Loading demo links...
Showing 1–10 of 10 questions
HOTSPOT
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer is in the explanation below.
Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated:
?I?m in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address.?
Which of the following are the best responses to this situation? (Choose two).
Select all that apply, then click Submit answer.
Cancel current employee recognition gift cards.
Add a smishing exercise to the annual company training.
Issue a general email warning to the company.
Have the CEO change phone numbers.
Conduct a forensic investigation on the CEO's phone.
Implement mobile device management.
During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile. Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account? (Select two).
Select all that apply, then click Submit answer.
Federation
Identity proofing
Password complexity
Default password changes
Password manager
Open authentication
Which of the following must be considered when designing a high-availability network? (Select two).
Select all that apply, then click Submit answer.
Ease of recovery
Ability to patch
Physical isolation
Responsiveness
Attack surface
Extensible authentication
A security engineer is implementing FDE for all laptops in an organization. Which of the following are the most important for the engineer to consider as part of the planning process? (Select two).
Select all that apply, then click Submit answer.
Key escrow
TPM presence
Digital signatures
Data tokenization
Public key management
Certificate authority linking
While troubleshooting a firewall configuration, a technician determines that a ?deny any? policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes several company servers to become unreachable. Which of the following actions would prevent this issue?
Select an option, then click Submit answer.
Documenting the new policy in a change request and submitting the request to change management
Testing the policy in a non-production environment before enabling the policy in the production network
Disabling any intrusion prevention signatures on the 'deny any* policy prior to enabling the new policy
Including an 'allow any1 policy above the 'deny any* policy
Which of the following describes a security alerting and monitoring tool that collects system, application, and network logs from multiple sources in a centralized system?
Select an option, then click Submit answer.
SIEM
DLP
IDS
SNMP
Which of the following is used to validate a certificate when it is presented to a user?
Select an option, then click Submit answer.
OCSP
CSR
CA
CRC
Which of the following would be best suited for constantly changing environments?
Select an option, then click Submit answer.
RTOS
Containers
Embedded systems
SCADA
A newly identified network access vulnerability has been found in the OS of legacy loT devices. Which of the following would best mitigate this vulnerability quickly?
Select an option, then click Submit answer.
Insurance
Patching
Segmentation
Replacement
