There are several reports of sensitive information being disclosed via file sharing services. The company would like to improve its security posture against this threat. Which of the following security controls would best support the company in this scenario?

• A.Implement step-up authentication for administrators
• B.Improve employee training and awareness
• C.Increase password complexity standards
• D.Deploy mobile device management

Comment: *

Name: *

Email: *

Verification: *

A security analyst needs to mitigate a known, exploited vulnerability related not tack vector that embeds software through the USB interface. Which of the following should the analyst do first?

• A.Conduct security awareness training on the risks of using unknown and unencrypted USBs.
• B.Write a removable media policy that explains that USBs cannot be connected to a company asset.
• C.Check configurations to determine whether USB ports are enabled on company assets.
• D.Review logs to see whether this exploitable vulnerability has already impacted the company.

Comment: *

Name: *

Email: *

Verification: *

A company recently removed administrator rights from all of its end user workstations. An analyst uses CVSSv3.1 exploitability metrics to prioritize the vulnerabilities for the workstations and produces the following information:

Which of the following vulnerabilities should be prioritized for remediation?

• A.nessie.explosion
• B.vote.4p
• C.sweet.bike
• D.great.skills

Comment: *

Name: *

Email: *

Verification: *

A security program was able to achieve a 30% improvement in MTTR by integrating security controls into a SIEM. The analyst no longer had to jump between tools. Which of the following best describes what the security program did?

• A.Data enrichment
• B.Security control plane
• C.Threat feed combination
• D.Single pane of glass

Comment: *

Name: *

Email: *

Verification: *

Which of the following would an organization use to develop a business continuity plan?

• A.A diagram of all systems and interdependent applications
• B.A repository for all the software used by the organization
• C.A prioritized list of critical systems defined by executive leadership
• D.A configuration management database in print at an off-site location

Comment: *

Name: *

Email: *

Verification: *