<< Prev Question Next Question >>

Question 64/92

A vulnerability scanner detected an obsolete version of an open-source file-sharing application on one of a company's Linux servers. While the software version is no longer supported by the OSS community, the company's Linux vendor backported fixes, applied them for all current vulnerabilities, and agrees to support the software in the future.
Based on this agreement, this finding is BEST categorized as a:

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (92q)
Question 1: A security engineer is hardening a company's multihomed SFTP...
Question 2: An analyst execute a vulnerability scan against an internet-...
Question 3: A developer wants to develop a secure external-facing web ap...
Question 4: A security analyst receives an alert from the SIEM regarding...
Question 5: A company's employees are not permitted to access company sy...
Question 6: A junior developer is informed about the impact of new malwa...
Question 7: A security team received a regulatory notice asking for info...
Question 8: A satellite communications ISP frequently experiences outage...
Question 9: A home automation company just purchased and installed tools...
Question 10: Company A is establishing a contractual with Company B. The ...
Question 11: A company provides guest WiFi access to the internet and phy...
Question 12: A company is migrating from company-owned phones to a BYOD s...
Question 13: An energy company is required to report the average pressure...
Question 14: An organization's finance system was recently attacked. A fo...
Question 15: Device event logs sources from MDM software as follows: (Exh...
Question 16: A company's product site recently had failed API calls, resu...
Question 17: The OS on several servers crashed around the same time for a...
Question 18: A network architect is designing a new SD-WAN architecture t...
Question 19: A host on a company's network has been infected by a worm th...
Question 20: A security administrator configured the account policies per...
Question 21: A security consultant needs to set up wireless security for ...
Question 22: Leveraging cryptographic solutions to protect data that is i...
Question 23: SIMULATION You are a security analyst tasked with interpreti...
Question 24: A Chief Information Officer (CIO) wants to implement a cloud...
Question 25: An organization's hunt team thinks a persistent threats exis...
Question 26: A security analyst is investigating a possible buffer overfl...
Question 27: A company wants to improve Its active protection capabilitie...
Question 28: During a remodel, a company's computer equipment was moved t...
Question 29: A security analyst is researching containerization concepts ...
Question 30: A vulnerability analyst identified a zero-day vulnerability ...
Question 31: A SOC analyst is reviewing malicious activity on an external...
Question 32: A company recently acquired a SaaS provider and needs to int...
Question 33: An attacker infiltrated the code base of a hardware manufact...
Question 34: A company is repeatedly being breached by hackers who valid ...
Question 35: A security compliance requirement states that specific envir...
Question 36: A shipping company that is trying to eliminate entire classe...
Question 37: A company launched a new service and created a landing page ...
Question 38: An organization is considering a BYOD standard to support re...
Question 39: A cybersecurity analyst created the following tables to help...
Question 40: Ransomware encrypted the entire human resources fileshare fo...
Question 41: A large telecommunications equipment manufacturer needs to e...
Question 42: A security analyst detected a malicious PowerShell attack on...
Question 43: A forensic investigator would use the foremost command for:...
Question 44: An enterprise is deploying APIs that utilize a private key a...
Question 45: A security analyst is trying to identify the source of a rec...
Question 46: A security engineer was auditing an organization's current s...
Question 47: Company A acquired Company B. During an audit, a security en...
Question 48: An attack team performed a penetration test on a new smart c...
Question 49: A security engineer is troubleshooting an issue in which an ...
Question 50: A security engineer has been asked to close all non-secure c...
Question 51: A security engineer needs to recommend a solution that will ...
Question 52: A security architect was asked to modify an existing interna...
Question 53: A company is looking for a solution to hide data stored in d...
Question 54: A company Is adopting a new artificial-intelligence-based an...
Question 55: A security engineer needs to implement a solution to increas...
Question 56: An organization is referencing NIST best practices for BCP c...
Question 57: Technicians have determined that the current server hardware...
Question 58: A company's finance department acquired a new payment system...
Question 59: As part of the customer registration process to access a new...
Question 60: An IT administrator is reviewing all the servers in an organ...
Question 61: Given the following log snippet from a web server: (Exhibit)...
Question 62: The Chief information Officer (CIO) asks the system administ...
Question 63: A cybersecurity engineer analyst a system for vulnerabilitie...
Question 64: A vulnerability scanner detected an obsolete version of an o...
Question 65: Which of the following agreements includes no penalties and ...
Question 66: A company has decided to purchase a license for software tha...
Question 67: An organization is prioritizing efforts to remediate or miti...
Question 68: A development team created a mobile application that contact...
Question 69: Due to internal resource constraints, the management team ha...
Question 70: An organization developed a social media application that is...
Question 71: A forensic expert working on a fraud investigation for a US-...
Question 72: A networking team was asked to provide secure remote access ...
Question 73: An application developer is including third-party background...
Question 74: Based on PCI DSS v3.4, One Particular database field can sto...
Question 75: A financial services company wants to migrate its email serv...
Question 76: A security is assisting the marketing department with ensuri...
Question 77: A security analyst discovered that the company's WAF was not...
Question 78: An attacker infiltrated an electricity-generation site and d...
Question 79: A security analyst discovered that the company's WAF was not...
Question 80: The Chief Information Security Officer of a startup company ...
Question 81: A company's finance department acquired a new payment system...
Question 82: A cybersecurity analyst discovered a private key that could ...
Question 83: An organization recently experienced a ransomware attack. Th...
Question 84: Which of the following are risks associated with vendor lock...
Question 85: An organization wants to perform a scan of all its systems a...
Question 86: An organization requires a legacy system to incorporate refe...
Question 87: A systems administrator is preparing to run a vulnerability ...
Question 88: A small company needs to reduce its operating costs. vendors...
Question 89: A threat analyst notices the following URL while going throu...
Question 90: A local government that is investigating a data exfiltration...
Question 91: A security consultant needs to protect a network of electric...
Question 92: Over the last 90 days, many storage services has been expose...