A company is concerned with finding sensitive file storage locations that are open to the public. The current internal cloud network is flat. Which of the following is the best solution to secure the network?

• A.Implement segmentation with ACLs.
• B.Configure logging and monitoring to the SIEM.
• C.Deploy MFA to cloud storage locations.
• D.Roll out an IDS.

Comment: *

Name: *

Email: *

Verification: *

An analyst is evaluating a vulnerability management dashboard. The analyst sees that a previously remediated vulnerability has reappeared on a database server. Which of the following is the most likely cause?

• A.The finding is a false positive and should be ignored.
• B.A rollback had been executed on the instance.
• C.The vulnerability scanner was configured without credentials.
• D.The vulnerability management software needs to be updated.

Comment: *

Name: *

Email: *

Verification: *

Which of the following will most likely ensure that mission-critical services are available in the event of an incident?

• A.Business continuity plan
• B.Disaster recovery plan
• C.Vulnerability management plan
• D.Asset management plan

Comment: *

Name: *

Email: *

Verification: *

A software developer has been deploying web applications with common security risks to include insufficient logging capabilities. Which of the following actions would be most effective to reduce risks associated with the application development?

• A.Perform static analyses using an integrated development environment.
• B.Deploy compensating controls into the environment.
• C.Implement server-side logging and automatic updates.
• D.Conduct regular code reviews using OWASP best practices.

Comment: *

Name: *

Email: *

Verification: *

Results of a SOC customer service evaluation indicate high levels of dissatisfaction with the inconsistent services provided after regular work hours. To address this, the SOC lead drafts a document establishing customer expectations regarding the SOC's performance and quality of services. Which of the following documents most likely fits this description?

• A.Risk management plan
• B.Vendor agreement
• C.Incident response plan
• D.Service-level agreement

Comment: *

Name: *

Email: *

Verification: *