<< Prev Question Next Question >>

Question 290/407

A systems administrator is looking for a low-cost application-hosting solution that is cloud-based. Which of the following meets these requirements?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (407q)
Question 1: Which of the following is a vulnerability concern for end-of...
Question 2: After a recent ransomware attack on a company's system, an a...
Question 3: An employee receives a text message that appears to have bee...
Question 4: Which of the following is an example of memory injection?...
Question 5: The Chief Information Security Officer (CISO) has determined...
Question 6: Which of the following is best used to detect fraud by assig...
Question 7: Which of the following should be used to prevent changes to ...
Question 8: Which of the following data types best describes an AI tool ...
Question 9: A company plans to secure its systems by: Preventing users f...
Question 10: Which of the following agreements defines response time, esc...
Question 11: While a user reviews their email, a host gets infected by ma...
Question 12: A security analyst developed a script to automate a trivial ...
Question 13: Which of the following vulnerabilities is associated with in...
Question 14: A security analyst collects IOCs from a cybersecurity bullet...
Question 15: A security analyst is reviewing logs to identify the destina...
Question 16: An organization maintains intellectual property that it want...
Question 17: An organization conducts a self-evaluation with a phishing c...
Question 18: Visitors to a secured facility are required to check in with...
Question 19: Which of the following teams combines both offensive and def...
Question 20: A security engineer receives reports of unauthorized devices...
Question 21: Which of the following would be the best ways to ensure only...
Question 22: An IT security team is concerned about the confidentiality o...
Question 23: An administrator discovers a cross-site scripting vulnerabil...
Question 24: The security team notices that the Always On VPN solution so...
Question 25: Which of the following can be used to mitigate attacks from ...
Question 26: A legal department must maintain a backup from all devices t...
Question 27: Which of the following activities is included in the post-in...
Question 28: Which of the following describes how a risk event might affe...
Question 29: During an investigation, an incident response team attempts ...
Question 30: During a SQL update of a database, a temporary field used as...
Question 31: Which of the following should be used to aggregate log data ...
Question 32: Which of the following is a qualitative approach to risk ana...
Question 33: An organization wants a third-party vendor to do a penetrati...
Question 34: Which of the following is the most likely outcome if a large...
Question 35: Which of the following cryptographic solutions protects data...
Question 36: An enterprise is trying to limit outbound DNS traffic origin...
Question 37: An engineer has ensured that the switches are using the late...
Question 38: Which of the following is the stage in an investigation when...
Question 39: A penetration tester begins an engagement by performing port...
Question 40: For which of the following reasons would a systems administr...
Question 41: A security administrator is implementing encryption on all h...
Question 42: SIMULATION A recent black-box penetration test of http://exa...
Question 43: A company is considering an expansion of access controls for...
Question 44: An administrator must replace an expired SSL certificate. Wh...
Question 45: Which of the following roles, according to the shared respon...
Question 46: Which of the following prevents unauthorized modifications t...
Question 47: A security analyst is monitoring logs from the organization'...
Question 48: Which of the following best describes the concept of informa...
Question 49: A company relies on open-source software libraries to build ...
Question 50: A U.S.-based cloud-hosting provider wants to expand its data...
Question 51: A company's Chief Information Security Officer (CISO) wants ...
Question 52: Which of the following best practices gives administrators a...
Question 53: A company is considering an expansion of access controls for...
Question 54: Which of the following best describes a common use of OSINT?...
Question 55: An IT team rolls out a new management application that uses ...
Question 56: A financial institution would like to store its customer dat...
Question 57: Which of the following is an example of a certificate that i...
Question 58: A penetration tester must conduct a vulnerability assessment...
Question 59: A security administrator needs to protect the integrity of a...
Question 60: Which of the following threat actors is the most likely to u...
Question 61: An administrator wants to automate an account permissions up...
Question 62: Which of the following is a social engineering attack in whi...
Question 63: A security analyst discovers that a large number of employee...
Question 64: An analyst identifies that multiple users have the same pass...
Question 65: Which of the following is a prerequisite for a DLP solution?...
Question 66: A company asks a vendor to help its internal red team with a...
Question 67: A security analyst receives alerts about an internal system ...
Question 68: Which of the following is a common source of unintentional c...
Question 69: An attacker floods an organization's VoIP phone system with ...
Question 70: Which of the following would be best suited for constantly c...
Question 71: An administrator discovers that some files on a database ser...
Question 72: Which of the following security concepts is the best reason ...
Question 73: A security team receives reports about high latency and comp...
Question 74: A company is developing a critical system for the government...
Question 75: A company is in the process of migrating to cloud-based serv...
Question 76: An administrator must implement a solution that provides sec...
Question 77: Which of the following best distinguishes hacktivists from i...
Question 78: A security analyst must prevent remote users from accessing ...
Question 79: A security engineer configured a remote access VPN. The remo...
Question 80: A malicious insider from the marketing team alters records a...
Question 81: A Chief Security Officer signs off on a request to allow inb...
Question 82: Which of the following objectives is best achieved by a tabl...
Question 83: A security analyst is prioritizing vulnerability scan result...
Question 84: Which of the following risk management strategies should an ...
Question 85: A software developer released a new application and is distr...
Question 86: An analyst discovers a suspicious item in the SQL server log...
Question 87: A company is aware of a given security risk related to a spe...
Question 88: Which of the following aspects of the data management life c...
Question 89: A healthcare organization wants to provide a web application...
Question 90: A bank set up a new server that contains customers' Pll. Whi...
Question 91: An accounting clerk sent money to an attacker's bank account...
Question 92: An administrator has identified and fingerprinted specific f...
Question 93: Which of the following cryptographic methods is preferred fo...
Question 94: A new security regulation was announced that will take effec...
Question 95: Which of the following should be used to ensure an attacker ...
Question 96: A security analyst wants to better understand the behavior o...
Question 97: Various company stakeholders meet to discuss roles and respo...
Question 98: The Cruel Information Security Officer (CISO) asks a securit...
Question 99: A company decided to reduce the cost of its annual cyber ins...
Question 100: You are security administrator investigating a potential inf...
Question 101: A company uses multiple providers to send its marketing, int...
Question 102: A company discovers suspicious transactions that were entere...
Question 103: Which of the following best describes the practice of preser...
Question 104: A company needs to provide administrative access to internal...
Question 105: Which of the following could potentially be introduced at th...
Question 106: An organization wants to deploy software in a container envi...
Question 107: According to various privacy rules and regulations, users ha...
Question 108: Which of the following uses proprietary controls and is desi...
Question 109: After multiple phishing simul-ations, the Chief Security Off...
Question 110: A security administrator observed the following in a web ser...
Question 111: A security analyst finds a rogue device during a monthly aud...
Question 112: During a recent company safety stand-down, the cyber-awarene...
Question 113: Which of the following strategies most effectively protects ...
Question 114: A company processes a large volume of business-to-business t...
Question 115: A company's end users are reporting that they are unable to ...
Question 116: After multiple phishing simulations, the Chief Security Offi...
Question 117: A newly appointed board member with cybersecurity knowledge ...
Question 118: Which of the following are the most important considerations...
Question 119: A user downloads a patch from an unknown repository... FIM a...
Question 120: A systems administrator is working on a solution with the fo...
Question 121: Which of the following vulnerabilities is exploited when an ...
Question 122: A technician is opening ports on a firewall for a new system...
Question 123: The local administrator account for a company's VPN applianc...
Question 124: An administrator was notified that a user logged in remotely...
Question 125: A security team identifies a vulnerability in an application...
Question 126: An end-of-service server cannot be patched, but it still per...
Question 127: A company experiences a data loss event due to a stolen lapt...
Question 128: An organization is leveraging a VPN between its headquarters...
Question 129: A security analyst reviews domain activity logs and notices ...
Question 130: Which of the following describes effective change management...
Question 131: Which of the following is used to add extra complexity befor...
Question 132: An organization experiences a compromise in a cloud-hosted s...
Question 133: Which of the following metrics are used to calculate the ris...
Question 134: In order to strengthen a password and prevent a hacker from ...
Question 135: A company installed cameras and added signs to alert visitor...
Question 136: Which of the following is a risk of conducting a vulnerabili...
Question 137: A Chief Information Security Officer would like to conduct f...
Question 138: During a penetration test, a vendor attempts to enter an una...
Question 139: A security analyst locates a potentially malicious video fil...
Question 140: Which of the following methods to secure credit card data is...
Question 141: An unexpected and out-of-character email message from a Chie...
Question 142: Which of the following security concepts is being followed w...
Question 143: An organization is developing a security program that convey...
Question 144: Which of the following best explains a concern with OS-based...
Question 145: A security analyst learns that an attack vector, used as par...
Question 146: Which of the following is most likely to be used as a just-i...
Question 147: Which of the following is the best way to securely store an ...
Question 148: Which of the following is most likely associated with introd...
Question 149: Which of the following should an organization focus on the m...
Question 150: A security analyst and the management team are reviewing the...
Question 151: An administrator investigating an incident is concerned abou...
Question 152: Which of the following security control types does an accept...
Question 153: An employee used a company's billing system to issue fraudul...
Question 154: Which of the following is the best reason to complete an aud...
Question 155: During a security incident, the security operations team ide...
Question 156: A smart lighting system is deployed in an office building. T...
Question 157: Which of the following is die most important security concer...
Question 158: Which of the following must be considered when designing a h...
Question 159: Which of the following risk management strategies is being u...
Question 160: A security technician determines that no additional patches ...
Question 161: An organization failed to account for the right-to-be-forgot...
Question 162: Which of the following actions best addresses a vulnerabilit...
Question 163: Which of the following methods will most likely be used to i...
Question 164: An employee emailed a new systems administrator a malicious ...
Question 165: An administrator needs to perform server hardening before de...
Question 166: A systems administrator is redesigning now devices will perf...
Question 167: A penetration tester was able to gain unauthorized access to...
Question 168: Which of the following tools can assist with detecting an em...
Question 169: Which of the following provides the details about the terms ...
Question 170: Various company stakeholders meet to discuss roles and respo...
Question 171: The management team notices that new accounts that are set u...
Question 172: An organization experiences a suspected data breach that aff...
Question 173: During a routine audit, an analyst discovers that a departme...
Question 174: A security analyst finds a rogue device during a monthly aud...
Question 175: Which of the following is an example of a data protection st...
Question 176: Which of the following is a reason environmental variables a...
Question 177: Select the appropriate attack and remediation from each drop...
Question 178: A security administrator wants to determine if the company's...
Question 179: A user needs to complete training at https://comptiatraining...
Question 180: A security analyst learns that an attack vector, which was u...
Question 181: A systems administrator discovers a system that is no longer...
Question 182: A government official receives a blank envelope containing p...
Question 183: Which of the following explains how organizations benefit fr...
Question 184: The Cyber Incident Response Team is reviewing an incident th...
Question 185: Which of the following architecture models ensures that crit...
Question 186: A systems administrator receives an alert that a company's i...
Question 187: Which of the following should be used to ensure that a new s...
Question 188: A company performs risk analysis on its equipment and estima...
Question 189: A security company informs its customers of a new vulnerabil...
Question 190: Which of the following would a systems administrator follow ...
Question 191: A security analyst reviews logs and finds a large number of ...
Question 192: A company expects its provider to ensure servers and network...
Question 193: Which of the following best explains how tokenization helps ...
Question 194: Which of the following allows for the attribution of message...
Question 195: The private key for a website was stolen, and a new certific...
Question 196: An organization has a new regulatory requirement to implemen...
Question 197: Which of the following should an organization use to protect...
Question 198: A new employee can select a particular make and model of an ...
Question 199: An organization would like to store customer data on a separ...
Question 200: A website user is locked out of an account after clicking an...
Question 201: Which of the following can automate vulnerability management...
Question 202: Which of the following best explains why an organization wou...
Question 203: Which of the following most securely protects data at rest?...
Question 204: Which of the following describes the reason root cause analy...
Question 205: A security consultant is working with a client that wants to...
Question 206: Which of the following exercises should an organization use ...
Question 207: A vendor needs to remotely and securely transfer files from ...
Question 208: Which of the following examples would be best mitigated by i...
Question 209: Which of the following control types describes an alert from...
Question 210: After failing an audit twice, an organization has been order...
Question 211: An organization plans to increase security controls for devi...
Question 212: Which of the following activities should a systems administr...
Question 213: Which of the following is the final step of the modem respon...
Question 214: Which of the following Is a common, passive reconnaissance t...
Question 215: A security analyst is creating base for the server team to f...
Question 216: A company processes personal data from customers in multiple...
Question 217: Which of the following should a systems administrator use to...
Question 218: Which of the following is used to validate a certificate whe...
Question 219: Which of the following strategies should an organization use...
Question 220: A security analyst receives an alert from a web server that ...
Question 221: A security team is setting up a new environment for hosting ...
Question 222: One of a company's vendors sent an analyst a security bullet...
Question 223: Which of the following is the most relevant reason a DPO wou...
Question 224: A staff member finds a USB drive in the office's parking lot...
Question 225: A company has a website in a server cluster. One server is e...
Question 226: A penetration tester visits a client's website and downloads...
Question 227: Which of the following are the best security controls for co...
Question 228: Which of the following is best prevented by adding input val...
Question 229: A security manager is implementing MFA and patch management....
Question 230: A company wants to track modifications to the code that is u...
Question 231: A growing company would like to enhance the ability of its s...
Question 232: An organization is required to provide assurance that its co...
Question 233: An external security assessment report indicates a high clic...
Question 234: An organization's internet-facing website was compromised wh...
Question 235: A systems administrator notices that the research and develo...
Question 236: Which of the following provides the best protection against ...
Question 237: Which of the following would enable a data center to remain ...
Question 238: A security officer is implementing a security awareness prog...
Question 239: An employee fell for a phishing scam, which allowed an attac...
Question 240: The executive management team is mandating the company devel...
Question 241: Which of the following data recovery strategies will result ...
Question 242: An organization wants to limit potential impact to its log-i...
Question 243: Which of the following types of identification methods can b...
Question 244: Alerts from email protection systems and MSSPs must be enter...
Question 245: Which of the following would most likely be deployed to obta...
Question 246: Which of the following security controls is a company implem...
Question 247: An organization has been experiencing issues with deleted ne...
Question 248: Which of the following practices would be best to prevent an...
Question 249: A security analyst scans a company's public network and disc...
Question 250: Which of the following best describe why a process would req...
Question 251: An accountant is transferring information to a bank over FTP...
Question 252: In which of the following will unencrypted PLC management tr...
Question 253: After reviewing the following vulnerability scanning report:...
Question 254: An employee decides to collect PII data from the company's s...
Question 255: The Chief Information Officer (CIO) asked a vendor to provid...
Question 256: A security report shows that during a two-week test period. ...
Question 257: Which solution is most likely used in the financial industry...
Question 258: A company is concerned about the theft of client data from d...
Question 259: Which of the following should a technician perform to verify...
Question 260: Which of the following will harden access to a new database ...
Question 261: Which of the following is the act of proving to a customer t...
Question 262: A security analyst created a fake account and saved the pass...
Question 263: A security administrator protects passwords by using hashing...
Question 264: A company is utilizing an offshore team to help support the ...
Question 265: A company is discarding a classified storage array and hires...
Question 266: Which of the following architectures is most suitable to pro...
Question 267: A business needs a recovery site but does not require immedi...
Question 268: After a security awareness training session, a user called t...
Question 269: Which of the following threat actors would most likely defac...
Question 270: Which vulnerability is most likely mitigated by setting up a...
Question 271: As part of new compliance audit requirements, multiple serve...
Question 272: A security analyst has determined that a security breach wou...
Question 273: The security operations center is researching an event conce...
Question 274: An organization disabled unneeded services and placed a fire...
Question 275: Which of the following alert types is the most likely to be ...
Question 276: A company wants to reduce the time and expense associated wi...
Question 277: A penetration test has demonstrated that domain administrato...
Question 278: A marketing team launches a new AI solution that trains on s...
Question 279: Which of the following describes the understanding between a...
Question 280: A service provider wants a cost-effective way to rapidly exp...
Question 281: Which of the following best protects sensitive data in trans...
Question 282: A security practitioner completes a vulnerability assessment...
Question 283: Sine a recent upgrade (o a WLAN infrastructure, several mobi...
Question 284: The Chief Information Security Officer of an organization ne...
Question 285: An organization is building a new backup data center with co...
Question 286: An external vendor recently visited a company's headquarters...
Question 287: Following a security review, an organization must ensure use...
Question 288: A security engineer is working to address the growing risks ...
Question 289: A company is adding a clause to its AUP that states employee...
Question 290: A systems administrator is looking for a low-cost applicatio...
Question 291: An important patch for a critical application has just been ...
Question 292: The Chief Information Security Officer (CISO) of a medium-si...
Question 293: Which of the following describes a situation where a user is...
Question 294: An administrator finds that all user workstations and server...
Question 295: Which of the following is an example of implementing Zero Tr...
Question 296: A customer of a large company receives a phone call from som...
Question 297: Which of the following should be used to ensure a device is ...
Question 298: Which of the following must be considered when designing a h...
Question 299: A company is concerned about weather events causing damage t...
Question 300: A recent penetration test identified that an attacker could ...
Question 301: An organization experiences a cybersecurity incident involvi...
Question 302: A security engineer needs to quickly identify a signature fr...
Question 303: Which of the following types of vulnerabilities involves att...
Question 304: A security analyst notices an increase in port scans on the ...
Question 305: Which of the following is the most likely motivation for a h...
Question 306: The management team reports employees are missing features o...
Question 307: A security analyst investigates abnormal outbound traffic fr...
Question 308: A cybersecurity incident response team at a large company re...
Question 309: A company wants to track modifications to the code used to b...
Question 310: An analyst wants to move data from production to the UAT ser...
Question 311: A network manager wants to protect the company's VPN by impl...
Question 312: An administrator is reviewing a single server's security log...
Question 313: Which of the following methods would most likely be used to ...
Question 314: A systems administrator set up a perimeter firewall but cont...
Question 315: Which of the following best explains the role of compensatin...
Question 316: A company purchased cyber insurance to address items listed ...
Question 317: A software developer wishes to implement an application secu...
Question 318: An enterprise security team is researching a new security ar...
Question 319: Which of the following is the best method to reduce the atta...
Question 320: Which of the following practices would be best to prevent an...
Question 321: An organization determines that tenured employees have retai...
Question 322: While reviewing logs, a security administrator identifies th...
Question 323: Which of the following most accurately describes the order i...
Question 324: Which of the following would be the greatest concern for a c...
Question 325: During a recent log review, an analyst found evidence of suc...
Question 326: A manufacturing organization receives the results from a pen...
Question 327: Malware spread across a company's network after an employee ...
Question 328: Which of the following should a security analyst consider wh...
Question 329: A newly identified network access vulnerability has been fou...
Question 330: During a routine audit, an analyst discovers that a departme...
Question 331: A security administrator wants to implement a security infor...
Question 332: Which of the following elements of digital forensics should ...
Question 333: Which of the following is used to protect a computer from vi...
Question 334: Which of the following is an example of memory injection?...
Question 335: An engineer needs to ensure that a script has not been modif...
Question 336: Which of the following can be used to compromise a system th...
Question 337: Which of the following allows an exploit to go undetected by...
Question 338: A software developer would like to ensure. The source code c...
Question 339: Which of the following best explains how open service ports ...
Question 340: A business provides long-term cold storage services to banks...
Question 341: Which of the following involves an attempt to take advantage...
Question 342: Which of the following is the main consideration when a lega...
Question 343: Which of the following is the first step to take when creati...
Question 344: A company decided to reduce the cost of its annual cyber ins...
Question 345: Users at a company are reporting they are unable to access t...
Question 346: Which of the following tools is best for logging and monitor...
Question 347: An engineer needs to find a solution that creates an added l...
Question 348: A security administrator needs to reduce the attack surface ...
Question 349: Which of the following phases of an incident response involv...
Question 350: Which of the following is a reason an organization should us...
Question 351: A company wants to use new Wi-Fi-enabled environmental senso...
Question 352: A network engineer is increasing the overall security of net...
Question 353: Which of the following best explains a core principle of a Z...
Question 354: Which of the following hardening techniques must be applied ...
Question 355: In an effort to reduce costs, a company is implementing a st...
Question 356: An organization issued new laptops to all employees and want...
Question 357: An organization needs to monitor its users' activities to pr...
Question 358: During a penetration test in a hypervisor, the security engi...
Question 359: A company deploys a new server that a client must be able to...
Question 360: A bank insists all of its vendors must prevent data loss on ...
Question 361: An employee clicked a malicious link in an email and downloa...
Question 362: The Chief Information Security Officer wants to discuss opti...
Question 363: After creating a contract for IT contractors, the human reso...
Question 364: A company is redesigning its infrastructure and wants to red...
Question 365: An administrator has configured a quarantine subnet for all ...
Question 366: Which of the following would be the most appropriate way to ...
Question 367: Which of the following would be the best way to handle a cri...
Question 368: An organization designs an inbound firewall with a fail-open...
Question 369: Which of the following should a security operations center u...
Question 370: Which of the following is a benefit of an RTO when conductin...
Question 371: Which of the following is the best way to improve the confid...
Question 372: A new employee logs in to the email system for the first tim...
Question 373: Which of the following is the best way to secure an on-site ...
Question 374: In a rush to meet an end-of-year business goal, the IT depar...
Question 375: A security analyst investigates an incident in which a Power...
Question 376: A company is expanding its threat surface program and allowi...
Question 377: Which of the following activities should be included as part...
Question 378: A penetration test identifies that an SMBvl Is enabled on mu...
Question 379: An attacker forces an internal company employee to inject ma...
Question 380: The security operations center is researching an event conce...
Question 381: Which of the following consequences would a retail chain mos...
Question 382: A small business uses kiosks on the sales floor to display p...
Question 383: After completing an annual external penetration test, a comp...
Question 384: Which of the following best represents how frequently an inc...
Question 385: A security operations center determines that the malicious a...
Question 386: Which of the following control types involves restricting IP...
Question 387: Which of the following is a primary security concern for a c...
Question 388: A company is implementing a policy to allow employees to use...
Question 389: A security analyst is investigating an application server an...
Question 390: A security team wants to work with the development team to e...
Question 391: Which of the following is an example of a false negative vul...
Question 392: Which of the following mitigation techniques would a securit...
Question 393: Which of the following describes a security alerting and mon...
Question 394: After an audit, an administrator discovers all users have ac...
Question 395: Which of the following tasks is typically included in the BI...
Question 396: Which of the following should a systems administrator use to...
Question 397: A program manager wants to ensure contract employees can onl...
Question 398: Which of the following best describes the purpose of using d...
Question 399: Which of the following is a directive managerial control?...
Question 400: A software development manager wants to ensure the authentic...
Question 401: Which of the following risk analysis attributes measures the...
Question 402: Which of the following agreement types defines the time fram...
Question 403: Which of the following should a security team do first befor...
Question 404: An office wants to install a Wi-Fi network. The security tea...
Question 405: A company prevented direct access from the database administ...
Question 406: A growing organization, which hosts an externally accessible...
Question 407: Which of the following is a preventive physical security con...