An organization has implemented a two-step verification process to protect user access to data that is stored in the cloud. Each employee now uses an email address or mobile number to receive a code to access the data.
Which of the following authentication methods did the organization implement?

• A.Push notification
• B.HOTP
• C.Static code
• D.Token key

Comment: *

Name: *

Email: *

Verification: *

A technician needs to prevent data loss in a laboratory. The laboratory is not connected to any external networks. Which of the following methods would BEST prevent the exfiltration of data? (Select TWO).

• A.Network firewall
• B.Drive encryption
• C.VPN
• D.USB blocker
• E.File-level encryption
• F.MFA

Comment: *

Name: *

Email: *

Verification: *

A web application is configured to target browsers and allow access to bank accounts to siphon money to a foreign account.
This is an example of which of the following attacks?

• A.Flash cookie exploitation
• B.Cross-site scripting
• C.Header manipulation
• D.SQL injection

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST example of a reputation impact identified during a risk assessment?

• A.An attacker defacing the e-commerce portal.
• B.A bad software patch taking down the production systems.
• C.Malware collecting credentials for company bank accounts.
• D.A misconfigured firewall exposing intellectual properly to the internet.

Comment: *

Name: *

Email: *

Verification: *

Every morning, a systems administrator monitors failed login attempts on the company's log management server. The administrator notices the DBAdmin account has five failed username and/or password alerts during a ten-minute window. The systems administrator determines the user account is a dummy account used to attract attackers.
Which of the following techniques should the systems administrator implement?

• A.Role-based access control
• B.Honeypot
• C.Rule-based access control
• D.Password cracker

Comment: *

Name: *

Email: *

Verification: *