<< Prev Question Next Question >>

Question 16/89

SIMULATION
You are a security analyst tasked with interpreting an Nmap scan output from company's privileged network.
The company's hardening guidelines indicate the following:
There should be one primary server or service per device.
Only default ports should be used.
Non-secure protocols should be disabled.
INSTRUCTIONS
Using the Nmap output, identify the devices on the network and their roles, and any open ports that should be closed.
For each device found by Nmap, add a device entry to the Devices Discovered list, with the following information:
The IP address of the device
The primary server or service of the device (Note that each IP should by associated with one service/port only) The protocol(s) that should be disabled based on the hardening guidelines (Note that multiple ports may need to be closed to comply with the hardening guidelines) If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (89q)
Question 1: A disaster recovery team learned of several mistakes that we...
Question 2: A developer wants to develop a secure external-facing web ap...
Question 3: A company wants to improve Its active protection capabilitie...
Question 4: A company plans to build an entirely remote workforce that u...
Question 5: Which of the following allows computation and analysis of da...
Question 6: A company's product site recently had failed API calls, resu...
Question 7: An organization's hunt team thinks a persistent threats exis...
Question 8: A security analyst is investigating a possible buffer overfl...
Question 9: A cybersecurity analyst receives a ticket that indicates a p...
Question 10: A developer implement the following code snippet. (Exhibit) ...
Question 11: Which of the following protocols is a low power, low data ra...
Question 12: A security analyst is researching containerization concepts ...
Question 13: A security architect is implementing a web application that ...
Question 14: A bank is working with a security architect to find the BEST...
Question 15: An energy company is required to report the average pressure...
Question 16: SIMULATION You are a security analyst tasked with interpreti...
Question 17: A security engineer was auditing an organization's current s...
Question 18: A security consultant needs to set up wireless security for ...
Question 19: An organization is referencing NIST best practices for BCP c...
Question 20: A security analyst detected a malicious PowerShell attack on...
Question 21: A review of the past year's attack patterns shows that attac...
Question 22: Based on PCI DSS v3.4, One Particular database field can sto...
Question 23: A network architect is designing a new SD-WAN architecture t...
Question 24: An enterprise is undergoing an audit to review change manage...
Question 25: A systems administrator is in the process of hardening the h...
Question 26: A software house is developing a new application. The applic...
Question 27: A company created an external application for its customers....
Question 28: A company just released a new video card. Due to limited sup...
Question 29: A security architect works for a manufacturing organization ...
Question 30: A company processes data subject to NDAs with partners that ...
Question 31: As part of its risk strategy, a company is considering buyin...
Question 32: An organization mat provides a SaaS solution recently experi...
Question 33: A company hired a third party to develop software as part of...
Question 34: A cybersecurity analyst created the following tables to help...
Question 35: Company A acquired Company B. During an audit, a security en...
Question 36: A company requires a task to be carried by more than one per...
Question 37: A company based in the United States holds insurance details...
Question 38: An organization is preparing to migrate its production envir...
Question 39: A company is looking at sending historical backups containin...
Question 40: A security team received a regulatory notice asking for info...
Question 41: A security analyst is investigating a series of suspicious e...
Question 42: A vulnerability assessment endpoint generated a report of th...
Question 43: A company in the financial sector receives a substantial num...
Question 44: Which of the following controls primarily detects abuse of p...
Question 45: A security architect was asked to modify an existing interna...
Question 46: A business stores personal client data of individuals residi...
Question 47: A security engineer needs to recommend a solution that will ...
Question 48: The Chief information Security Officer (CISO) of a small loc...
Question 49: Which of the following is the BEST disaster recovery solutio...
Question 50: Clients are reporting slowness when attempting to access a s...
Question 51: A security analyst wants to keep track of alt outbound web c...
Question 52: Immediately following the report of a potential breach, a se...
Question 53: A small company recently developed prototype technology for ...
Question 54: A technician is reviewing the logs and notices a large numbe...
Question 55: An organization is designing a network architecture that mus...
Question 56: A security auditor needs to review the manner in which an en...
Question 57: A user from the sales department opened a suspicious file at...
Question 58: The Chief information Officer (CIO) wants to establish a non...
Question 59: A development team created a mobile application that contact...
Question 60: A forensic investigator would use the foremost command for:...
Question 61: Over the last 90 days, many storage services has been expose...
Question 62: A company just released a new video card. Due to limited sup...
Question 63: A company Is adopting a new artificial-intelligence-based an...
Question 64: A security analyst discovered that a database administrator'...
Question 65: A security analyst is reviewing the following output: (Exhib...
Question 66: After a security incident, a network security engineer disco...
Question 67: A cybersecurity analyst discovered a private key that could ...
Question 68: A company is preparing to deploy a global service. Which of ...
Question 69: A company undergoing digital transformation is reviewing the...
Question 70: An organization is prioritizing efforts to remediate or miti...
Question 71: A high-severity vulnerability was found on a web application...
Question 72: A financial services company wants to migrate its email serv...
Question 73: A security is assisting the marketing department with ensuri...
Question 74: A company Invested a total of $10 million lor a new storage ...
Question 75: A company is implementing SSL inspection. During the next si...
Question 76: An application developer is including third-party background...
Question 77: A health company has reached the physical and computing capa...
Question 78: A security administrator configured the account policies per...
Question 79: An organization wants to perform a scan of all its systems a...
Question 80: An organization recently recovered from an attack that featu...
Question 81: A security analyst notices a number of SIEM events that show...
Question 82: A company is repeatedly being breached by hackers who valid ...
Question 83: The goal of a Chief information Security Officer (CISO) prov...
Question 84: An organization is researching the automation capabilities f...
Question 85: A large telecommunications equipment manufacturer needs to e...
Question 86: A software development company makes Its software version av...
Question 87: A company's claims processed department has a mobile workfor...
Question 88: A cybersecurity engineer analyst a system for vulnerabilitie...
Question 89: An auditor needs to scan documents at rest for sensitive tex...