An organization has deployed a cloud-based storage system for shared data that is in phase two of the data life cycle. Which of the following controls should the security team ensure are addressed? (Choose two.)

• A.Access controls
• B.Data classification
• C.Data destruction
• D.Backups
• E.Encryption
• F.Data loss prevention

Comment: *

Name: *

Email: *

Verification: *

A security analyst obtained the following table of results from a recent vulnerability assessment that was conducted against a single web server in the environment:

Which of the following should be completed first to remediate the findings?

• A.Ask the web development team to update the page contents
• B.Add the IP address allow listing for control panel access
• C.Purchase an appropriate certificate from a trusted root CA
• D.Perform proper sanitization on all fields

Comment: *

Name: *

Email: *

Verification: *

While configuring a SIEM for an organization, a security analyst is having difficulty correlating incidents across different systems. Which of the following should be checked first?

• A.NTP configuration on each system
• B.If appropriate logging levels are set
• C.Behavioral correlation settings
• D.Data normalization rules

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the most important reason for an incident response team to develop a formal incident declaration?

• A.To require that an incident be reported through the proper channels
• B.To identify and document staff who have the authority to declare an incident
• C.To allow for public disclosure of a security event impacting the organization
• D.To establish the department that is responsible for responding to an incident

Comment: *

Name: *

Email: *

Verification: *

A company is in the process of implementing a vulnerability management program. no-lich of the following scanning methods should be implemented to minimize the risk of OT/ICS devices malfunctioning due to the vulnerability identification process?

• A.Non-credentialed scanning
• B.Passive scanning
• C.Agent-based scanning
• D.Credentialed scanning

Comment: *

Name: *

Email: *

Verification: *