A.Vendor lock-in
• B.Loss of governance
• C.Vendor lockout
• D.Compliance risk

Comment: *

Name: *

Email: *

Verification: *

A large number of emails have been reported, and a security analyst is reviewing the following information from the emails:

As part of the image process, which of the following is the FIRST step the analyst should take?

• A.Block the email address carl b@comptia1 com, as it is sending spam to subject matter experts
• B.Compare the 'Return-Path" and "Received" fields.
• C.Validate the final "Received" header against the DNS entry of the domain.
• D.Ignore the emails, as SPF validation is successful, and it is a false positive

Comment: *

Name: *

Email: *

Verification: *

An auditor needs to scan documents at rest for sensitive text. These documents contain both text and Images.
Which of the following software functionalities must be enabled in the DLP solution for the auditor to be able to fully read these documents? (Select TWO).

• A.Advanced rasterization
• B.Watermarking
• C.Baseline image matching
• D.Document interpolation
• E.Regular expression pattern matching
• F.Optical character recognition functionality

Comment: *

Name: *

Email: *

Verification: *

A software development company makes Its software version available to customers from a web portal. On several occasions, hackers were able to access the software repository to change the package that is automatically published on the website. Which of the following would be the BEST technique to ensure the software the users download is the official software released by the company?

• A.Email the software link to all customers.
• B.Distribute the software via a third-party repository.
• C.Display the SHA checksum on the website.
• D.Close the web repository and deliver the software via email.

Comment: *

Name: *

Email: *

Verification: *

A company's SOC has received threat intelligence about an active campaign utilizing a specific vulnerability.
The company would like to determine whether it is vulnerable to this active campaign.
Which of the following should the company use to make this determination?

• A.Log analysis within the SIEM tool
• B.A system penetration test
• C.The Cyber Kill Chain
• D.Threat hunting

Comment: *

Name: *

Email: *

Verification: *