An Organization requires secure configuration baselines for all platforms and technologies that are used. If any system cannot conform to the secure baseline, the organization must process a risk acceptance and receive approval before the system is placed into production. It may have non-conforming systems in its lower environments (development and staging) without risk acceptance, but must receive risk approval before the system is placed in production. Weekly scan reports identify systems that do not conform to any secure baseline.
The application team receive a report with the following results:
There are currently no risk acceptances for baseline deviations. This is a mission-critical application, and the organization cannot operate If the application is not running. The application fully functions in the development and staging environments. Which of the following actions should the application team take?

• A.Process a risk acceptance for 2633 and remediate 3124.
• B.Remediate 2633 and 3124 immediately.
• C.Shut down NYAccountingProd and Investigate the reason for the different scan results.
• D.Process a risk acceptance for 2633 and 3124.

Comment: *

Name: *

Email: *

Verification: *

An Organization wants to separate permissions for individuals who perform system changes from individuals who perform auditing of those system changes. Which of the following access control approaches is BEST suited for this?

• A.Assign file and folder permissions on an Individual user basis and avoid group assignment altogether.
• B.Create two groups and ensure each group has representation from both the auditors and the administrators so they can verify any changes that were made.
• C.Assign administrators and auditors to different groups and restrict permissions on system log files to read-only for the auditor group.
• D.Assign administrators and auditors to the same group, but ensure they have different permissions based on the function they perform.

Comment: *

Name: *

Email: *

Verification: *

A security administrator is reviewing the following information from a file that was found on a compromised host:

Which of the following types of malware is MOST likely installed on the compromised host?

• A.Backdoor
• B.Keylogger
• C.Rootkit
• D.Spyware
• E.Trojan

Comment: *

Name: *

Email: *

Verification: *

A company is using a mobile device deployment model in which employees use their personal devices for work at their own discretion. Some of the problems the company is encountering include the following:
There is no standardization.
Employees ask for reimbursement for their devices.
Employees do not replace their devices often enough to keep them running efficiently.
The company does not have enough control over the devices.
Which of the following is a deployment model that would help the company overcome these problems?

• A.BYOD
• B.VDI
• C.COPE
• D.CYOD

Comment: *

Name: *

Email: *

Verification: *

Management wants to ensure any sensitive data on company-provided cell phones is isolated in a single location that can be remotely wiped if the phone is lost. Which of the following technologies BEST meets this need?

• A.Geofencing
• B.Containerization
• C.Device encryption
• D.Sandboxing

Comment: *

Name: *

Email: *

Verification: *