A new cybersecurity analyst is tasked with creating an executive briefing on possible threats to the organization. Which of the following will produce the data needed for the briefing?

• A.Firewall logs
• B.Indicators of compromise
• C.Risk assessment
• D.Access control lists

Comment: *

Name: *

Email: *

Verification: *

Which of the following best explains the importance of network microsegmentation as part of a Zero Trust architecture?

• A.To allow policies that are easy to manage and less granular
• B.To increase the costs associated with regulatory compliance
• C.To limit how far an attack can spread
• D.To reduce hardware costs with the use of virtual appliances

Comment: *

Name: *

Email: *

Verification: *

A vulnerability scan shows the following issues:
Asset Type
CVSS Score
Exploit Vector
Workstations
6.5
RDP vulnerability
Storage Server
9.0
Unauthorized access due to server application vulnerability
Firewall
8.9
Default password vulnerability
Web Server
10.0
Zero-day vulnerability (vendor working on patch)
Which of the following actions should the security analyst take first?

• A.Contact the web systems administrator and request that they shut down the asset.
• B.Monitor the patch releases for all items and escalate patching to the appropriate team.
• C.Run the vulnerability scan again to verify the presence of the critical finding.
• D.Forward the advisory to the web security team and initiate the prioritization strategy for the other vulnerabilities.

Comment: *

Name: *

Email: *

Verification: *

A recent penetration test discovered that several employees were enticed to assist attackers by visiting specific websites and running downloaded files when prompted by phone calls. Which of the following would best address this issue?

• A.Increasing training and awareness for all staff
• B.Ensuring that malicious websites cannot be visited
• C.Blocking all scripts downloaded from the internet
• D.Disabling all staff members' ability to run downloaded applications

Comment: *

Name: *

Email: *

Verification: *

Which of the following best describes the reporting metric that should be utilized when measuring the degree to which a system, application, or user base is affected by an uptime availability outage?

• A.Timeline
• B.Evidence
• C.Impact
• D.Scope

Comment: *

Name: *

Email: *

Verification: *