SY0-701 Exam Dumps | During an investigation, a security analyst discovers traffic going out to a command-and-control server.

<< Prev Question Next Question >>

Question 299/567

During an investigation, a security analyst discovers traffic going out to a command-and-control server. The analyst must find out if any data exfiltration has occurred. Which of the following would best help the analyst determine this?

A. Application log

B. Metadata

C. Network log

D. Packet capture

Question List (567q): Question 1: A technician is setting up a public-facing web server and ne...; Question 2: Which of the following is a reason an organization should us...; Question 3: A security administrator at a large company with standardize...; Question 4: A security analyst scans a company's public network and disc...; Question 5: Which of the following is the most likely to be included as ...; Question 6: A company suffered a critical incident where 30GB of data wa...; Question 7: A systems administrator is changing the password policy with...; Question 8: Which of the following best represents how frequently an inc...; Question 9: A hosting provider needs to prove that its security controls...; Question 10: An attacker forces an internal company employee to inject ma...; Question 11: Which of the following sites offers immediate service restor...; Question 12: A security analyst notices unusual behavior on the network. ...; Question 13: A security administrator must use a strategy to protect the ...; Question 14: An employee in the accounting department receives an email c...; Question 15: A Chief Information Security Officer is developing procedure...; Question 16: While reviewing a recent compromise, a forensics team discov...; Question 17: Which of the following techniques is used to assess the effe...; Question 18: Which of the following is the best reason to perform a table...; Question 19: Which of the following alert types is the most likely to be ...; Question 20: Which of the following types of identification methods can b...; Question 21: A database engineer needs sample customer data for testing p...; Question 22: A security analyst receives an alert from a corporate endpoi...; Question 23: An engineer needs to ensure that a script has not been modif...; Question 24: A systems administrator deployed a monitoring solution that ...; Question 25: A company wants to use new Wi-Fi-enabled environmental senso...; Question 26: Which of the following should be used to ensure a device is ...; Question 27: A site reliability engineer is designing a recovery strategy...; Question 28: Which of the following describes when a user installs an una...; Question 29: Which of the following would cause a violation of data sover...; Question 30: Several employees received a fraudulent text message from so...; Question 31: Which of the following should an organization use to ensure ...; Question 32: Which of the following best explains the use of a policy eng...; Question 33: An organization is building a single virtual environment tha...; Question 34: Which of the following is a hardware-specific vulnerability?...; Question 35: A security analyst developed a script to automate a trivial ...; Question 36: Which of the following should a security administrator adher...; Question 37: A network administrator deployed a DNS logging tool that tog...; Question 38: Easy-to-guess passwords led to an account compromise. The cu...; Question 39: A business is expanding to a new country and must protect cu...; Question 40: Which of the following teams is best suited to determine whe...; Question 41: Which of the following is a reason to perform a one-time ris...; Question 42: Which of the following agreements defines response time, esc...; Question 43: Which of the following scenarios will proper application of ...; Question 44: An attacker pretending to be from the help desk calls a user...; Question 45: A company's security team is reviewing its business continui...; Question 46: A security analyst receives an alert that an employee has cl...; Question 47: Which of the following best describes a challenge related to...; Question 48: A systems administrator is redesigning now devices will perf...; Question 49: Which of the following uses proprietary controls and is desi...; Question 50: Which of the following techniques would attract the attentio...; Question 51: A software development manager wants to ensure the authentic...; Question 52: A systems administrator receives the following alert from a ...; Question 53: Which of the following are the most important considerations...; Question 54: An employee used a company's billing system to issue fraudul...; Question 55: The help desk receives multiple calls indicating that machin...; Question 56: After creating a contract for IT contractors, the human reso...; Question 57: A new corporate policy requires all staff to use multifactor...; Question 58: Which of the following explains the difference between data ...; Question 59: A security team identifies a vulnerability in an application...; Question 60: A company is in the process of cutting jobs to manage costs....; Question 61: A technician is opening ports on a firewall for a new system...; Question 62: An organization is preparing to export proprietary software ...; Question 63: An enterprise is trying to limit outbound DNS traffic origin...; Question 64: Which of the following agreements defines response time, esc...; Question 65: A security analyst is reviewing the following logs about a s...; Question 66: A user needs to complete training at https://comptiatraining...; Question 67: An administrator learns that users are receiving large quant...; Question 68: After a series of account compromises and credential misuse,...; Question 69: A security manager needs an automated solution that will tak...; Question 70: Which of the following security control types does an accept...; Question 71: A company wants to minimize the chance of its outgoing marke...; Question 72: Which of the following risk analysis attributes measures the...; Question 73: A business analyst develops a questionnaire to interview key...; Question 74: A user would like to install software and features that are ...; Question 75: Which of the following vulnerabilities is associated with in...; Question 76: A systems administrator would like to deploy a change to a p...; Question 77: Company A jointly develops a product with Company B, which i...; Question 78: A security analyst is reviewing the security of a SaaS appli...; Question 79: A security administrator needs to reduce the attack surface ...; Question 80: Which of the following will harden access to a new database ...; Question 81: Which of the following is the best security reason for closi...; Question 82: Which of the following is a type of vulnerability that invol...; Question 83: An organization has recently decided to implement SSO. The r...; Question 84: In which of the following will unencrypted network traffic m...; Question 85: An organization would like to store customer data on a separ...; Question 86: A software developer released a new application and is distr...; Question 87: A security analyst and the management team are reviewing the...; Question 88: Which of the following would a security analyst need to cons...; Question 89: An employee receives a work phone. Instead of starting up wi...; Question 90: An unexpected and out-of-character email message from a Chie...; Question 91: Which of the following scenarios is a warning sign specific ...; Question 92: Which of the following is the best way to improve the confid...; Question 93: SIMULATION 1 A systems administrator is configuring a site-t...; Question 94: A security engineer needs to patch an OS vulnerability that ...; Question 95: An organization knows its single loss expectancy. Which of t...; Question 96: Which of the following is the most relevant reason a DPO wou...; Question 97: Which of the following is the most important element when de...; Question 98: A few weeks after deploying additional email servers, a comp...; Question 99: A company's Chief Information Security Officer (CISO) wants ...; Question 100: Which of the following best describes a common use of OSINT?...; Question 101: Which of the following is most likely to be deployed to obta...; Question 102: A manufacturing organization receives the results from a pen...; Question 103: Which of the following is a consideration when patching miss...; Question 104: Which of the following should be used to ensure that a new s...; Question 105: A company plans to secure its systems by: - Preventing users...; Question 106: Which of the following metrics impacts the backup schedule a...; Question 107: Which of the following would a service provider supply as an...; Question 108: A security analyst attempts to start a company's database se...; Question 109: A company discovers suspicious transactions that were entere...; Question 110: Which of the following is a risk of conducting a vulnerabili...; Question 111: A systems administrator would like to create a point-in-time...; Question 112: Which of the following is an example of implementing Zero Tr...; Question 113: Which of the following best describes the practice of resear...; Question 114: A user, who is waiting for a flight at an airport, logs in t...; Question 115: Which of the following should an internal auditor check for ...; Question 116: Which of the following security controls is a company implem...; Question 117: Which of the following security measures is required when us...; Question 118: Which of the following vulnerabilities would likely be mitig...; Question 119: A growing organization, which hosts an externally accessible...; Question 120: A security analyst receives an alert that there was an attem...; Question 121: An organization disabled unneeded services and placed a fire...; Question 122: After a recent ransomware attack on a company's system, an a...; Question 123: A company's accounting department receives an urgent payment...; Question 124: A systems administrator needs to provide traveling employees...; Question 125: An unknown source has attacked an organization's network mul...; Question 126: A company wants to implement MFA. Which of the following ena...; Question 127: An attacker uses XSS to compromise a web server. Which of th...; Question 128: An organization with an on-site workforce is transitioning t...; Question 129: Remote users report that they are unable to log in to the VP...; Question 130: A company wants to ensure employees are allowed to copy file...; Question 131: An enterprise has been experiencing attacks focused on explo...; Question 132: Which of the following best represents an application that d...; Question 133: A CVE in a key back-end component of an application has been...; Question 134: A security administrator is working to secure company data o...; Question 135: While analyzing SIEM alerts for a company WAR an incident re...; Question 136: An administrator wants to automate an account permissions up...; Question 137: A software development team tests a new feature that process...; Question 138: An organization has been experiencing issues with deleted ne...; Question 139: The management team wants to assess the cybersecurity team's...; Question 140: Which of the following is the best way to remove personal da...; Question 141: A recent penetration test identified that an attacker could ...; Question 142: A SOC analyst establishes a remote control session on an end...; Question 143: Which of the following security concepts is accomplished whe...; Question 144: Which of the following provides the details about the terms ...; Question 145: Which of the following describes how often backups should oc...; Question 146: While considering the organization's cloud-adoption strategy...; Question 147: While a school district is performing state testing, a secur...; Question 148: An IT security team is concerned about the confidentiality o...; Question 149: A Chief Information Security Officer (CISO) of an enterprise...; Question 150: Which of the following security principles most likely requi...; Question 151: An MSSP manages firewalls for hundreds of clients. Which of ...; Question 152: A systems administrator discovers a guest user gained access...; Question 153: During a routine audit, an analyst discovers that a departme...; Question 154: Which of the following would be most useful in determining w...; Question 155: An accounting clerk sent money to an attacker's bank account...; Question 156: An organization has a new regulatory requirement to implemen...; Question 157: Which of the following is a risk for a company using end-of-...; Question 158: As part of new compliance audit requirements, multiple serve...; Question 159: An important patch for a critical application has just been ...; Question 160: The security team has been asked to only enable host A (10.2...; Question 161: A customer has a contract with a CSP and wants to identify w...; Question 162: During a recent log review, an analyst found evidence of suc...; Question 163: Which of the following data protection strategies can be use...; Question 164: A human resources (HR) employee working from home leaves the...; Question 165: Which of the following describes the maximum allowance of ac...; Question 166: A company has begun labeling all laptops with asset inventor...; Question 167: A staff member finds a USB drive in the office's parking lot...; Question 168: Which of the following is used to validate a certificate whe...; Question 169: Which of the following most impacts an administrator's abili...; Question 170: Which of the following is the best method to reduce the atta...; Question 171: A security practitioner completes a vulnerability assessment...; Question 172: Which of the following phases of an incident response involv...; Question 173: The application development teams have been asked to answer ...; Question 174: The executive management team is mandating the company devel...; Question 175: A security analyst is reviewing logs to identify the destina...; Question 176: Which of the following actions must an organization take to ...; Question 177: A third-party vendor is moving a particular application to t...; Question 178: An engineer needs to find a solution that creates an added l...; Question 179: Which of the following is most likely to cause reputational ...; Question 180: A security analyst reviews the following SIEM events: (Exhib...; Question 181: A security analyst is assessing several company firewalls. W...; Question 182: A company web server is initiating outbound traffic to a low...; Question 183: An organization failed to account for the right-to-be-forgot...; Question 184: A security engineer at a large company needs to enhance IAM ...; Question 185: Which of the following data states applies to data that is b...; Question 186: A security technician determines that no additional patches ...; Question 187: After a recent vulnerability scan, a security engineer needs...; Question 188: A company receives an alert that a network device vendor, wh...; Question 189: A small business initially plans to open common communicatio...; Question 190: A government worker secretly copies classified files that co...; Question 191: A user's workstation becomes unresponsive and displays a ran...; Question 192: A newly appointed board member with cybersecurity knowledge ...; Question 193: Which of the following best distinguishes serverless archite...; Question 194: Which of the following risks can be mitigated by HTTP header...; Question 195: Which of the following best explains how open service ports ...; Question 196: While troubleshooting an internal resource's poor performanc...; Question 197: A security analyst is concerned malicious actors are lurking...; Question 198: Which of the following would be the best solution to deploy ...; Question 199: Which of the following strategies most effectively protects ...; Question 200: While accessing a banking website, a user notices that the c...; Question 201: An IT manager is increasing the security capabilities of an ...; Question 202: A security professional discovers a folder containing an emp...; Question 203: A red-team provider tailgates into an organization's facilit...; Question 204: A company is changing its mobile device policy. The company ...; Question 205: A security analyst is investigating an application server an...; Question 206: In which of the following will unencrypted PLC management tr...; Question 207: Which of the following attacks exploits a potential vulnerab...; Question 208: A systems administrator uses deception techniques to help de...; Question 209: A company allows customers to upload PDF documents to its pu...; Question 210: An organization issued new laptops to all employees and want...; Question 211: A company recently purchased a new building that does not ha...; Question 212: An IT manager is putting together a documented plan describi...; Question 213: Which of the following is an example of a treatment strategy...; Question 214: An administrator discovers a cross-site scripting vulnerabil...; Question 215: A security analyst received a tip that sensitive proprietary...; Question 216: To improve the security at a data center, a security adminis...; Question 217: A business needs a recovery site but does not require immedi...; Question 218: Users at a company are reporting they are unable to access t...; Question 219: A security engineer tests a system that uses parallel proces...; Question 220: A company is implementing a policy to allow employees to use...; Question 221: A company deploys a new server that a client must be able to...; Question 222: A company is concerned about the theft of client data from d...; Question 223: Which of the following should an organization focus on the m...; Question 224: A company wants to restrict uploads to a popular file-sharin...; Question 225: A user is requesting Telnet access to manage a remote develo...; Question 226: The number of tickets the help desk has been receiving has i...; Question 227: A security analyst estimates that a small security incident ...; Question 228: Which of the following has been implemented when a host-base...; Question 229: A company wants to ensure that the software it develops will...; Question 230: A security team is setting up a new environment for hosting ...; Question 231: A security administrator is configuring fileshares. The admi...; Question 232: An organization requests a third-party full-spectrum analysi...; Question 233: After conducting a vulnerability scan, a systems administrat...; Question 234: A security administrator documented the following records du...; Question 235: A penetration test identifies that an SMBv1 is enabled on mu...; Question 236: An IT administrator needs to ensure data retention standards...; Question 237: A security analyst investigates logs and notices similar dat...; Question 238: An analyst is performing a vulnerability scan against the we...; Question 239: A security analyst is reviewing alerts in the SIEM related t...; Question 240: Which of the following technologies can achieve microsegment...; Question 241: Local guidelines require that all information systems meet a...; Question 242: To which of the following security categories does an EDR so...; Question 243: A security administrator is reissuing a former employee's la...; Question 244: A company's leadership team wants to ensure employees only p...; Question 245: A systems administrator set up a perimeter firewall but cont...; Question 246: Which of the following should be used to ensure a user has t...; Question 247: An analyst is reviewing an incident in which a user clicked ...; Question 248: An engineer has ensured that the switches are using the late...; Question 249: Which of the following best describes when a user installs a...; Question 250: A manager meets with various stakeholders involved with a re...; Question 251: Which of the following is the best way to prevent an unautho...; Question 252: Which of the following security concepts is the best reason ...; Question 253: During a SQL update of a database, a temporary field used as...; Question 254: A company that has a large IT operation is looking to better...; Question 255: An organization has published a list of domains that end use...; Question 256: A company that operates with most of its infrastructure in t...; Question 257: A developer receives this message when testing a new externa...; Question 258: A company processes a large volume of business-to-business t...; Question 259: Which of the following is an example of a data protection st...; Question 260: A company's end users are reporting that they are unable to ...; Question 261: While conducting a business continuity tabletop exercise, th...; Question 262: Which of the following explains why an attacker cannot easil...; Question 263: An incident analyst finds several image files on a hard disk...; Question 264: A hospital in an area prone to natural disasters needs to mo...; Question 265: A financial institution would like to store its customer dat...; Question 266: Which of the following considerations is the most important ...; Question 267: Which of the following is an example of change management?...; Question 268: Which of the following cryptographic solutions best protects...; Question 269: A company's online shopping website became unusable shortly ...; Question 270: A systems administrator works for a local hospital and needs...; Question 271: A multinational bank hosts several servers in its data cente...; Question 272: Which of the following would be the greatest concern for a c...; Question 273: An administrator must replace an expired SSL certificate. Wh...; Question 274: Which of the following methods would most likely be used to ...; Question 275: Which of the following most securely protects data at rest?...; Question 276: Which of the following phishing-resistant authentication met...; Question 277: Which of the following describes the difference between encr...; Question 278: A data administrator is configuring authentication for a Saa...; Question 279: An employee recently resigned from a company. The employee w...; Question 280: Which of the following is used to calculate the impact to an...; Question 281: Which of the following are cases in which an engineer should...; Question 282: Which of the following is a type of preventive control?...; Question 283: A company uses multiple providers to send its marketing, int...; Question 284: An employee emailed a new systems administrator a malicious ...; Question 285: Which of the following types of vulnerabilities involves att...; Question 286: An organization needs to determine how many employees are ac...; Question 287: Which of the following tools is best for logging and monitor...; Question 288: An employee asks a security analyst to scan a suspicious ema...; Question 289: An administrator discovers that some files on a database ser...; Question 290: An organization authorizes system deployment on the network ...; Question 291: During a security incident, the security operations team ide...; Question 292: An organization has an external developer create all of its ...; Question 293: Visitors to a company's facilities are connecting to the com...; Question 294: An analyst discovers a suspicious item in the SQL server log...; Question 295: Prior to implementing a design change, the change must go th...; Question 296: Which of the following are common VoIP-associated vulnerabil...; Question 297: Which of the following makes IaC a preferred security archit...; Question 298: An organization designs an inbound firewall with a fail-open...; Question 299: During an investigation, a security analyst discovers traffi...; Question 300: Which of the following is the best way to consistently deter...; Question 301: Which of the following architectures is most suitable to pro...; Question 302: A threat actor was able to use a username and password to lo...; Question 303: A security analyst receives a report of unusual outbound tra...; Question 304: Which of the following allows an exploit to go undetected by...; Question 305: While investigating a possible incident, a security analyst ...; Question 306: After reviewing the following vulnerability scanning report:...; Question 307: A small business uses kiosks on the sales floor to display p...; Question 308: Which of the following technologies assists in passively ver...; Question 309: During an investigation, an incident response team attempts ...; Question 310: Which of the following describes a commitment to maintain se...; Question 311: During a penetration test, a flaw in the internal PKI was ex...; Question 312: A certificate vendor notified a company that recently invali...; Question 313: A security analyst is creating base for the server team to f...; Question 314: A penetration test reveals that users can easily access inte...; Question 315: Employees located off-site must have access to company resou...; Question 316: Which of the following best describes the importance of impl...; Question 317: The Chief Executive Officer has requested that a vendor cond...; Question 318: A company's public-facing website, https://www.organization....; Question 319: Which of the following is a common data removal option for c...; Question 320: Which of the following is a one-way function that provides a...; Question 321: A database administrator is updating the company's SQL datab...; Question 322: Which of the following activities identifies but does not ex...; Question 323: A growing company would like to enhance the ability of its s...; Question 324: Which of the following best describes why me SMS DIP authent...; Question 325: An employee receives a text message from an unknown number c...; Question 326: A company phone with proprietary data used by an employee ha...; Question 327: A company's legal department drafted sensitive documents in ...; Question 328: Which of the following phases of the incident response proce...; Question 329: After a cybersecurity event, a company audits its enterprise...; Question 330: The Chief Information Security Officer (CISO) at a large com...; Question 331: Which of the following principles ensures data is only acces...; Question 332: During the onboarding process, an employee needs to create a...; Question 333: A company wants to improve the availability of its applicati...; Question 334: An organization plans to expand its operations international...; Question 335: A company is aware of a given security risk related to a spe...; Question 336: A systems administrator is creating a script that would save...; Question 337: Several customers want an organization to verify its securit...; Question 338: A security administrator identifies an application that is s...; Question 339: Which of the following is the best mitigation for a zero-day...; Question 340: A store is setting up wireless access for their employees. M...; Question 341: A private equity firm has been the target of protests. The f...; Question 342: A newly implemented wireless network is designed so that vis...; Question 343: A security analyst learns that an attack vector, which was u...; Question 344: Which of the following security concepts is being followed w...; Question 345: An organization that handles sensitive information wants to ...; Question 346: A CIRT team updates their playbooks to include instructions ...; Question 347: A network administrator deploys an FDE solution on all end u...; Question 348: Which of the following activities should a systems administr...; Question 349: A company performs risk analysis on its equipment and estima...; Question 350: Which of the following should a systems administrator set up...; Question 351: A company wants to get alerts when others are researching an...; Question 352: A company needs to provide administrative access to internal...; Question 353: Which of the following is an example of passive reconnaissan...; Question 354: An organization maintains intellectual property that it want...; Question 355: A retail company receives a request to remove a customer's d...; Question 356: A security engineer is working to address the growing risks ...; Question 357: A company wants to ensure that a mission-critical database c...; Question 358: A security administrator receives multiple reports about the...; Question 359: A security engineer is implementing FDE for all laptops in a...; Question 360: Which of the following describes the category of data that i...; Question 361: A systems administrator notices that the research and develo...; Question 362: During a recent log review, an analyst discovers evidence of...; Question 363: An organization discovers its product's internal specificati...; Question 364: Which of the following is an algorithm performed to verify t...; Question 365: Which of the following is the stage in an investigation when...; Question 366: After performing an assessment, an analyst wants to provide ...; Question 367: In which of the following phases would data sanitization pri...; Question 368: Which of the following best protects sensitive data in trans...; Question 369: Which of the following is a directive managerial control?...; Question 370: Which of the following is a benefit of vendor diversity?...; Question 371: A company experiences a breach. The investigation reveals th...; Question 372: A customer changes the underlying file structure of a new mo...; Question 373: An organization implemented cloud-managed IP cameras to moni...; Question 374: An organization purchases software from an overseas company....; Question 375: A software company currently secures access using a combinat...; Question 376: Which of the following is a SIEM system using when monitorin...; Question 377: Which of the following is used to conceal credit card inform...; Question 378: A bank insists all of its vendors must prevent data loss on ...; Question 379: Which of the following are the best for hardening end-user d...; Question 380: A company is concerned with supply chain compromise of new s...; Question 381: An administrator must secure several end-of-life SCADA devic...; Question 382: A user sends an email that includes a digital signature for ...; Question 383: Which of the following hardening techniques must be applied ...; Question 384: Which of the following is the most closely associated with c...; Question 385: Which of the following allows for the attribution of message...; Question 386: The private key for a website was stolen, and a new certific...; Question 387: Which of the following is an example of a certificate that i...; Question 388: A security administrator needs a method to secure data in an...; Question 389: Which of the following would help reduce the impact of a zer...; Question 390: Which of the following could potentially be introduced at th...; Question 391: Several employees download a productivity program that is us...; Question 392: Drag and Drop Question A security engineer is setting up pas...; Question 393: A systems administrate wants to implement a backup solution....; Question 394: While conducting a business continuity tabletop exercise, th...; Question 395: Which of the following aspects of the data management life c...; Question 396: A technician wants to improve the situational and environmen...; Question 397: Which of the following is a reason an organization performs ...; Question 398: Which of the following data types best describes an AI tool ...; Question 399: A security architect is designing an environment in which ce...; Question 400: A security administrator must adjust the company firewall AC...; Question 401: After a security incident, a systems administrator asks the ...; Question 402: A new employee logs in to the email system for the first tim...; Question 403: Which of the following can be deployed in data centers as a ...; Question 404: Which of the following activities would involve members of t...; Question 405: Which of the following cryptographic solutions protects data...; Question 406: Which of the following non-production sites is an operationa...; Question 407: Which of the following can be best used to discover a compan...; Question 408: A security analyst is monitoring logs from the organization'...; Question 409: A technician needs to apply a high-priority patch to a produ...; Question 410: An organization is leveraging a VPN between its headquarters...; Question 411: Which of the following attacks primarily targets insecure ne...; Question 412: An organization is required to provide assurance that its co...; Question 413: A security administrator wants to increase a company's techn...; Question 414: A recent review of logs indicates many attempts to join an i...; Question 415: Which of the following prevents unauthorized modifications t...; Question 416: Which of the following are the best security controls for co...; Question 417: Prior to implementing a design change, the change must go th...; Question 418: Which of the following is an example of memory injection?...; Question 419: Which of the following can a security director use to priori...; Question 420: Which of the following is an internal audit team's function ...; Question 421: A forensic engineer determines that the root cause of a comp...; Question 422: A security analyst reviews domain activity logs and notices ...; Question 423: Which of the following would best prepare a security team fo...; Question 424: Which of the following best describes the purpose of using d...; Question 425: Which of the following are examples of operational controls ...; Question 426: A security analyst locates a potentially malicious video fil...; Question 427: An administrator has configured a quarantine subnet for all ...; Question 428: A systems administrator is auditing all company servers to e...; Question 429: A security administrator wants to determine it the company's...; Question 430: A security engineer configured a remote access VPN. The remo...; Question 431: An administrator has identified and fingerprinted specific f...; Question 432: An attacker floods an organization's VoIP phone system with ...; Question 433: A company performs a risk assessment on the information secu...; Question 434: Which of the following is the best physical security measure...; Question 435: A security analyst receives an alert from a web server that ...; Question 436: After a breach at a data processing center, an administrator...; Question 437: During a recent breach, employee credentials were compromise...; Question 438: Which of the following should a security operations center u...; Question 439: Which of the following best practices gives administrators a...; Question 440: A company is experiencing a web services outage on the publi...; Question 441: Which of the following is a TPM used for in cryptographic so...; Question 442: An organization experiences a suspected data breach that aff...; Question 443: Which of the following describes an agent-based application ...; Question 444: One of a company's vendors sent an analyst a security bullet...; Question 445: A company's web filter is configured to scan the URL for str...; Question 446: A company wants to reduce the time and expense associated wi...; Question 447: An organization purchased and configured spare devices for a...; Question 448: A security architect wants to prevent employees from receivi...; Question 449: Which of the following is a possible consequence of a VM esc...; Question 450: A systems administrator has overwritten all of the superviso...; Question 451: An organization is adopting cloud services at a rapid pace a...; Question 452: Which of the following is a benefit of following a change ma...; Question 453: A security engineer must deploy a sensor to actively monitor...; Question 454: A company wants to track modifications to the code that is u...; Question 455: Which of the following is used to protect a computer from vi...; Question 456: Which of the following security concepts ensures that a send...; Question 457: A spoofed identity was detected for a digital certificate. W...; Question 458: Which of the following best describes the risk present after...; Question 459: Client files can only be accessed by employees who need to k...; Question 460: An administrator is reviewing a single server's security log...; Question 461: A website user is locked out of an account after clicking an...; Question 462: Which of the following provides resilience by hosting critic...; Question 463: The board of a company needs to tell the leadership team whi...; Question 464: A security analyst identifies an employee who added an unaut...; Question 465: An administrator finds that all user workstations and server...; Question 466: The local administrator account for a company's VPN applianc...; Question 467: A security analyst discovers an application written in C tha...; Question 468: An architect has a request to increase the speed of data tra...; Question 469: A company performs a vulnerability assessment and gets the f...; Question 470: Which of the following exercises should an organization use ...; Question 471: Scans of new servers created from a community image show an ...; Question 472: Which of the following is the best reason to complete an aud...; Question 473: A company is adding a clause to its AUP that states employee...; Question 474: An accounting clerk sent money to an attacker's bank account...; Question 475: A company wants to protect a specialized legacy platform tha...; Question 476: A security analyst regularly receives emails from users who ...; Question 477: A security team wants to work with the same organization's d...; Question 478: An organization wants a third-party vendor to do a penetrati...; Question 479: A security administrator's supervisor wants their credential...; Question 480: Which of the following best describes the concept of informa...; Question 481: A security analyst collects IoCs from a cybersecurity bullet...; Question 482: Which of the following describes a security alerting and mon...; Question 483: Which of the following is the most likely benefit of conduct...; Question 484: Which of the following strategies should an organization use...; Question 485: Which of the following is the primary reason why false negat...; Question 486: Which of the following would best ensure a controlled versio...; Question 487: Which of the following organizational documents is most ofte...; Question 488: Employees in the research and development business unit rece...; Question 489: An energy provider identifies a critical vulnerability in a ...; Question 490: A company is considering an expansion of access controls for...; Question 491: An engineer moved to another team and is unable to access th...; Question 492: Which of the following is a feature of a next-generation SIE...; Question 493: A company is expanding its threat surface program and allowi...; Question 494: An attacker used XSS to compromise a web server. Which of th...; Question 495: A client demands at least 99.99% uptime from a service provi...; Question 496: Which of the following vulnerabilities would a nation-state ...; Question 497: An administrator is installing an SSL certificate on a new s...; Question 498: Which of the following best describes why a company would er...; Question 499: A network team segmented a critical, end-of-life server to a...; Question 500: An audit reveals that cardholder database logs are exposing ...; Question 501: Which of the following can be used to mitigate attacks from ...; Question 502: Which of the following will prevent an attack on a corporate...; Question 503: A security analyst investigates abnormal outbound traffic fr...; Question 504: A technician is deploying a new security camera. Which of th...; Question 505: Which of the following will best provide consistent power to...; Question 506: A penetration tester begins an engagement by performing port...; Question 507: An administrator must authenticate users to systems using cr...; Question 508: Which of the following is the best reason an organization sh...; Question 509: Which of the following topics would most likely be included ...; Question 510: A security analyst recently read a report about a flaw in se...; Question 511: A cyber operations team informs a security analyst about a n...; Question 512: Which of the following best summarizes the reason for an AUP...; Question 513: During the investigation of a webmail log-in using compromis...; Question 514: Which of the following is a common, passive reconnaissance t...; Question 515: An organization's primary site is located in an area that ex...; Question 516: Visitors to a secured facility are required to check in with...; Question 517: A penetration tester enters an office building at the same t...; Question 518: Which of the following is a social engineering attack in whi...; Question 519: Which of the following best describes a social engineering a...; Question 520: Which of the following control types is AUP an example of?...; Question 521: A security analyst is reviewing the source code of an applic...; Question 522: The physical security team at a company receives reports tha...; Question 523: A security consultant needs secure, remote access to a clien...; Question 524: Alerts from email protection systems and MSSPs must be enter...; Question 525: Which of the following is a reason environmental variables a...; Question 526: Which of the following is a strategy to protect stored passw...; Question 527: A company's gate access logs show multiple entries from an e...; Question 528: Security controls in a data center are being reviewed to ens...; Question 529: Which of the following security concepts is accomplished wit...; Question 530: An administrator needs to ensure all emails sent and receive...; Question 531: A company captures log-in details and reviews them each week...; Question 532: A security officer observes that a software development team...; Question 533: Which of the following vulnerabilities is exploited when an ...; Question 534: During an annual review of the system design, an engineer id...; Question 535: An administrator needs to perform server hardening before de...; Question 536: Which of the following best describes a threat actor who can...; Question 537: A security administrator is working to find a cost-effective...; Question 538: A healthcare organization wants to provide a web application...; Question 539: A company is redesigning its infrastructure and wants to red...; Question 540: A recent power outage halted operations at a company's only ...; Question 541: The Chief Information Security Officer (CISO) has determined...; Question 542: A security team is addressing a risk associated with the att...; Question 543: A user is attempting to patch a critical system, but the pat...; Question 544: Which of the following is a prerequisite for a DLP solution?...; Question 545: Which of the following options will provide the lowest RTO a...; Question 546: An administrator has configured a quarantine subnet for all ...; Question 547: A company wants to verify that the software the company is d...; Question 548: An organization experiences data loss after several employee...; Question 549: Which of the following solutions would most likely be used i...; Question 550: A group of people is working together to run multiple ransom...; Question 551: A company uses a cloud-based server for file storage and wan...; Question 552: Which of the following examples would be best mitigated by i...; Question 553: Which of the following data types relates to data sovereignt...; Question 554: While a user reviews their email, a host gets infected by ma...; Question 555: A company prevented direct access from the database administ...; Question 556: Users report that certain processes from a batch job are not...; Question 557: Which of the following is the stage in an investigating when...; Question 558: Which of the following definitions best describes the concep...; Question 559: Which of the following is considered a preventive control?...; Question 560: Which of the following is used to monitor suspicious traffic...; Question 561: Which of the following elements of digital forensics should ...; Question 562: A security engineer is installing an IPS to block signature-...; Question 563: In order to maintain system stability, a company's software ...; Question 564: A company is experiencing issues with employees leaving the ...; Question 565: A company's accounts payable clerk receives a message from a...; Question 566: A company decides to purchase an insurance policy. Which of ...; Question 567: Which of the following is used to quantitatively measure the...

Question 299/567

LEAVE A REPLY

Download PDF File