The development team has requested permission to use several open-source libraries to build a corporate web application.
Which resource can the security team recommend to ensure these libraries can be trusted?

• A.Agile software development
• B.Waterfall software development
• C.Common Vulnerabilities and Exposures (CVE)
• D.Continuous delivery

Comment: *

Name: *

Email: *

Verification: *

What is one purpose of an End User License Agreement?

• A.Allow customers to legally create and sell a new version of the software
• B.Allow customers to legally use the software
• C.Allow customers to legally modify and compile the source code
• D.Allow customers to legally distribute the application to other users

Comment: *

Name: *

Email: *

Verification: *

A company is concerned about advanced persistent threats and wants to implement a security solution that can detect any unusual actions. The company wants to analyze the actions and trends of users and entities to identify any potential security risks.
Which security technology meets the needs of the company?

• A.User and entity behavior analytics (UEBA)
• B.Hardware security module (HSM)
• C.Antivirus tools
• D.Two-factor authentication

Comment: *

Name: *

Email: *

Verification: *

A security team has been informed that user data on the network has been compromised.
What is the first step the organization should take to respond to this data breach?

• A.Notify affected users of the incident
• B.Implement an access control policy
• C.Increase encryption levels
• D.Publicly announce the breach

Comment: *

Name: *

Email: *

Verification: *

A company has discovered a vulnerability in its lightweight directory access protocol (LDAP) implementation, which could potentially allow unauthorized access to sensitive information. The company has decided to implement risk mitigation strategies to reduce the risk associated with this vulnerability.
Which risk mitigation strategy will meet the needs of the company?

• A.Conducting regular security awareness training for employees to prevent social engineering attacks targeting LDAP credentials
• B.Regularly backing up data stored in the LDAP server to prevent data loss in the event of a breach
• C.Implementing intrusion detection and prevention systems (IDPS) to monitor for suspicious activities and potential LDAP attacks
• D.Implementing strong authentication mechanisms and encryption protocols to secure communication between the LDAP server and clients

Comment: *

Name: *

Email: *

Verification: *