A cybersecurity analyst is conducting a security test to ensure that information regarding the web server is protected from disclosure. The cybersecurity analyst requested an HTML file from the web server, and the response came back as follows:

Which of the following actions should be taken to remediate this security issue?

• A.Set "Allowlatescanning" to 1 in the URLScan.ini configuration file.
• B.Set "Enablelogging" to 0 in the URLScan.ini configuration file.
• C.Set "Perprocesslogging" to 1 in the URLScan.ini configuration file.
• D.Set "Removeserverheader" to 1 in the URLScan.ini configuration file.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be found within an organization's acceptable use policy?

• A.Consequences of violating the policy could include discipline up to and including termination.
• B.Passwords must be eight characters in length and contain at least one special character.
• C.Administrator accounts must be audited monthly, and inactive accounts should be removed.
• D.Customer data must be handled properly, stored on company servers, and encrypted when possible

Comment: *

Name: *

Email: *

Verification: *

Due to new regulations, a company has decided to institute an organizational vulnerability management program and assign the function to the security team. Which of the following frameworks would BEST support the program? (Select two.)

• A.COBIT
• B.NIST
• C.ISO 27000 series
• D.ITIL
• E.OWASP

Comment: *

Name: *

Email: *

Verification: *

A software assurance lab is performing a dynamic assessment on an application by automatically generating and inputting different, random data sets to attempt to cause an error/failure condition. Which of the following software assessment capabilities is the lab performing AND during which phase of the SDLC should this occur? (Select two.)

• A.Behavior modeling
• B.Prototyping phase
• C.Planning phase
• D.Requirements phase
• E.Static code analysis
• F.Fuzzing

Comment: *

Name: *

Email: *

Verification: *

An incident response report indicates a virus was introduced through a remote host that was connected to corporate resources. A cybersecurity analyst has been asked for a recommendation to solve this issue.
Which of the following should be applied?

• A.MAC
• B.TAP
• C.NAC
• D.ACL

Comment: *

Name: *

Email: *

Verification: *