CAS-003 Exam Dumps | The security administrator finds unauthorized tables and records, which were not present before, on a

<< Prev Question Next Question >>

Question 140/479

The security administrator finds unauthorized tables and records, which were not present before, on a Linux database server. The database server communicates only with one web server, which connects to the database server via an account with SELECT only privileges. Web server logs show the following:
90.76.165.40 - - [08/Mar/2014:10:54:04] "GET calendar.php?create%20table%20hidden HTTP/1.1" 200 5724
90.76.165.40 - - [08/Mar/2014:10:54:05] "GET ../../../root/.bash_history HTTP/1.1" 200 5724
90.76.165.40 - - [08/Mar/2014:10:54:04] "GET index.php?user=<script>Create</script> HTTP/1.1" 200 5724
The security administrator also inspects the following file system locations on the database server using the command 'ls -al /root'
drwxrwxrwx 11 root root 4096 Sep 28 22:45 .
drwxr-xr-x 25 root root 4096 Mar 8 09:30 ..
-rws------ 25 root root 4096 Mar 8 09:30 .bash_history
-rw------- 25 root root 4096 Mar 8 09:30 .bash_history
-rw------- 25 root root 4096 Mar 8 09:30 .profile
-rw------- 25 root root 4096 Mar 8 09:30 .ssh
Which of the following attacks was used to compromise the database server and what can the security administrator implement to detect such attacks in the future? (Select TWO).

A. Privilege escalation

B. Brute force attack

C. SQL injection

D. Cross-site scripting

E. Using input validation, ensure the following characters are sanitized: <>

F. Update crontab with: find / $ -perm -4000 $ -type f -print0 | xargs -0 ls -l | email.sh

G. Implement the following PHP directive: $clean_user_input = addslashes($user_input)

H. Set an account lockout policy

Correct Answer: A,F

This is an example of privilege escalation.
Privilege escalation is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access to resources that are normally protected from an application or user.
The question states that the web server communicates with the database server via an account with SELECT only privileges. However, the privileges listed include read, write and execute (rwx). This suggests the privileges have been 'escalated'.
Now that we know the system has been attacked, we should investigate what was done to the system.
The command "Update crontab with: find / $ -perm -4000 $ -type f -print0 | xargs -0 ls -l | email.sh" is used to find all the files that are setuid enabled. Setuid means set user ID upon execution. If the setuid bit is turned on for a file, the user executing that executable file gets the permissions of the individual or group that owns the file.
Incorrect Answers:
B: A brute force attack is used to guess passwords. This is not an example of a brute force attack.
C: SQL injection is a code injection technique, used to attack data-driven applications, in which malicious SQL statements are inserted into an entry field for execution (e.g. to dump the database contents to the attacker). This is not an example of a SQL Injection attack.
D: Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. XSS enables attackers to inject client-side script into Web pages viewed by other users. This is not an example of an XSS attack.
E: Sanitizing just the <> characters will not prevent such an attack. These characters should not be sanitized in a web application.
G: Adding slashes to the user input will not protect against the input; it will just add slashes to it.
H: An account lockout policy is useful to protect against password attacks. After a number of incorrect passwords, the account will lockout. However, the attack in this question is not a password attack so a lockout policy won't help.

Question List (479q): Question 1: A cybersecurity analyst is conducting packet analysis on the...; Question 2: A business is growing and starting to branch out into other ...; Question 3: A company sales manager received a memo from the company's f...; Question 4: The Chief Executive Officer (CEO) of a large prestigious ent...; Question 5: A newly hired systems administrator is trying to connect a n...; Question 6: A security analyst is reading the results of a successful ex...; Question 7: Exhibit: (Exhibit); Question 8: An organization is integrating an ICS and wants to ensure th...; Question 9: The Chief Financial Officer (CFO) of an organization wants t...; Question 10: A university Chief Information Security Officer is analyzing...; Question 11: A security incident responder discovers an attacker has gain...; Question 12: A newly hired security analyst has joined an established SOC...; Question 13: During a security assessment, an organization is advised of ...; Question 14: A mature organization with legacy information systems has in...; Question 15: A security analyst, who is working in a Windows environment,...; Question 16: Given the following code snippet: (Exhibit) Which of the fol...; Question 17: ABC Company must achieve compliance for PCI and SOX. Which o...; Question 18: A company provides on-demand cloud computing resources for a...; Question 19: An investigator wants to collect the most volatile data firs...; Question 20: During a security assessment, activities were divided into t...; Question 21: A security administrator wants to prevent sensitive data res...; Question 22: Given the following output from a security tool in Kali: (Ex...; Question 23: A database administrator is required to adhere to and implem...; Question 24: A security analyst is attempting to identify code that is vu...; Question 25: A company is facing penalties for failing to effectively com...; Question 26: A company wants to implement a cloud-based security solution...; Question 27: During a sprint, developers are responsible for ensuring the...; Question 28: A Chief Information Securiy Officer (CISO) is reviewing tech...; Question 29: A security officer is leading a lessons learned meeting. Whi...; Question 30: select id, firstname, lastname from authors User input= firs...; Question 31: An administrator has four virtual guests on a host server. T...; Question 32: The Chief Information Security Officer (CISO) has asked the ...; Question 33: Providers at a healthcare system with many geographically di...; Question 34: Exhibit: (Exhibit); Question 35: During a new desktop refresh, all hosts are hardened at the ...; Question 36: An organization is concerned with potential data loss inthe ...; Question 37: As a security administrator, you are asked to harden a serve...; Question 38: A recent overview of the network's security and storage appl...; Question 39: The finance department for an online shopping website has di...; Question 40: A government contractor was the victim of a malicious attack...; Question 41: A security manager looked at various logs while investigatin...; Question 42: A threat advisory alert was just emailed to the IT security ...; Question 43: A security policy states that all applications on the networ...; Question 44: The OS on several servers crashed around the same time for a...; Question 45: Following a security assessment, the Chief Information Secur...; Question 46: Due to a recent breach, the Chief Executive Officer (CEO) ha...; Question 47: An enterprise must ensure that all devices that connect to i...; Question 48: A security analyst is attempting to identify code that is vu...; Question 49: A company provides on-demand cloud computing resources for a...; Question 50: A financial consulting firm recently recovered from some dam...; Question 51: A security administrator wants to stand up a NIPS that is mu...; Question 52: During a security event investigation, a junior analyst fail...; Question 53: Ann, a member of the finance department at a large corporati...; Question 54: The Information Security Officer (ISO) believes that the com...; Question 55: A web services company is planning a one-time high-profile e...; Question 56: A newly hired Chief Information Security Officer (CISO) is r...; Question 57: A company wants to extend its help desk availability beyond ...; Question 58: A security administrator was doing a packet capture and noti...; Question 59: An administrator has noticed mobile devices from an adjacent...; Question 60: The Chief Executive Officer )CEO) of a small company decides...; Question 61: A company is implementing a new secure identity application,...; Question 62: The Chief Information Officer (CIO) is reviewing the IT cent...; Question 63: A security engineer must establish a method to assess compli...; Question 64: An engineer needs to provide access to company resources for...; Question 65: An administrator wants to install a patch to an application....; Question 66: Giventhe following output from a security tool in Kali: (Exh...; Question 67: An insurance company has an online quoting system for insura...; Question 68: A security administrator at Company XYZ is trying to develop...; Question 69: The Chief Information Security Officer (CISO) of an establis...; Question 70: A deployment manager is working with a software development ...; Question 71: An Association is preparing to upgrade their firewalls at fi...; Question 72: A security analyst has been assigned incident response dutie...; Question 73: A developer has implemented a piece of client-side JavaScrip...; Question 74: A security architect is implementing security measures in re...; Question 75: After a large organization has completed the acquisition of ...; Question 76: As part of an organization's compliance program, administrat...; Question 77: An analyst is investigating behavior on a corporate-owned, c...; Question 78: A request has been approved for a vendor to access a new int...; Question 79: A company that uses AD is migrating services from LDAP to se...; Question 80: A Chief Information Officer (CIO) publicly announces the imp...; Question 81: An online bank has contracted with a consultant to perform a...; Question 82: An analyst connects to a company web conference hosted on ww...; Question 83: A software development company lost customers recently becau...; Question 84: A recent CRM upgrade at a branch office was completed after ...; Question 85: A senior network security engineer has been tasked to decrea...; Question 86: The security administrator finds unauthorized tables and rec...; Question 87: A Chief Information Securiy Officer (CISO) is reviewing tech...; Question 88: A forensics analyst suspects that a breach has occurred. Sec...; Question 89: As a security administrator, you are asked to harden a serve...; Question 90: After several industry comnpetitors suffered data loss as a ...; Question 91: A company that all mobile devices be encrypted, commensurate...; Question 92: A security engineer is working on a large software developme...; Question 93: An organization enables BYOD but wants to allow users to acc...; Question 94: An analyst is investigating behavior on a corporate-owned, c...; Question 95: A security consultant is considering authentication options ...; Question 96: Wireless users are reporting issues with the company's video...; Question 97: An organization is facing budget constraints The Chief Techn...; Question 98: A company has entered into a business agreement with a busin...; Question 99: An engineer needs to provide access to company resources for...; Question 100: A systems administrator has deployed the latest patches for ...; Question 101: An organization has decided to reduce labor costs by outsour...; Question 102: A developer emails the following output to a security admini...; Question 103: An IT manager is concerned about the cost of implementing a ...; Question 104: To prepare for an upcoming audit, the Chief Information Secu...; Question 105: First responders, who are part of a core incident response t...; Question 106: The Information Security Officer (ISO) is reviewing a summar...; Question 107: A popular commercial virtualization platform allows for the ...; Question 108: Drag and drop the cloud deployment model to the associated u...; Question 109: A security consultant is considering authentication options ...; Question 110: A security engineer is designing a system in which offshore,...; Question 111: A security administrator adding a NAC requirement for all VP...; Question 112: The government is concerned with remote military missions be...; Question 113: An organization is currently performing a market scan for ma...; Question 114: Which of the following would be used in forensic analysis of...; Question 115: Company ABC's SAN is nearing capacity, and will cause costly...; Question 116: A security analyst has requested network engineers integrate...; Question 117: A product development team has submitted code snippets for r...; Question 118: Joe, a hacker, has discovered he can specifically craft a we...; Question 119: An investigator wants to collect the most volatile data firs...; Question 120: While the code is still in the development environment, a se...; Question 121: An organization is reviewing endpoint security solutions. In...; Question 122: A medical device company is implementing a new COTS antiviru...; Question 123: A user is suspected of engaging in potentially illegal activ...; Question 124: A newly hired systems administrator is trying to connect a n...; Question 125: A security analyst, who is working in a Windows environment,...; Question 126: A request has been approved for a vendor to access a new int...; Question 127: A cloud architect needs to isolate the most sensitive portio...; Question 128: A technician receives the following security alert from the ...; Question 129: A system owner has requested support from data owners to eva...; Question 130: Company A has noticed abnormal behavior targeting their SQL ...; Question 131: The results of an external penetration test for a software d...; Question 132: A Chief Information Security Officer (CISO) has requested th...; Question 133: The results of an external penetration test for a software d...; Question 134: Drag and drop the cloud deployment model to the associated u...; Question 135: A security engineer is analyzing an application during a sec...; Question 136: The helpdesk is receiving multiple calls about slow and inte...; Question 137: A security engineer reviews the table below: (Exhibit) The e...; Question 138: A security analyst who is concerned about sensitive data exf...; Question 139: Customers are receiving emails containing a link to maliciou...; Question 140: The security administrator finds unauthorized tables and rec...; Question 141: A security engineer is responsible for monitoring company ap...; Question 142: Executive management is asking for a new manufacturing contr...; Question 143: Ann, a security administrator, is conducting an assessment o...; Question 144: An organization is deploying IoT locks, sensors, and cameras...; Question 145: A security manager is looking into the following vendor prop...; Question 146: A threat analyst notices the following URL while going throu...; Question 147: Following a recent network intrusion, a company wants to det...; Question 148: A security administrator must configure the database server ...; Question 149: A company's chief cybersecurity architect wants to configure...; Question 150: A regional business is expecting a severe winter storm next ...; Question 151: The network administrator at an enterprise reported a large ...; Question 152: ABC Corporation has introduced token-based authentication to...; Question 153: A Chief Information Security Officer (CISO is reviewing and ...; Question 154: Given the following: (Exhibit) Which of the following vulner...; Question 155: Ann, a user' brings her laptop to an analyst after noticing ...; Question 156: A government entity is developing requirements for an RFP to...; Question 157: To meet a SLA, which of the following document should be dra...; Question 158: The finance department has started to use a new payment syst...; Question 159: An organization has recently deployed an EDR solution across...; Question 160: Following a merger, the number of remote sites for a company...; Question 161: A security architect is designing a new infrastructure using...; Question 162: A security administrator is troubleshooting RADIUS authentic...; Question 163: A user asks a security practitioner for recommendations on s...; Question 164: A company has hired an external security consultant to condu...; Question 165: An engineer is assisting with the design of a new virtualize...; Question 166: A core router was manipulated by a credentialed bypass to se...; Question 167: A company is in the process of outsourcing its customer rela...; Question 168: An educational institution would like to make computer labs ...; Question 169: A network engineer is upgrading the network perimeter and in...; Question 170: A security manager recently categorized an information syste...; Question 171: A security engineer has implemented an internal user access ...; Question 172: Ann, a user' brings her laptop to an analyst after noticing ...; Question 173: Lab Simulation Compliance with company policy requires a qua...; Question 174: A developer has implemented a piece of client-side JavaScrip...; Question 175: Following a security assessment, the Chief Information Secur...; Question 176: Ann, a software developer, wants to publish her newly develo...; Question 177: A security consultant is conducting a network assessment and...; Question 178: A technician uses an old SSL server due to budget constraint...; Question 179: In the past, the risk committee at Company A has shown an av...; Question 180: A system administrator at a medical imaging company discover...; Question 181: An administrator is working with management to develop polic...; Question 182: A company has decided to lower costs by conducting an intern...; Question 183: A security administrator is performing VDI traffic data coll...; Question 184: Joe, a penetration tester, is assessing the security of an a...; Question 185: A security administrator notices the following line in a ser...; Question 186: A company has entered into a business agreement with a busin...; Question 187: A company provides on-demand cloud computing resources for a...; Question 188: Company A has noticed abnormal behavior targeting their SQL ...; Question 189: A penetration tester is conducting an assessment on Comptia....; Question 190: A system administrator has installed a new Internet facing s...; Question 191: A mature organization with legacy information systems has in...; Question 192: An application present on the majority of an organization's ...; Question 193: Following the most recent patch deployment, a security engin...; Question 194: An insurance company has an online quoting system for insura...; Question 195: Company XYZ has purchased and is now deploying a new HTML5 a...; Question 196: At a meeting, the systems administrator states the security ...; Question 197: A security analyst is reviewing the corporate MDM settings a...; Question 198: The government is concerned with remote military missions be...; Question 199: A deployment manager is working with a software development ...; Question 200: During the deployment of a new system, the implementation te...; Question 201: A recent penetration test identified that a web server has a...; Question 202: A security architect has been assigned to a new digital tran...; Question 203: Which of the following risks does expanding business into a ...; Question 204: A network engineer is attempting to design-in resiliency cha...; Question 205: A security is testing a server finds the following in the ou...; Question 206: Drag and drop the cloud deployment model to the associated u...; Question 207: A Chief Information Security Officer (CISO) implemented MFA ...; Question 208: Ann, a member of the finance department at a large corporati...; Question 209: A pharmacy gives its clients online access to their records ...; Question 210: A company uses an application in its warehouse that works wi...; Question 211: A Chief Information Security Officer (CISO) is reviewing tec...; Question 212: A networking administrator was recently promoted to security...; Question 213: A network administrator is concerned about a particular serv...; Question 214: After the departure of a developer under unpleasant circumst...; Question 215: SIMULATION (Exhibit); Question 216: The technology steering committee is struggling with increas...; Question 217: A manufacturing company recently recovered from an attack on...; Question 218: A penetration tester is conducting an assessment on Comptia....; Question 219: A security architect is designing a system to satisfy user d...; Question 220: An administrator is working with management to develop polic...; Question 221: An organization is considering the use of a thin client arch...; Question 222: While conducting a BIA for a proposed acquisition, the IT in...; Question 223: The helpdesk is receiving multiple calls about slow and inte...; Question 224: A large organization has recently suffered a massive credit ...; Question 225: Given the code snippet below: (Exhibit) Which of the followi...; Question 226: A networking administrator was recently promoted to security...; Question 227: A systems administrator has installed a disk wiping utility ...; Question 228: An incident responder wants to capture volatile memory compr...; Question 229: A SaaS-based email service provider often receives reports f...; Question 230: The Chief Information Security Officer (CISO) of an organiza...; Question 231: A security engineer is assessing the controls that are in pl...; Question 232: A laptop is recovered a few days after it was stolen. Which ...; Question 233: A company is acquiring incident response and forensic assist...; Question 234: An organization just merged with an organization in another ...; Question 235: Within the past six months, a company has experienced a seri...; Question 236: A security consultant is considering authentication options ...; Question 237: Click on the exhibit buttons to view the four messages. (Exh...; Question 238: Ann, a corporate executive, has been the recent target of in...; Question 239: Joe, a penetration tester, is assessing the security of an a...; Question 240: To prepare for an upcoming audit, the Chief Information Secu...; Question 241: An internal penetration tester finds a legacy application th...; Question 242: A security engineer is analyzing an application during a sec...; Question 243: A product owner is reviewing the output of a web-application...; Question 244: A healthcare company wants to increase the value of the data...; Question 245: A security manager recently categorized an information syste...; Question 246: During a security event investigation, a junior analyst fail...; Question 247: A security researches is gathering information about a recen...; Question 248: A security engineer is designing a system in which offshore,...; Question 249: A bank is in the process of developing a new mobile applicat...; Question 250: A hospital uses a legacy electronic medical record system th...; Question 251: Providers at a healthcare system with many geographically di...; Question 252: Users have been reporting unusual automated phone calls, inc...; Question 253: A security engineer is embedded with a development team to e...; Question 254: The board of a financial services company has requested that...; Question 255: A security consultant is conducting a network assessment and...; Question 256: A security engineer is working on a large software developme...; Question 257: A security analyst, who is working in a Windows environment,...; Question 258: A security analyst is reviewing the following packet capture...; Question 259: An information security manager is concerned that connectivi...; Question 260: A security administrator wants to allow external organizatio...; Question 261: An external penetration tester compromised one of the client...; Question 262: An attacker has been compromising banking institution target...; Question 263: (Exhibit); Question 264: A company wants to perform analysis of a tool that is suspec...; Question 265: An enterprise with global sites processes and exchanges high...; Question 266: A Chief Information Security Officer (CISO) is developing a ...; Question 267: A security administrator is troubleshooting RADIUS authentic...; Question 268: Which of the following activities is commonly deemed "OUT OF...; Question 269: An administrator wants to install a patch to an application....; Question 270: An online bank has contracted with a consultant to perform a...; Question 271: A security analyst is comparing two virtual servers that wer...; Question 272: A new piece of ransomware got installed on a company's backu...; Question 273: A company has created a policy to allow employees to use the...; Question 274: A company monitors the performance of all web servers using ...; Question 275: A human resources manager at a software development company ...; Question 276: Given the code snippet below: (Exhibit) Which of the followi...; Question 277: The IT Security Analyst for a small organization is working ...; Question 278: A hospital uses a legacy electronic medical record system th...; Question 279: After analyzing code, two developers al a company bring thes...; Question 280: The code snippet below controls all electronic door locks to...; Question 281: The SOC is reviewing processes and procedures after a recent...; Question 282: A security auditor suspects two employees of having devised ...; Question 283: A new cluster of virtual servers has been set up in a lab en...; Question 284: The risk subcommittee of a corporate board typically maintai...; Question 285: A user workstation was infected with a new malware variant a...; Question 286: The senior security administrator wants to redesign the comp...; Question 287: A technician is configuring security options on the mobile d...; Question 288: A security engineer is assisting a developer with input vali...; Question 289: Immediately following the report of a potential breach, a se...; Question 290: A small company needs to reduce its operating costs. vendors...; Question 291: A new employee is plugged into the network on a BYOD machine...; Question 292: A security administrator wants to prevent sensitive data res...; Question 293: A company is transitioning to a new VDI environment, and a s...; Question 294: After multiple service interruptions caused by an older data...; Question 295: A system administrator recently conducted a vulnerability sc...; Question 296: A network printer needs Internet access to function. Corpora...; Question 297: During a sprint, developers are responsible for ensuring the...; Question 298: At 9:00 am each morning, all of the virtual desktops in a VD...; Question 299: A security appliance vendor is reviewing an RFP that is requ...; Question 300: A cybersecurity analyst has received an alert that well-know...; Question 301: An insurance company has two million customers and is resear...; Question 302: A completely new class of web-based vulnerabilities has been...; Question 303: SIMULATION Company A has noticed abnormal behavior targeting...; Question 304: A system owner has requested support from data owners to eva...; Question 305: A security engineer successfully exploits an application dur...; Question 306: A team is at the beginning stages of designing a new enterpr...; Question 307: A vulnerability scanner report shows that a client-server ho...; Question 308: An analyst connects to a company web conference hosted on ww...; Question 309: A security consultant is considering authentication options ...; Question 310: Developers are working on anew feature to add to a social me...; Question 311: A security technician receives a copy of a report that was o...; Question 312: Given the following code snippet: (Exhibit) Which of the fol...; Question 313: Compliance with company policy requires a quarterly review o...; Question 314: The following has been discovered in an internally developed...; Question 315: A cybersecurity analyst is conducting packet analysis on the...; Question 316: An organization is in the process of integrating its operati...; Question 317: A hospital uses a legacy electronic medical record system th...; Question 318: A security architect is determining the best solution for a ...; Question 319: A security analyst sees some suspicious entries in a log fil...; Question 320: An organization has recently deployed an EDR solution across...; Question 321: (Exhibit); Question 322: A project manager is working with a software development gro...; Question 323: A systems administrator receives an advisory email that a re...; Question 324: Compliance with company policy requires a quarterly review o...; Question 325: An advanced threat emulation engineer is conducting testing ...; Question 326: A company is not familiar with the risks associated with IPv...; Question 327: A security administrator receives reports that several works...; Question 328: An organization enables BYOD but wants to allow users to acc...; Question 329: An administrator wants to enable policy based flexible manda...; Question 330: A company has hired an external security consultant to condu...; Question 331: A technician uses an old SSL server due to budget constraint...; Question 332: A medical facility wants to purchase mobile devices for doct...; Question 333: A university's help desk is receiving reports that Internet ...; Question 334: An application present on the majority of an organization's ...; Question 335: A security analyst is investigating a series of suspicious e...; Question 336: During a security assessment, an organization is advised of ...; Question 337: An attacker wants to gain information about a company's data...; Question 338: A Chief Information Security Officer (CISO) is working with ...; Question 339: While traveling to another state, the Chief Financial (CFO) ...; Question 340: A cybersecurity analyst created the following tables to help...; Question 341: Company ABC is hiring customer service representatives from ...; Question 342: A systems administrator establishes a CIFS share on a UNIX d...; Question 343: A security administrator must configure the database server ...; Question 344: A company has deployed MFA Some employees, however, report t...; Question 345: A security manager is determining the best DLP solution for ...; Question 346: To meet a SLA, which of the following document should be dra...; Question 347: A security engineer is assessing the controls that are in pl...; Question 348: While conducting online research about a company to prepare ...; Question 349: A security engineer is a new member to a configuration board...; Question 350: A breach was caused by an insider threat in which customer P...; Question 351: Ann, a terminated employee, left personal photos on a compan...; Question 352: There have been some failures of the company's internal faci...; Question 353: The security administrator of a small firm wants to stay cur...; Question 354: A security administrator is opening connectivity on a firewa...; Question 355: A security engineer is attempting to convey the importance o...; Question 356: Part of the procedure for decommissioning a database server ...; Question 357: A company is concerned about disgruntled employees transferr...; Question 358: A development team is testing an in-house-developed applicat...; Question 359: Which of the following attacks can be used to exploit a vuln...; Question 360: An agency has implemented a data retention policy that requi...; Question 361: The Chief Information Security Officer (CISO) is preparing a...; Question 362: A security administrator was informed that a server unexpect...; Question 363: Drag and drop the cloud deployment model to the associated u...; Question 364: A recent CRM upgrade at a branch office was completed after ...; Question 365: Which of the following may indicate a configuration item has...; Question 366: In a situation where data is to be recovered from an attacke...; Question 367: A security technician is incorporating the following require...; Question 368: A Chief Information Officer (CIO) has mandated that all web-...; Question 369: A systems administrator establishes a CIFS share on a UNIX d...; Question 370: Given the following: (Exhibit) Which of the following vulner...; Question 371: A small firm's newly created website has several design flaw...; Question 372: A security consultant is improving the physical security of ...; Question 373: A security consultant was hired to audit a company's passwor...; Question 374: A security consultant is considering authentication options ...; Question 375: A security manager looked at various logs while investigatin...; Question 376: A recent overview of the network's security and storage appl...; Question 377: A university's help desk is receiving reports that Internet ...; Question 378: A security administrator is shown the following log excerpt ...; Question 379: A company monitors the performance of all web servers using ...; Question 380: A critical system audit shows that the payroll system is not...; Question 381: A company suspects a web server may have been infiltrated by...; Question 382: A security manager for a service provider has approved two v...; Question 383: A security engineer is analyzing an application during a sec...; Question 384: The senior security administrator wants to redesign the comp...; Question 385: A software development firm wants to validate the use of sta...; Question 386: A security firm is writing a response to an RFP from a custo...; Question 387: Which of the following technologies prevents an unauthorized...; Question 388: An enterprise is trying to secure a specific web-based appli...; Question 389: A security incident responder discovers an attacker has gain...; Question 390: A company decides to purchase commercially available softwar...; Question 391: A security administrator notices the following line in a ser...; Question 392: First responders, who are part of a core incident response t...; Question 393: An engineer is assisting with the design of a new virtualize...; Question 394: IT staff within a company often conduct remote desktop shari...; Question 395: The Chief Executive Officer (CEO) of a company has considere...; Question 396: A security engineer is deploying an IdP to broker authentica...; Question 397: An administrator wishes to replace a legacy clinical softwar...; Question 398: Users of a newly deployed VoIP solution report multiple inst...; Question 399: A security manager recently categorized an information syste...; Question 400: A storage as a service company implements both encryption at...; Question 401: Which of the following BEST represents a risk associated wit...; Question 402: Given the following code snippet: (Exhibit) Which of the fol...; Question 403: A team is at the beginning stages of designing a new enterpr...; Question 404: A penetration tester is conducting an assessment on Comptia....; Question 405: A company's security policy states any remote connections mu...; Question 406: A breach was caused by an insider threat in which customer P...; Question 407: A security manager looked at various logs while investigatin...; Question 408: An online bank has contracted with a consultant to perform a...; Question 409: Which of the following represents important technical contro...; Question 410: A new database application was added to a company's hosted V...; Question 411: An organization based in the United States is planning to ex...; Question 412: Given the following output from a security tool in Kali: (Ex...; Question 413: A security consultant is considering authentication options ...; Question 414: As part of a systems modernization program, the use of a wea...; Question 415: The Chief Information Officer (CIO) is reviewing the IT cent...; Question 416: Security policies that are in place at an organization prohi...; Question 417: During an incident involving the company main database, a te...; Question 418: ABC Corporation uses multiple security zones to protect syst...; Question 419: An enterprise with global sites processes and exchanges high...; Question 420: Which of the following provides the BEST risk calculation me...; Question 421: Two competing companies experienced similar attacks on their...; Question 422: During a security assessment, an organization is advised of ...; Question 423: A company wants to implement a cloud-based security solution...; Question 424: A security technician is incorporating the following require...; Question 425: During the migration of a company's human resources applicat...; Question 426: Ann, a corporate executive, has been the recent target of in...; Question 427: A government agency considers confidentiality to be of utmos...; Question 428: An external red team is brought into an organization to perf...; Question 429: Given the following code snippet: (Exhibit) Of which of the ...; Question 430: Compliance with company policy requires a quarterly review o...; Question 431: A company has decided to lower costs by conducting an intern...; Question 432: A company has noticed recently that its corporate informatio...; Question 433: A security engineer successfully exploits an application dur...; Question 434: A security consultant is considering authentication options ...; Question 435: A company has gone through a round of phishing attacks. More...; Question 436: A large enterprise with thousands of users is experiencing a...; Question 437: The legal department has required that all traffic to and fr...; Question 438: Given the following output from a security tool in Kali: (Ex...; Question 439: An organization has recently deployed an EDR solution across...; Question 440: After the departure of a developer under unpleasant circumst...; Question 441: A small retail company recently deployed a new point of sale...; Question 442: A manufacturing company recently recovered from an attack on...; Question 443: A financial services company wants to migrate its email serv...; Question 444: An infrastructure team is at the end of a procurement proces...; Question 445: The government is concerned with remote military missions be...; Question 446: Drag and Drop Question Drag and drop the cloud deployment mo...; Question 447: A company has adopted and established a continuous-monitorin...; Question 448: A security analyst who is concerned about sensitive data exf...; Question 449: A firewall specialist has been newly assigned to participate...; Question 450: Joe, a hacker, has discovered he can specifically craft a we...; Question 451: An organization is currently working with a client to migrat...; Question 452: Several recent ransomware outbreaks at a company have cost a...; Question 453: A breach was caused by an insider threat in whichcustomer PI...; Question 454: A security engineer is employed by a hospital that was recen...; Question 455: Given the following: (Exhibit) Which of the following vulner...; Question 456: A medical facility wants to purchase mobile devices for doct...; Question 457: A small company's Chief Executive Officer (CEO) has asked it...; Question 458: Drag and drop the cloud deployment model to the associated u...; Question 459: Given the following code snippet: (Exhibit) Of which of the ...; Question 460: An engineer is evaluating the control profile to assign to a...; Question 461: A large company with a very complex IT environment is consid...; Question 462: Drag and drop the cloud deployment model to the associated u...; Question 463: (Exhibit) Compliance with company policy requires a quarterl...; Question 464: A network administrator is concerned about a particular serv...; Question 465: A security analyst who is concerned about sensitive data exf...; Question 466: A developer is reviewing the following transaction logs from...; Question 467: An engineer is reviewing the security architecture for an en...; Question 468: A vulnerability scan with the latest definitions was perform...; Question 469: A new corporate policy requires that all employees have acce...; Question 470: A security administrator is hardening a TrustedSolaris serve...; Question 471: A security analyst is validating the MAC policy on a set of ...; Question 472: A penetration tester has been contracted to conduct a physic...; Question 473: A company is in the process of re-architecting its sensitive...; Question 474: The Chief Executive Officers (CEOs) from two different compa...; Question 475: A security engineer must establish a method to assess compli...; Question 476: During a security event investigation, a junior analyst fail...; Question 477: Providers at a healthcare system with many geographically di...; Question 478: A company has decided to lower costs by conducting an intern...; Question 479: A hospital's security team recently determined its network w...

Question 140/479

LEAVE A REPLY

Download PDF File