<< Prev Question Next Question >>

Question 44/348

A systems administrator creates a script that validates OS version, patch levels, and installed applications when users log in. Which of the following examples best describes the purpose of this script?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (348q)
Question 1: A systems administrator discovers a system that is no longer...
Question 2: An employee fell for a phishing scam, which allowed an attac...
Question 3: A U.S.-based cloud-hosting provider wants to expand its data...
Question 4: An administrator notices that several users are logging in f...
Question 5: Which of the following explains why an attacker cannot easil...
Question 6: A security analyst is evaluating a SaaS application that the...
Question 7: A security engineer would like to enhance the use of automat...
Question 8: A security analyst discovers that a large number of employee...
Question 9: An accountant is transferring information to a bank over FTP...
Question 10: Which of the following should be used to prevent changes to ...
Question 11: Sine a recent upgrade (o a WLAN infrastructure, several mobi...
Question 12: Which of the following solutions would most likely be used i...
Question 13: A security audit of an organization revealed that most of th...
Question 14: A company has yearly engagements with a service provider. Th...
Question 15: Which of the following is the best way to validate the integ...
Question 16: Which of the following tools is best for logging and monitor...
Question 17: Which of the following describes a security alerting and mon...
Question 18: A company wants to track modifications to the code used to b...
Question 19: Which of the following best practices gives administrators a...
Question 20: A company evaluates several options that would allow employe...
Question 21: Which of the following actions must an organization take to ...
Question 22: A security consultant needs secure, remote access to a clien...
Question 23: During an investigation, a security analyst discovers traffi...
Question 24: Which of the following activities is included in the post-in...
Question 25: Which of the following must be considered when designing a h...
Question 26: After multiple phishing simulations, the Chief Security Offi...
Question 27: A vendor needs to remotely and securely transfer files from ...
Question 28: A company is concerned about the theft of client data from d...
Question 29: A security analyst scans a company's public network and disc...
Question 30: A company wants to improve the availability of its applicati...
Question 31: A security analyst is reviewing logs and discovers the follo...
Question 32: A company is concerned with supply chain compromise of new s...
Question 33: Which of the following activities should a systems administr...
Question 34: The security operations center is researching an event conce...
Question 35: An organization is implementing a COPE mobile device managem...
Question 36: An organization disabled unneeded services and placed a fire...
Question 37: Which of the following data types relates to data sovereignt...
Question 38: An employee emailed a new systems administrator a malicious ...
Question 39: An organization is leveraging a VPN between its headquarters...
Question 40: A bank set up a new server that contains customers' Pll. Whi...
Question 41: Which of the following would be the best way to block unknow...
Question 42: A company plans to secure its systems by: Preventing users f...
Question 43: Which of the following agreements defines response time, esc...
Question 44: A systems administrator creates a script that validates OS v...
Question 45: Which of the following is the most likely outcome if a large...
Question 46: An organization is struggling with scaling issues on its VPN...
Question 47: Which of the following should be deployed on an externally f...
Question 48: A cybersecurity incident response team at a large company re...
Question 49: Which of the following teams combines both offensive and def...
Question 50: A company is adding a clause to its AUP that states employee...
Question 51: A security administrator receives multiple reports about the...
Question 52: Which of the following describes the category of data that i...
Question 53: A recent black-box penetration test of http://example.com di...
Question 54: A network engineer is increasing the overall security of net...
Question 55: Executives at a company are concerned about employees access...
Question 56: Which of the following is used to add extra complexity befor...
Question 57: An accounting employee recently used software that was not a...
Question 58: Which of the following risk management strategies should an ...
Question 59: An organization is evaluating new regulatory requirements as...
Question 60: A company is aware of a given security risk related to a spe...
Question 61: An organization has a new regulatory requirement to implemen...
Question 62: An administrator is estimating the cost associated with an a...
Question 63: Which of the following has been implemented when a host-base...
Question 64: An administrator wants to perform a risk assessment without ...
Question 65: A systems administrator is creating a script that would save...
Question 66: A store is setting up wireless access for their employees. M...
Question 67: Which of the following is prevented by proper data sanitizat...
Question 68: A security team purchases a tool for cloud security posture ...
Question 69: A Chief Information Security Officer (CISO) has developed in...
Question 70: Which of the following should a technician perform to verify...
Question 71: A business is expanding to a new country and must protect cu...
Question 72: During a SQL update of a database, a temporary field used as...
Question 73: Which of the following data recovery strategies will result ...
Question 74: A user needs to complete training at https://comptiatraining...
Question 75: A security analyst receives alerts about an internal system ...
Question 76: Which of the following strategies should an organization use...
Question 77: An organization's web servers host an online ordering system...
Question 78: An attorney prints confidential documents to a copier in an ...
Question 79: Employees in the research and development business unit rece...
Question 80: Which of the following is the best way to prevent data from ...
Question 81: While a user reviews their email, a host gets infected by ma...
Question 82: Which of the following objectives is best achieved by a tabl...
Question 83: Which of the following should a systems administrator use to...
Question 84: A security report shows that during a two-week test period. ...
Question 85: A security analyst is examining a penetration test report an...
Question 86: A security analyst reviews domain activity logs and notices ...
Question 87: Which of the following would enable a data center to remain ...
Question 88: Which of the following would be best suited for constantly c...
Question 89: Which of the following cryptographic methods is preferred fo...
Question 90: Which of the following actors attacking an organization is t...
Question 91: Which of the following should an internal auditor check for ...
Question 92: In which of the following will unencrypted PLC management tr...
Question 93: Which of the following practices would be best to prevent an...
Question 94: Which of the following is an example of memory injection?...
Question 95: A malicious insider from the marketing team alters records a...
Question 96: During an investigation, an incident response team attempts ...
Question 97: Which of the following alert types is the most likely to be ...
Question 98: A network administrator wants to ensure that network traffic...
Question 99: During a recent company safety stand-down, the cyber-awarene...
Question 100: The Chief Information Security Officer wants to put security...
Question 101: A store is setting up wireless access for employees. Managem...
Question 102: An IT team rolls out a new management application that uses ...
Question 103: A database administrator is updating the company's SQL datab...
Question 104: Several employees received a fraudulent text message from so...
Question 105: Which of the following would a systems administrator follow ...
Question 106: A company implemented an MDM policy 10 mitigate risks after ...
Question 107: A company's legal department drafted sensitive documents in ...
Question 108: An organization wants to limit potential impact to its log-i...
Question 109: A systems administrator notices that the research and develo...
Question 110: Visitors to a secured facility are required to check in with...
Question 111: An organization issued new laptops to all employees and want...
Question 112: Which of the following vulnerabilities is associated with in...
Question 113: An organization recently started hosting a new service that ...
Question 114: A cyber operations team informs a security analyst about a n...
Question 115: Which of the following is the best method to reduce the atta...
Question 116: After a security incident, a systems administrator asks the ...
Question 117: Which of the following security measures is required when us...
Question 118: Various stakeholders are meeting to discuss their hypothetic...
Question 119: Which of the following best describe the benefits of a micro...
Question 120: A security engineer at a large company needs to enhance IAM ...
Question 121: Which of the following can assist in recovering data if the ...
Question 122: A security officer observes that a software development team...
Question 123: Which of the following data protection strategies can be use...
Question 124: The private key for a website was stolen, and a new certific...
Question 125: A systems administrator needs to encrypt all data on employe...
Question 126: A systems administrator set up a perimeter firewall but cont...
Question 127: A company is concerned about weather events causing damage t...
Question 128: A recent penetration test identified that an attacker could ...
Question 129: Which of the following is the best reason to complete an aud...
Question 130: A company's accounting department receives an urgent payment...
Question 131: An administrator is Investigating an incident and discovers ...
Question 132: Which of the following is a reason environmental variables a...
Question 133: A growing company would like to enhance the ability of its s...
Question 134: A malicious update was distributed to a common software plat...
Question 135: Two companies are in the process of merging. The companies n...
Question 136: Malware spread across a company's network after an employee ...
Question 137: A client demands at least 99.99% uptime from a service provi...
Question 138: A security manager wants to reduce the number of steps requi...
Question 139: Which of the following types of identification methods can b...
Question 140: Which of the following is a benefit of an RTO when conductin...
Question 141: A data administrator is configuring authentication for a Saa...
Question 142: An IT administrator needs to ensure data retention standards...
Question 143: Which of the following should an organization use to protect...
Question 144: While a school district is performing state testing, a secur...
Question 145: Which of the following can best protect against an employee ...
Question 146: Which of the following prevents unauthorized modifications t...
Question 147: Which of the following should a systems administrator use to...
Question 148: Which of the following scenarios describes a possible busine...
Question 149: An administrator needs to perform server hardening before de...
Question 150: Which of the following should a security analyst consider wh...
Question 151: Which of the following is an algorithm performed to verify t...
Question 152: A company is required to use certified hardware when buildin...
Question 153: A security analyst receives an alert that there was an attem...
Question 154: An employee clicked a malicious link in an email and downloa...
Question 155: Which of the following is the final step of the modem respon...
Question 156: A systems administrator is auditing all company servers to e...
Question 157: An important patch for a critical application has just been ...
Question 158: Which of the following consequences would a retail chain mos...
Question 159: A company recently decided to allow employees to work remote...
Question 160: A security manager created new documentation to use in respo...
Question 161: After failing an audit twice, an organization has been order...
Question 162: A company's web filter is configured to scan the URL for str...
Question 163: A company needs to determine whether authentication weakness...
Question 164: The Chief Information Security Officer wants to discuss opti...
Question 165: The physical security team at a company receives reports tha...
Question 166: An organization wants to improve the company's security auth...
Question 167: Which of the following metrics impacts the backup schedule a...
Question 168: The internal audit team determines a software application is...
Question 169: Which of the following is a qualitative approach to risk ana...
Question 170: Which of the following would be the best way to test resilie...
Question 171: An organization designs an inbound firewall with a fail-open...
Question 172: A Chief Security Officer signs off on a request to allow inb...
Question 173: An attacker used XSS to compromise a web server. Which of th...
Question 174: Client files can only be accessed by employees who need to k...
Question 175: A company discovers suspicious transactions that were entere...
Question 176: A security analyst reviews web server logs and sees the foll...
Question 177: A technician wants to improve the situational and environmen...
Question 178: Which of the following would be the best ways to ensure only...
Question 179: An administrator implements web-filtering products but still...
Question 180: A company wants to track modifications to the code that is u...
Question 181: Security controls in a data center are being reviewed to ens...
Question 182: A systems administrator notices that one of the systems crit...
Question 183: Which of the following automation use cases would best enhan...
Question 184: The help desk receives multiple calls that machines with an ...
Question 185: An administrator at a small business notices an increase in ...
Question 186: The Chief Information Security Officer of an organization ne...
Question 187: Which of the following activities should be performed first ...
Question 188: Which of the following should be used to select a label for ...
Question 189: Which of the following organizational documents is most ofte...
Question 190: A company that has a large IT operation is looking to better...
Question 191: An analyst identifies that multiple users have the same pass...
Question 192: A service provider wants a cost-effective way to rapidly exp...
Question 193: A company wants to protect a specialized legacy platform tha...
Question 194: A security consultant is working with a client that wants to...
Question 195: A systems administrator is concerned users are accessing ema...
Question 196: A network manager wants to protect the company's VPN by impl...
Question 197: Employees sign an agreement that restricts specific activiti...
Question 198: A security analyst must prevent remote users from accessing ...
Question 199: Which of the following is the most likely to be used to docu...
Question 200: A penetration test has demonstrated that domain administrato...
Question 201: After a security awareness training session, a user called t...
Question 202: A new employee can select a particular make and model of an ...
Question 203: A security analyst developed a script to automate a trivial ...
Question 204: A security team receives reports about high latency and comp...
Question 205: An MSSP manages firewalls for hundreds of clients. Which of ...
Question 206: Company A jointly develops a product with Company B, which i...
Question 207: A customer has a contract with a CSP and wants to identify w...
Question 208: A newly appointed board member with cybersecurity knowledge ...
Question 209: A systems administrator receives a text message from an unkn...
Question 210: Which of the following actions best addresses a vulnerabilit...
Question 211: Which of the following control types involves restricting IP...
Question 212: Which of the following must be considered when designing a h...
Question 213: Various company stakeholders meet to discuss roles and respo...
Question 214: Which of the following strategies most effectively protects ...
Question 215: The analyst wants to move data from production to the UAT se...
Question 216: Which of the following security controls are a company imple...
Question 217: A user downloads a patch from an unknown repository... FIM a...
Question 218: A systems administrator receives an alert that a company's i...
Question 219: A company is implementing a policy to allow employees to use...
Question 220: A business needs a recovery site but does not require immedi...
Question 221: An administrator assists the legal and compliance team with ...
Question 222: An employee from the accounting department logs in to the we...
Question 223: Which of the following examples would be best mitigated by i...
Question 224: The number of tickets the help desk has been receiving has i...
Question 225: Which of the following activities is the first stage in the ...
Question 226: Which of the following steps in the risk management process ...
Question 227: Which of the following security controls is a company implem...
Question 228: Users at a company are reporting they are unable to access t...
Question 229: Prior to implementing a design change, the change must go th...
Question 230: Which of the following can be used to compromise a system th...
Question 231: Which of the following is a preventive physical security con...
Question 232: An analyst discovers a suspicious item in the SQL server log...
Question 233: A company is considering an expansion of access controls for...
Question 234: A government official receives a blank envelope containing p...
Question 235: Which of the following security concepts is the best reason ...
Question 236: Which of the following is a type of vulnerability that may r...
Question 237: Employees located off-site must have access to company resou...
Question 238: Which of the following best describes the practice of resear...
Question 239: Which of the following is the best way to securely store an ...
Question 240: A security administrator is deploying a DLP solution to prev...
Question 241: An attacker posing as the Chief Executive Officer calls an e...
Question 242: A company requires hard drives to be securely wiped before s...
Question 243: A company expects its provider to ensure servers and network...
Question 244: A company installed cameras and added signs to alert visitor...
Question 245: Which of the following is the act of proving to a customer t...
Question 246: Which of the following is the most effective way to protect ...
Question 247: While reviewing a recent compromise, a forensics team discov...
Question 248: Which of the following is a reason why a forensic specialist...
Question 249: A security analyst is assessing several company firewalls. W...
Question 250: An organization is adopting cloud services at a rapid pace a...
Question 251: An administrator has identified and fingerprinted specific f...
Question 252: An organization recently updated its security policy to incl...
Question 253: A security analyst and the management team are reviewing the...
Question 254: Which of the following describes an executive team that is m...
Question 255: A company is using a legacy FTP server to transfer financial...
Question 256: At the start of a penetration test, the tester checks OSINT ...
Question 257: An administrator has configured a quarantine subnet for all ...
Question 258: A company receives an alert that a widely used network devic...
Question 259: Which of the following allows for the attribution of message...
Question 260: Which of the following considerations is the most important ...
Question 261: A company wants to verify that the software the company is d...
Question 262: A healthcare organization wants to provide a web application...
Question 263: Which of the following is the best reason to perform a table...
Question 264: Which of the following is the best way to consistently deter...
Question 265: Which of the following receives logs from various devices an...
Question 266: Which of the following best represents an application that d...
Question 267: Which of the following best describes the concept of informa...
Question 268: A security analyst is investigating an application server an...
Question 269: In a rush to meet an end-of-year business goal, the IT depar...
Question 270: Which of the following can be used to identify potential att...
Question 271: A company identified the potential for malicious insiders to...
Question 272: A systems administrator is redesigning now devices will perf...
Question 273: A newly identified network access vulnerability has been fou...
Question 274: Which of the following can be used to mitigate attacks from ...
Question 275: Which of the following is a type of vulnerability that invol...
Question 276: Which of the following is the best safeguard to protect agai...
Question 277: Which of the following would be the best way to handle a cri...
Question 278: A security engineer needs to quickly identify a signature fr...
Question 279: While reviewing logs, a security administrator identifies th...
Question 280: Which of the following incident response activities ensures ...
Question 281: Which of the following outlines the configuration, maintenan...
Question 282: An organization has issues with deleted network share data a...
Question 283: Which of the following security controls would best guard a ...
Question 284: A technician is opening ports on a firewall for a new system...
Question 285: During a penetration test, a vendor attempts to enter an una...
Question 286: An organization experiences a cybersecurity incident involvi...
Question 287: An administrator is installing an SSL certificate on a new s...
Question 288: Which of the following is used to protect a computer from vi...
Question 289: An engineer needs to ensure that a script has not been modif...
Question 290: Which of the following allows an exploit to go undetected by...
Question 291: Which of the following roles, according to the shared respon...
Question 292: A company is expanding its threat surface program and allowi...
Question 293: A company is in the process of migrating to cloud-based serv...
Question 294: A security analyst finds a rogue device during a monthly aud...
Question 295: Which of the following describes effective change management...
Question 296: Which of the following best describes why me SMS DIP authent...
Question 297: An organization implemented cloud-managed IP cameras to moni...
Question 298: After reviewing the following vulnerability scanning report:...
Question 299: Which of the following digital forensics activities would a ...
Question 300: Which of the following is the main consideration when a lega...
Question 301: Which of the following hardening techniques must be applied ...
Question 302: Which of the following describes the difference between encr...
Question 303: A systems administrator is working on a solution with the fo...
Question 304: Which of the following is used to validate a certificate whe...
Question 305: A security manager is implementing MFA and patch management....
Question 306: A company's online shopping website became unusable shortly ...
Question 307: An IT security team is concerned about the confidentiality o...
Question 308: An administrator is reviewing a single server's security log...
Question 309: A security administrator is reissuing a former employee's la...
Question 310: Which of the following activities uses OSINT?...
Question 311: A security analyst needs to propose a remediation plan 'or e...
Question 312: An organization's internet-facing website was compromised wh...
Question 313: A systems administrator needs to ensure the secure communica...
Question 314: Which of the following can a security director use to priori...
Question 315: Which of the following is a hardware-specific vulnerability?...
Question 316: An employee receives a text message that appears to have bee...
Question 317: A systems administrator needs to provide traveling employees...
Question 318: Which of the following would best prepare a security team fo...
Question 319: Which of the following vulnerabilities is exploited when an ...
Question 320: Which of the following best protects sensitive data in trans...
Question 321: Which of the following would most likely prevent exploitatio...
Question 322: Which of the following should an organization focus on the m...
Question 323: Which of the following is a common data removal option for c...
Question 324: An employee in the accounting department receives an email c...
Question 325: A company discovered its data was advertised for sale on the...
Question 326: Which of the following phases of an incident response involv...
Question 327: The management team reports employees are missing features o...
Question 328: A forensic engineer determines that the root cause of a comp...
Question 329: A security team installs an IPS on an organization's network...
Question 330: A company wants to reduce the time and expense associated wi...
Question 331: A financial institution would like to store its customer dat...
Question 332: Which of the following is the most likely benefit of conduct...
Question 333: A company's accounts payable clerk receives a message from a...
Question 334: A security analyst wants to automate a task that shares data...
Question 335: Which security controls is a company implementing by deployi...
Question 336: A company is implementing a vendor's security tool in the cl...
Question 337: Which of the following is the best way to improve the confid...
Question 338: A company is utilizing an offshore team to help support the ...
Question 339: A security officer is implementing a security awareness prog...
Question 340: An alert references attacks associated with a zero-day explo...
Question 341: The local administrator account for a company's VPN applianc...
Question 342: Which of the following is the phase in the incident response...
Question 343: A site reliability engineer is designing a recovery strategy...
Question 344: A spoofed identity was detected for a digital certificate. W...
Question 345: A company wants to update its disaster recovery plan to incl...
Question 346: A security administrator observed the following in a web ser...
Question 347: Which of the following methods to secure credit card data is...
Question 348: During a routine audit, an analyst discovers that a departme...