A company recently removed administrator rights from all of its end user workstations. An analyst uses CVSSv3.1 exploitability metrics to prioritize the vulnerabilities for the workstations and produces the following information:

Which of the following vulnerabilities should be prioritized for remediation?

• A.nessie.explosion
• B.vote.4p
• C.sweet.bike
• D.great.skills

Comment: *

Name: *

Email: *

Verification: *

Which of the following documents sets requirements and metrics for a third-party response during an event?

• A.BIA
• B.DRP
• C.SLA
• D.MOU

Comment: *

Name: *

Email: *

Verification: *

A security analyst reviews a packet capture and identifies the following output as anomalous:
13:49:57.553161 TP10.203.10.17.45701>10.203.10.22.12930:Flags[FPU],seq108331482,win1024,urg0, length0
13:49:57.553162 IP10.203.10.17.45701>10.203.10.22.48968:Flags[FPU],seq108331482,win1024,urg0, length0
...
Which of the following activities explains the output?

• A.Nmap Xmas scan
• B.Nikto's web scan
• C.Socat's proxying traffic using the urgent flag
• D.Angry IP Scanner output

Comment: *

Name: *

Email: *

Verification: *

Which of the following would eliminate the need for different passwords for a variety or internal application?

• A.CASB
• B.SSO
• C.PAM
• D.MFA

Comment: *

Name: *

Email: *

Verification: *

A security team identified several rogue Wi-Fi access points during the most recent network scan. The network scans occur once per quarter. Which of the following controls would best all ow the organization to identity rogue devices more quickly?

• A.Implement a continuous monitoring policy.
• B.Implement a BYOD policy.
• C.Implement a portable wireless scanning policy.
• D.Change the frequency of network scans to once per month.

Comment: *

Name: *

Email: *

Verification: *