An analyst reviews a recent report of vulnerabilities on a company's application server.
Which of the following should the analyst rate as being of the HIGHEST importance to the company's environment?

• A.Use of old encryption algorithms
• B.Banner grabbing
• C.SQL injection
• D.Susceptibility to XSS
• E.Remote code execution

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity consultant is reviewing the following output from a vulnerability scan against a newly installed MS SQL Server 2012 that is slated to go into production in one week:

Based on the above information, which of the following should the system administrator do? (Select TWO).

• A.Mark the result as a false positive so it will show in subsequent scans.
• B.Configure a network-based ACL at the perimeter firewall to protect the MS SQL port.
• C.Implement the proposed solution by installing Microsoft patch Q316333.
• D.Review the references to determine if the vulnerability can be remotely exploited.
• E.Verify the vulnerability using penetration testing tools or proof-of-concept exploits.

Comment: *

Name: *

Email: *

Verification: *

A vulnerability scan came back with critical findings for a Microsoft SharePoint server:

Which of the following actions should be taken?

• A.Patch Microsoft Office on the server.
• B.Install a newer version of Microsoft Office on the server.
• C.Remove Microsoft Office from the server.
• D.Document the finding as an exception.

Comment: *

Name: *

Email: *

Verification: *

The Chief Information Security Officer (CISO) has asked the security analyst to examine abnormally high processor utilization on a key server. The output below is from the company's research and development (R&D) server.

Which of the following actions should the security analyst take FIRST?

• A.Determine availability
• B.Reimage the server
• C.Initiate an investigation
• D.Isolate the R&D server

Comment: *

Name: *

Email: *

Verification: *

A security analyst received several service tickets reporting that a company storefront website is not accessible by internal domain users. However, external users are accessing the website without issue. Which of the following is the MOST likely reason for this behavior?

• A.The time synchronization server is corrupted.
• B.The certificate is expired.
• C.The FQDN is incorrect.
• D.The DNS server is corrupted.

Comment: *

Name: *

Email: *

Verification: *