SY0-701 Exam Dumps | A security analyst discovers an application written in C that does not properly validate the length of

<< Prev Question Next Question >>

Question 467/567

A security analyst discovers an application written in C that does not properly validate the length of user input before copying it into a fixed-size array. To which of the following is the application vulnerable?

A. Sideloading

B. SQLi

C. Buffer overflow

D. XSS

Question List (567q): Question 1: A technician is setting up a public-facing web server and ne...; Question 2: Which of the following is a reason an organization should us...; Question 3: A security administrator at a large company with standardize...; Question 4: A security analyst scans a company's public network and disc...; Question 5: Which of the following is the most likely to be included as ...; Question 6: A company suffered a critical incident where 30GB of data wa...; Question 7: A systems administrator is changing the password policy with...; Question 8: Which of the following best represents how frequently an inc...; Question 9: A hosting provider needs to prove that its security controls...; Question 10: An attacker forces an internal company employee to inject ma...; Question 11: Which of the following sites offers immediate service restor...; Question 12: A security analyst notices unusual behavior on the network. ...; Question 13: A security administrator must use a strategy to protect the ...; Question 14: An employee in the accounting department receives an email c...; Question 15: A Chief Information Security Officer is developing procedure...; Question 16: While reviewing a recent compromise, a forensics team discov...; Question 17: Which of the following techniques is used to assess the effe...; Question 18: Which of the following is the best reason to perform a table...; Question 19: Which of the following alert types is the most likely to be ...; Question 20: Which of the following types of identification methods can b...; Question 21: A database engineer needs sample customer data for testing p...; Question 22: A security analyst receives an alert from a corporate endpoi...; Question 23: An engineer needs to ensure that a script has not been modif...; Question 24: A systems administrator deployed a monitoring solution that ...; Question 25: A company wants to use new Wi-Fi-enabled environmental senso...; Question 26: Which of the following should be used to ensure a device is ...; Question 27: A site reliability engineer is designing a recovery strategy...; Question 28: Which of the following describes when a user installs an una...; Question 29: Which of the following would cause a violation of data sover...; Question 30: Several employees received a fraudulent text message from so...; Question 31: Which of the following should an organization use to ensure ...; Question 32: Which of the following best explains the use of a policy eng...; Question 33: An organization is building a single virtual environment tha...; Question 34: Which of the following is a hardware-specific vulnerability?...; Question 35: A security analyst developed a script to automate a trivial ...; Question 36: Which of the following should a security administrator adher...; Question 37: A network administrator deployed a DNS logging tool that tog...; Question 38: Easy-to-guess passwords led to an account compromise. The cu...; Question 39: A business is expanding to a new country and must protect cu...; Question 40: Which of the following teams is best suited to determine whe...; Question 41: Which of the following is a reason to perform a one-time ris...; Question 42: Which of the following agreements defines response time, esc...; Question 43: Which of the following scenarios will proper application of ...; Question 44: An attacker pretending to be from the help desk calls a user...; Question 45: A company's security team is reviewing its business continui...; Question 46: A security analyst receives an alert that an employee has cl...; Question 47: Which of the following best describes a challenge related to...; Question 48: A systems administrator is redesigning now devices will perf...; Question 49: Which of the following uses proprietary controls and is desi...; Question 50: Which of the following techniques would attract the attentio...; Question 51: A software development manager wants to ensure the authentic...; Question 52: A systems administrator receives the following alert from a ...; Question 53: Which of the following are the most important considerations...; Question 54: An employee used a company's billing system to issue fraudul...; Question 55: The help desk receives multiple calls indicating that machin...; Question 56: After creating a contract for IT contractors, the human reso...; Question 57: A new corporate policy requires all staff to use multifactor...; Question 58: Which of the following explains the difference between data ...; Question 59: A security team identifies a vulnerability in an application...; Question 60: A company is in the process of cutting jobs to manage costs....; Question 61: A technician is opening ports on a firewall for a new system...; Question 62: An organization is preparing to export proprietary software ...; Question 63: An enterprise is trying to limit outbound DNS traffic origin...; Question 64: Which of the following agreements defines response time, esc...; Question 65: A security analyst is reviewing the following logs about a s...; Question 66: A user needs to complete training at https://comptiatraining...; Question 67: An administrator learns that users are receiving large quant...; Question 68: After a series of account compromises and credential misuse,...; Question 69: A security manager needs an automated solution that will tak...; Question 70: Which of the following security control types does an accept...; Question 71: A company wants to minimize the chance of its outgoing marke...; Question 72: Which of the following risk analysis attributes measures the...; Question 73: A business analyst develops a questionnaire to interview key...; Question 74: A user would like to install software and features that are ...; Question 75: Which of the following vulnerabilities is associated with in...; Question 76: A systems administrator would like to deploy a change to a p...; Question 77: Company A jointly develops a product with Company B, which i...; Question 78: A security analyst is reviewing the security of a SaaS appli...; Question 79: A security administrator needs to reduce the attack surface ...; Question 80: Which of the following will harden access to a new database ...; Question 81: Which of the following is the best security reason for closi...; Question 82: Which of the following is a type of vulnerability that invol...; Question 83: An organization has recently decided to implement SSO. The r...; Question 84: In which of the following will unencrypted network traffic m...; Question 85: An organization would like to store customer data on a separ...; Question 86: A software developer released a new application and is distr...; Question 87: A security analyst and the management team are reviewing the...; Question 88: Which of the following would a security analyst need to cons...; Question 89: An employee receives a work phone. Instead of starting up wi...; Question 90: An unexpected and out-of-character email message from a Chie...; Question 91: Which of the following scenarios is a warning sign specific ...; Question 92: Which of the following is the best way to improve the confid...; Question 93: SIMULATION 1 A systems administrator is configuring a site-t...; Question 94: A security engineer needs to patch an OS vulnerability that ...; Question 95: An organization knows its single loss expectancy. Which of t...; Question 96: Which of the following is the most relevant reason a DPO wou...; Question 97: Which of the following is the most important element when de...; Question 98: A few weeks after deploying additional email servers, a comp...; Question 99: A company's Chief Information Security Officer (CISO) wants ...; Question 100: Which of the following best describes a common use of OSINT?...; Question 101: Which of the following is most likely to be deployed to obta...; Question 102: A manufacturing organization receives the results from a pen...; Question 103: Which of the following is a consideration when patching miss...; Question 104: Which of the following should be used to ensure that a new s...; Question 105: A company plans to secure its systems by: - Preventing users...; Question 106: Which of the following metrics impacts the backup schedule a...; Question 107: Which of the following would a service provider supply as an...; Question 108: A security analyst attempts to start a company's database se...; Question 109: A company discovers suspicious transactions that were entere...; Question 110: Which of the following is a risk of conducting a vulnerabili...; Question 111: A systems administrator would like to create a point-in-time...; Question 112: Which of the following is an example of implementing Zero Tr...; Question 113: Which of the following best describes the practice of resear...; Question 114: A user, who is waiting for a flight at an airport, logs in t...; Question 115: Which of the following should an internal auditor check for ...; Question 116: Which of the following security controls is a company implem...; Question 117: Which of the following security measures is required when us...; Question 118: Which of the following vulnerabilities would likely be mitig...; Question 119: A growing organization, which hosts an externally accessible...; Question 120: A security analyst receives an alert that there was an attem...; Question 121: An organization disabled unneeded services and placed a fire...; Question 122: After a recent ransomware attack on a company's system, an a...; Question 123: A company's accounting department receives an urgent payment...; Question 124: A systems administrator needs to provide traveling employees...; Question 125: An unknown source has attacked an organization's network mul...; Question 126: A company wants to implement MFA. Which of the following ena...; Question 127: An attacker uses XSS to compromise a web server. Which of th...; Question 128: An organization with an on-site workforce is transitioning t...; Question 129: Remote users report that they are unable to log in to the VP...; Question 130: A company wants to ensure employees are allowed to copy file...; Question 131: An enterprise has been experiencing attacks focused on explo...; Question 132: Which of the following best represents an application that d...; Question 133: A CVE in a key back-end component of an application has been...; Question 134: A security administrator is working to secure company data o...; Question 135: While analyzing SIEM alerts for a company WAR an incident re...; Question 136: An administrator wants to automate an account permissions up...; Question 137: A software development team tests a new feature that process...; Question 138: An organization has been experiencing issues with deleted ne...; Question 139: The management team wants to assess the cybersecurity team's...; Question 140: Which of the following is the best way to remove personal da...; Question 141: A recent penetration test identified that an attacker could ...; Question 142: A SOC analyst establishes a remote control session on an end...; Question 143: Which of the following security concepts is accomplished whe...; Question 144: Which of the following provides the details about the terms ...; Question 145: Which of the following describes how often backups should oc...; Question 146: While considering the organization's cloud-adoption strategy...; Question 147: While a school district is performing state testing, a secur...; Question 148: An IT security team is concerned about the confidentiality o...; Question 149: A Chief Information Security Officer (CISO) of an enterprise...; Question 150: Which of the following security principles most likely requi...; Question 151: An MSSP manages firewalls for hundreds of clients. Which of ...; Question 152: A systems administrator discovers a guest user gained access...; Question 153: During a routine audit, an analyst discovers that a departme...; Question 154: Which of the following would be most useful in determining w...; Question 155: An accounting clerk sent money to an attacker's bank account...; Question 156: An organization has a new regulatory requirement to implemen...; Question 157: Which of the following is a risk for a company using end-of-...; Question 158: As part of new compliance audit requirements, multiple serve...; Question 159: An important patch for a critical application has just been ...; Question 160: The security team has been asked to only enable host A (10.2...; Question 161: A customer has a contract with a CSP and wants to identify w...; Question 162: During a recent log review, an analyst found evidence of suc...; Question 163: Which of the following data protection strategies can be use...; Question 164: A human resources (HR) employee working from home leaves the...; Question 165: Which of the following describes the maximum allowance of ac...; Question 166: A company has begun labeling all laptops with asset inventor...; Question 167: A staff member finds a USB drive in the office's parking lot...; Question 168: Which of the following is used to validate a certificate whe...; Question 169: Which of the following most impacts an administrator's abili...; Question 170: Which of the following is the best method to reduce the atta...; Question 171: A security practitioner completes a vulnerability assessment...; Question 172: Which of the following phases of an incident response involv...; Question 173: The application development teams have been asked to answer ...; Question 174: The executive management team is mandating the company devel...; Question 175: A security analyst is reviewing logs to identify the destina...; Question 176: Which of the following actions must an organization take to ...; Question 177: A third-party vendor is moving a particular application to t...; Question 178: An engineer needs to find a solution that creates an added l...; Question 179: Which of the following is most likely to cause reputational ...; Question 180: A security analyst reviews the following SIEM events: (Exhib...; Question 181: A security analyst is assessing several company firewalls. W...; Question 182: A company web server is initiating outbound traffic to a low...; Question 183: An organization failed to account for the right-to-be-forgot...; Question 184: A security engineer at a large company needs to enhance IAM ...; Question 185: Which of the following data states applies to data that is b...; Question 186: A security technician determines that no additional patches ...; Question 187: After a recent vulnerability scan, a security engineer needs...; Question 188: A company receives an alert that a network device vendor, wh...; Question 189: A small business initially plans to open common communicatio...; Question 190: A government worker secretly copies classified files that co...; Question 191: A user's workstation becomes unresponsive and displays a ran...; Question 192: A newly appointed board member with cybersecurity knowledge ...; Question 193: Which of the following best distinguishes serverless archite...; Question 194: Which of the following risks can be mitigated by HTTP header...; Question 195: Which of the following best explains how open service ports ...; Question 196: While troubleshooting an internal resource's poor performanc...; Question 197: A security analyst is concerned malicious actors are lurking...; Question 198: Which of the following would be the best solution to deploy ...; Question 199: Which of the following strategies most effectively protects ...; Question 200: While accessing a banking website, a user notices that the c...; Question 201: An IT manager is increasing the security capabilities of an ...; Question 202: A security professional discovers a folder containing an emp...; Question 203: A red-team provider tailgates into an organization's facilit...; Question 204: A company is changing its mobile device policy. The company ...; Question 205: A security analyst is investigating an application server an...; Question 206: In which of the following will unencrypted PLC management tr...; Question 207: Which of the following attacks exploits a potential vulnerab...; Question 208: A systems administrator uses deception techniques to help de...; Question 209: A company allows customers to upload PDF documents to its pu...; Question 210: An organization issued new laptops to all employees and want...; Question 211: A company recently purchased a new building that does not ha...; Question 212: An IT manager is putting together a documented plan describi...; Question 213: Which of the following is an example of a treatment strategy...; Question 214: An administrator discovers a cross-site scripting vulnerabil...; Question 215: A security analyst received a tip that sensitive proprietary...; Question 216: To improve the security at a data center, a security adminis...; Question 217: A business needs a recovery site but does not require immedi...; Question 218: Users at a company are reporting they are unable to access t...; Question 219: A security engineer tests a system that uses parallel proces...; Question 220: A company is implementing a policy to allow employees to use...; Question 221: A company deploys a new server that a client must be able to...; Question 222: A company is concerned about the theft of client data from d...; Question 223: Which of the following should an organization focus on the m...; Question 224: A company wants to restrict uploads to a popular file-sharin...; Question 225: A user is requesting Telnet access to manage a remote develo...; Question 226: The number of tickets the help desk has been receiving has i...; Question 227: A security analyst estimates that a small security incident ...; Question 228: Which of the following has been implemented when a host-base...; Question 229: A company wants to ensure that the software it develops will...; Question 230: A security team is setting up a new environment for hosting ...; Question 231: A security administrator is configuring fileshares. The admi...; Question 232: An organization requests a third-party full-spectrum analysi...; Question 233: After conducting a vulnerability scan, a systems administrat...; Question 234: A security administrator documented the following records du...; Question 235: A penetration test identifies that an SMBv1 is enabled on mu...; Question 236: An IT administrator needs to ensure data retention standards...; Question 237: A security analyst investigates logs and notices similar dat...; Question 238: An analyst is performing a vulnerability scan against the we...; Question 239: A security analyst is reviewing alerts in the SIEM related t...; Question 240: Which of the following technologies can achieve microsegment...; Question 241: Local guidelines require that all information systems meet a...; Question 242: To which of the following security categories does an EDR so...; Question 243: A security administrator is reissuing a former employee's la...; Question 244: A company's leadership team wants to ensure employees only p...; Question 245: A systems administrator set up a perimeter firewall but cont...; Question 246: Which of the following should be used to ensure a user has t...; Question 247: An analyst is reviewing an incident in which a user clicked ...; Question 248: An engineer has ensured that the switches are using the late...; Question 249: Which of the following best describes when a user installs a...; Question 250: A manager meets with various stakeholders involved with a re...; Question 251: Which of the following is the best way to prevent an unautho...; Question 252: Which of the following security concepts is the best reason ...; Question 253: During a SQL update of a database, a temporary field used as...; Question 254: A company that has a large IT operation is looking to better...; Question 255: An organization has published a list of domains that end use...; Question 256: A company that operates with most of its infrastructure in t...; Question 257: A developer receives this message when testing a new externa...; Question 258: A company processes a large volume of business-to-business t...; Question 259: Which of the following is an example of a data protection st...; Question 260: A company's end users are reporting that they are unable to ...; Question 261: While conducting a business continuity tabletop exercise, th...; Question 262: Which of the following explains why an attacker cannot easil...; Question 263: An incident analyst finds several image files on a hard disk...; Question 264: A hospital in an area prone to natural disasters needs to mo...; Question 265: A financial institution would like to store its customer dat...; Question 266: Which of the following considerations is the most important ...; Question 267: Which of the following is an example of change management?...; Question 268: Which of the following cryptographic solutions best protects...; Question 269: A company's online shopping website became unusable shortly ...; Question 270: A systems administrator works for a local hospital and needs...; Question 271: A multinational bank hosts several servers in its data cente...; Question 272: Which of the following would be the greatest concern for a c...; Question 273: An administrator must replace an expired SSL certificate. Wh...; Question 274: Which of the following methods would most likely be used to ...; Question 275: Which of the following most securely protects data at rest?...; Question 276: Which of the following phishing-resistant authentication met...; Question 277: Which of the following describes the difference between encr...; Question 278: A data administrator is configuring authentication for a Saa...; Question 279: An employee recently resigned from a company. The employee w...; Question 280: Which of the following is used to calculate the impact to an...; Question 281: Which of the following are cases in which an engineer should...; Question 282: Which of the following is a type of preventive control?...; Question 283: A company uses multiple providers to send its marketing, int...; Question 284: An employee emailed a new systems administrator a malicious ...; Question 285: Which of the following types of vulnerabilities involves att...; Question 286: An organization needs to determine how many employees are ac...; Question 287: Which of the following tools is best for logging and monitor...; Question 288: An employee asks a security analyst to scan a suspicious ema...; Question 289: An administrator discovers that some files on a database ser...; Question 290: An organization authorizes system deployment on the network ...; Question 291: During a security incident, the security operations team ide...; Question 292: An organization has an external developer create all of its ...; Question 293: Visitors to a company's facilities are connecting to the com...; Question 294: An analyst discovers a suspicious item in the SQL server log...; Question 295: Prior to implementing a design change, the change must go th...; Question 296: Which of the following are common VoIP-associated vulnerabil...; Question 297: Which of the following makes IaC a preferred security archit...; Question 298: An organization designs an inbound firewall with a fail-open...; Question 299: During an investigation, a security analyst discovers traffi...; Question 300: Which of the following is the best way to consistently deter...; Question 301: Which of the following architectures is most suitable to pro...; Question 302: A threat actor was able to use a username and password to lo...; Question 303: A security analyst receives a report of unusual outbound tra...; Question 304: Which of the following allows an exploit to go undetected by...; Question 305: While investigating a possible incident, a security analyst ...; Question 306: After reviewing the following vulnerability scanning report:...; Question 307: A small business uses kiosks on the sales floor to display p...; Question 308: Which of the following technologies assists in passively ver...; Question 309: During an investigation, an incident response team attempts ...; Question 310: Which of the following describes a commitment to maintain se...; Question 311: During a penetration test, a flaw in the internal PKI was ex...; Question 312: A certificate vendor notified a company that recently invali...; Question 313: A security analyst is creating base for the server team to f...; Question 314: A penetration test reveals that users can easily access inte...; Question 315: Employees located off-site must have access to company resou...; Question 316: Which of the following best describes the importance of impl...; Question 317: The Chief Executive Officer has requested that a vendor cond...; Question 318: A company's public-facing website, https://www.organization....; Question 319: Which of the following is a common data removal option for c...; Question 320: Which of the following is a one-way function that provides a...; Question 321: A database administrator is updating the company's SQL datab...; Question 322: Which of the following activities identifies but does not ex...; Question 323: A growing company would like to enhance the ability of its s...; Question 324: Which of the following best describes why me SMS DIP authent...; Question 325: An employee receives a text message from an unknown number c...; Question 326: A company phone with proprietary data used by an employee ha...; Question 327: A company's legal department drafted sensitive documents in ...; Question 328: Which of the following phases of the incident response proce...; Question 329: After a cybersecurity event, a company audits its enterprise...; Question 330: The Chief Information Security Officer (CISO) at a large com...; Question 331: Which of the following principles ensures data is only acces...; Question 332: During the onboarding process, an employee needs to create a...; Question 333: A company wants to improve the availability of its applicati...; Question 334: An organization plans to expand its operations international...; Question 335: A company is aware of a given security risk related to a spe...; Question 336: A systems administrator is creating a script that would save...; Question 337: Several customers want an organization to verify its securit...; Question 338: A security administrator identifies an application that is s...; Question 339: Which of the following is the best mitigation for a zero-day...; Question 340: A store is setting up wireless access for their employees. M...; Question 341: A private equity firm has been the target of protests. The f...; Question 342: A newly implemented wireless network is designed so that vis...; Question 343: A security analyst learns that an attack vector, which was u...; Question 344: Which of the following security concepts is being followed w...; Question 345: An organization that handles sensitive information wants to ...; Question 346: A CIRT team updates their playbooks to include instructions ...; Question 347: A network administrator deploys an FDE solution on all end u...; Question 348: Which of the following activities should a systems administr...; Question 349: A company performs risk analysis on its equipment and estima...; Question 350: Which of the following should a systems administrator set up...; Question 351: A company wants to get alerts when others are researching an...; Question 352: A company needs to provide administrative access to internal...; Question 353: Which of the following is an example of passive reconnaissan...; Question 354: An organization maintains intellectual property that it want...; Question 355: A retail company receives a request to remove a customer's d...; Question 356: A security engineer is working to address the growing risks ...; Question 357: A company wants to ensure that a mission-critical database c...; Question 358: A security administrator receives multiple reports about the...; Question 359: A security engineer is implementing FDE for all laptops in a...; Question 360: Which of the following describes the category of data that i...; Question 361: A systems administrator notices that the research and develo...; Question 362: During a recent log review, an analyst discovers evidence of...; Question 363: An organization discovers its product's internal specificati...; Question 364: Which of the following is an algorithm performed to verify t...; Question 365: Which of the following is the stage in an investigation when...; Question 366: After performing an assessment, an analyst wants to provide ...; Question 367: In which of the following phases would data sanitization pri...; Question 368: Which of the following best protects sensitive data in trans...; Question 369: Which of the following is a directive managerial control?...; Question 370: Which of the following is a benefit of vendor diversity?...; Question 371: A company experiences a breach. The investigation reveals th...; Question 372: A customer changes the underlying file structure of a new mo...; Question 373: An organization implemented cloud-managed IP cameras to moni...; Question 374: An organization purchases software from an overseas company....; Question 375: A software company currently secures access using a combinat...; Question 376: Which of the following is a SIEM system using when monitorin...; Question 377: Which of the following is used to conceal credit card inform...; Question 378: A bank insists all of its vendors must prevent data loss on ...; Question 379: Which of the following are the best for hardening end-user d...; Question 380: A company is concerned with supply chain compromise of new s...; Question 381: An administrator must secure several end-of-life SCADA devic...; Question 382: A user sends an email that includes a digital signature for ...; Question 383: Which of the following hardening techniques must be applied ...; Question 384: Which of the following is the most closely associated with c...; Question 385: Which of the following allows for the attribution of message...; Question 386: The private key for a website was stolen, and a new certific...; Question 387: Which of the following is an example of a certificate that i...; Question 388: A security administrator needs a method to secure data in an...; Question 389: Which of the following would help reduce the impact of a zer...; Question 390: Which of the following could potentially be introduced at th...; Question 391: Several employees download a productivity program that is us...; Question 392: Drag and Drop Question A security engineer is setting up pas...; Question 393: A systems administrate wants to implement a backup solution....; Question 394: While conducting a business continuity tabletop exercise, th...; Question 395: Which of the following aspects of the data management life c...; Question 396: A technician wants to improve the situational and environmen...; Question 397: Which of the following is a reason an organization performs ...; Question 398: Which of the following data types best describes an AI tool ...; Question 399: A security architect is designing an environment in which ce...; Question 400: A security administrator must adjust the company firewall AC...; Question 401: After a security incident, a systems administrator asks the ...; Question 402: A new employee logs in to the email system for the first tim...; Question 403: Which of the following can be deployed in data centers as a ...; Question 404: Which of the following activities would involve members of t...; Question 405: Which of the following cryptographic solutions protects data...; Question 406: Which of the following non-production sites is an operationa...; Question 407: Which of the following can be best used to discover a compan...; Question 408: A security analyst is monitoring logs from the organization'...; Question 409: A technician needs to apply a high-priority patch to a produ...; Question 410: An organization is leveraging a VPN between its headquarters...; Question 411: Which of the following attacks primarily targets insecure ne...; Question 412: An organization is required to provide assurance that its co...; Question 413: A security administrator wants to increase a company's techn...; Question 414: A recent review of logs indicates many attempts to join an i...; Question 415: Which of the following prevents unauthorized modifications t...; Question 416: Which of the following are the best security controls for co...; Question 417: Prior to implementing a design change, the change must go th...; Question 418: Which of the following is an example of memory injection?...; Question 419: Which of the following can a security director use to priori...; Question 420: Which of the following is an internal audit team's function ...; Question 421: A forensic engineer determines that the root cause of a comp...; Question 422: A security analyst reviews domain activity logs and notices ...; Question 423: Which of the following would best prepare a security team fo...; Question 424: Which of the following best describes the purpose of using d...; Question 425: Which of the following are examples of operational controls ...; Question 426: A security analyst locates a potentially malicious video fil...; Question 427: An administrator has configured a quarantine subnet for all ...; Question 428: A systems administrator is auditing all company servers to e...; Question 429: A security administrator wants to determine it the company's...; Question 430: A security engineer configured a remote access VPN. The remo...; Question 431: An administrator has identified and fingerprinted specific f...; Question 432: An attacker floods an organization's VoIP phone system with ...; Question 433: A company performs a risk assessment on the information secu...; Question 434: Which of the following is the best physical security measure...; Question 435: A security analyst receives an alert from a web server that ...; Question 436: After a breach at a data processing center, an administrator...; Question 437: During a recent breach, employee credentials were compromise...; Question 438: Which of the following should a security operations center u...; Question 439: Which of the following best practices gives administrators a...; Question 440: A company is experiencing a web services outage on the publi...; Question 441: Which of the following is a TPM used for in cryptographic so...; Question 442: An organization experiences a suspected data breach that aff...; Question 443: Which of the following describes an agent-based application ...; Question 444: One of a company's vendors sent an analyst a security bullet...; Question 445: A company's web filter is configured to scan the URL for str...; Question 446: A company wants to reduce the time and expense associated wi...; Question 447: An organization purchased and configured spare devices for a...; Question 448: A security architect wants to prevent employees from receivi...; Question 449: Which of the following is a possible consequence of a VM esc...; Question 450: A systems administrator has overwritten all of the superviso...; Question 451: An organization is adopting cloud services at a rapid pace a...; Question 452: Which of the following is a benefit of following a change ma...; Question 453: A security engineer must deploy a sensor to actively monitor...; Question 454: A company wants to track modifications to the code that is u...; Question 455: Which of the following is used to protect a computer from vi...; Question 456: Which of the following security concepts ensures that a send...; Question 457: A spoofed identity was detected for a digital certificate. W...; Question 458: Which of the following best describes the risk present after...; Question 459: Client files can only be accessed by employees who need to k...; Question 460: An administrator is reviewing a single server's security log...; Question 461: A website user is locked out of an account after clicking an...; Question 462: Which of the following provides resilience by hosting critic...; Question 463: The board of a company needs to tell the leadership team whi...; Question 464: A security analyst identifies an employee who added an unaut...; Question 465: An administrator finds that all user workstations and server...; Question 466: The local administrator account for a company's VPN applianc...; Question 467: A security analyst discovers an application written in C tha...; Question 468: An architect has a request to increase the speed of data tra...; Question 469: A company performs a vulnerability assessment and gets the f...; Question 470: Which of the following exercises should an organization use ...; Question 471: Scans of new servers created from a community image show an ...; Question 472: Which of the following is the best reason to complete an aud...; Question 473: A company is adding a clause to its AUP that states employee...; Question 474: An accounting clerk sent money to an attacker's bank account...; Question 475: A company wants to protect a specialized legacy platform tha...; Question 476: A security analyst regularly receives emails from users who ...; Question 477: A security team wants to work with the same organization's d...; Question 478: An organization wants a third-party vendor to do a penetrati...; Question 479: A security administrator's supervisor wants their credential...; Question 480: Which of the following best describes the concept of informa...; Question 481: A security analyst collects IoCs from a cybersecurity bullet...; Question 482: Which of the following describes a security alerting and mon...; Question 483: Which of the following is the most likely benefit of conduct...; Question 484: Which of the following strategies should an organization use...; Question 485: Which of the following is the primary reason why false negat...; Question 486: Which of the following would best ensure a controlled versio...; Question 487: Which of the following organizational documents is most ofte...; Question 488: Employees in the research and development business unit rece...; Question 489: An energy provider identifies a critical vulnerability in a ...; Question 490: A company is considering an expansion of access controls for...; Question 491: An engineer moved to another team and is unable to access th...; Question 492: Which of the following is a feature of a next-generation SIE...; Question 493: A company is expanding its threat surface program and allowi...; Question 494: An attacker used XSS to compromise a web server. Which of th...; Question 495: A client demands at least 99.99% uptime from a service provi...; Question 496: Which of the following vulnerabilities would a nation-state ...; Question 497: An administrator is installing an SSL certificate on a new s...; Question 498: Which of the following best describes why a company would er...; Question 499: A network team segmented a critical, end-of-life server to a...; Question 500: An audit reveals that cardholder database logs are exposing ...; Question 501: Which of the following can be used to mitigate attacks from ...; Question 502: Which of the following will prevent an attack on a corporate...; Question 503: A security analyst investigates abnormal outbound traffic fr...; Question 504: A technician is deploying a new security camera. Which of th...; Question 505: Which of the following will best provide consistent power to...; Question 506: A penetration tester begins an engagement by performing port...; Question 507: An administrator must authenticate users to systems using cr...; Question 508: Which of the following is the best reason an organization sh...; Question 509: Which of the following topics would most likely be included ...; Question 510: A security analyst recently read a report about a flaw in se...; Question 511: A cyber operations team informs a security analyst about a n...; Question 512: Which of the following best summarizes the reason for an AUP...; Question 513: During the investigation of a webmail log-in using compromis...; Question 514: Which of the following is a common, passive reconnaissance t...; Question 515: An organization's primary site is located in an area that ex...; Question 516: Visitors to a secured facility are required to check in with...; Question 517: A penetration tester enters an office building at the same t...; Question 518: Which of the following is a social engineering attack in whi...; Question 519: Which of the following best describes a social engineering a...; Question 520: Which of the following control types is AUP an example of?...; Question 521: A security analyst is reviewing the source code of an applic...; Question 522: The physical security team at a company receives reports tha...; Question 523: A security consultant needs secure, remote access to a clien...; Question 524: Alerts from email protection systems and MSSPs must be enter...; Question 525: Which of the following is a reason environmental variables a...; Question 526: Which of the following is a strategy to protect stored passw...; Question 527: A company's gate access logs show multiple entries from an e...; Question 528: Security controls in a data center are being reviewed to ens...; Question 529: Which of the following security concepts is accomplished wit...; Question 530: An administrator needs to ensure all emails sent and receive...; Question 531: A company captures log-in details and reviews them each week...; Question 532: A security officer observes that a software development team...; Question 533: Which of the following vulnerabilities is exploited when an ...; Question 534: During an annual review of the system design, an engineer id...; Question 535: An administrator needs to perform server hardening before de...; Question 536: Which of the following best describes a threat actor who can...; Question 537: A security administrator is working to find a cost-effective...; Question 538: A healthcare organization wants to provide a web application...; Question 539: A company is redesigning its infrastructure and wants to red...; Question 540: A recent power outage halted operations at a company's only ...; Question 541: The Chief Information Security Officer (CISO) has determined...; Question 542: A security team is addressing a risk associated with the att...; Question 543: A user is attempting to patch a critical system, but the pat...; Question 544: Which of the following is a prerequisite for a DLP solution?...; Question 545: Which of the following options will provide the lowest RTO a...; Question 546: An administrator has configured a quarantine subnet for all ...; Question 547: A company wants to verify that the software the company is d...; Question 548: An organization experiences data loss after several employee...; Question 549: Which of the following solutions would most likely be used i...; Question 550: A group of people is working together to run multiple ransom...; Question 551: A company uses a cloud-based server for file storage and wan...; Question 552: Which of the following examples would be best mitigated by i...; Question 553: Which of the following data types relates to data sovereignt...; Question 554: While a user reviews their email, a host gets infected by ma...; Question 555: A company prevented direct access from the database administ...; Question 556: Users report that certain processes from a batch job are not...; Question 557: Which of the following is the stage in an investigating when...; Question 558: Which of the following definitions best describes the concep...; Question 559: Which of the following is considered a preventive control?...; Question 560: Which of the following is used to monitor suspicious traffic...; Question 561: Which of the following elements of digital forensics should ...; Question 562: A security engineer is installing an IPS to block signature-...; Question 563: In order to maintain system stability, a company's software ...; Question 564: A company is experiencing issues with employees leaving the ...; Question 565: A company's accounts payable clerk receives a message from a...; Question 566: A company decides to purchase an insurance policy. Which of ...; Question 567: Which of the following is used to quantitatively measure the...

Question 467/567

LEAVE A REPLY

Download PDF File