<< Prev Question Next Question >>

Question 30/300

A Virtual Machine (VM) environment has five guest Operating Systems (OS) and provides strong isolation. What MUST an administrator review to audit a user's access to data files?

A. Guest OS access controls

B. Host VM monitor audit logs

C. Guest OS audit logs

D. Host VM access controls

Recent Comments (The most recent comments are at the top.)

John Snow - Jan 24, 2022

I don't think "B. Host VM monitor audit logs" is the correct answer. The question relates to the strong isolation and user-access logs should be stored in the Guest OS.

Question List (300q): Question 1: Which of the following would an internal technical security ...; Question 2: When network management is outsourced to third parties, whic...; Question 3: Logical access control programs are MOST effective when they...; Question 4: A mobile device application that restricts the storage of us...; Question 5: Which of the following management process allows ONLY those ...; Question 6: What is one way to mitigate the risk of security flaws in cu...; Question 7: Which one of the following operates at the session, transpor...; Question 8: A software scanner identifies a region within a binary image...; Question 9: Change management policies and procedures belong to which of...; Question 10: Which of the following is a limitation of the Common Vulnera...; Question 11: An organization has decided to contract with a cloud-based s...; 1 commentQuestion 12: What does a Synchronous (SYN) flood attack do?...; Question 13: Company A is evaluating new software to replace an in-house ...; Question 14: Which of the following is the BEST method to reduce the effe...; Question 15: Which of the following techniques is effective to detect tap...; 1 commentQuestion 16: Which of the following is considered the last line defense i...; Question 17: Match the name of access control model with its associated r...; Question 18: An Intrusion Detection System (IDS) is based on the general ...; Question 19: Which of the following is an attacker MOST likely to target ...; Question 20: Which of the following actions MUST be taken if a vulnerabil...; Question 21: Which of the following is a PRIMARY challenge when running a...; Question 22: A network scan found 50% of the systems with one or more cri...; Question 23: Which of the following are Systems Engineering Life Cycle (S...; Question 24: Application of which of the following Institute of Electrica...; Question 25: Which of the following threats exists with an implementation...; Question 26: A security professional determines that a number of outsourc...; Question 27: For an organization considering two-factor authentication fo...; Question 28: What testing technique enables the designer to develop mitig...; Question 29: What operations role is responsible for protecting the enter...; 1 commentQuestion 30: A Virtual Machine (VM) environment has five guest Operating ...; Question 31: Which of the following is the PRIMARY reason to perform regu...; Question 32: Which of the following is a strategy of grouping requirement...; Question 33: Which one of the following security mechanisms provides the ...; Question 34: Which of the following BEST describes how access to a system...; Question 35: Limiting the processor, memory, and Input/output (I/O) capab...; Question 36: Which of the following MUST be part of a contract to support...; Question 37: Which of the following is the MOST important consideration w...; Question 38: An input validation and exception handling vulnerability has...; Question 39: What technique used for spoofing the origin of an email can ...; Question 40: What type of attack sends Internet Control Message Protocol ...; Question 41: What is the BEST approach for maintaining ethics when a secu...; Question 42: Which of the following is MOST important when determining ap...; Question 43: Once the types of information have been identified, who shou...; Question 44: Which of the following is the FIRST action that a system adm...; Question 45: Which of the following is the MOST effective countermeasure ...; Question 46: The application of a security patch to a product previously ...; Question 47: The adoption of an enterprise-wide business continuity progr...; Question 48: When defining a set of security controls to mitigate a risk,...; Question 49: Which of the following is the MOST difficult to enforce when...; Question 50: Which of the following is the MAIN goal of a data retention ...; Question 51: Refer to the information below to answer the question. A new...; Question 52: Why are mobile devices something difficult to investigate in...; Question 53: Which of the following is the key requirement for test resul...; Question 54: What is the purpose of an Internet Protocol (IP) spoofing at...; Question 55: Individual access to a network is BEST determined based on...; Question 56: A company whose Information Technology (IT) services are bei...; Question 57: When deploying en Intrusion Detection System (IDS) on a high...; Question 58: Which of the following is a characteristic of the initializa...; Question 59: Which of the following prevents improper aggregation of priv...; Question 60: Which is the second phase of public key Infrastructure (pk1)...; Question 61: Which of the following is the MAIN reason for using configur...; Question 62: How does an organization verify that an information system's...; Question 63: An Internet software application requires authentication bef...; Question 64: Which of the following secure startup mechanisms are PRIMARI...; Question 65: Which of the following BEST provides for non-repudiation od ...; Question 66: When designing on Occupent Emergency plan (OEP) for United s...; Question 67: Which security modes is MOST commonly used in a commercial e...; Question 68: What is the PRIMARY goal for using Domain Name System Securi...; Question 69: When conducting a forensic criminal investigation on a compu...; Question 70: Which of the following is MOST important when assigning owne...; Question 71: By carefully aligning the pins in the lock, which of the fol...; Question 72: Which of the following is a method of attacking internet (IP...; Question 73: When dealing with shared, privilaged accounts, especially th...; Question 74: What is the PRIMARY purpose of auditing, as it relates to th...; Question 75: What is the MOST common component of a vulnerability managem...; Question 76: When can a security program be considered effective?...; Question 77: Which layer handle packet fragmentation and reassembly in th...; Question 78: Which of the following is the MAIN reason that system re-cer...; Question 79: Which of the following is the MOST beneficial to review when...; Question 80: What is the correct order of steps in an information securit...; Question 81: Which of the following is the BEST method to assess the effe...; Question 82: What Is the FIRST step in establishing an information securi...; Question 83: Refer to the information below to answer the question. A new...; Question 84: Which of the following is used to detect steganography?...; Question 85: Which of the following is a security weakness in the evaluat...; Question 86: Which of the following actions will reduce risk to a laptop ...; Question 87: Which of the following is the PRIMARY issue when analyzing d...; Question 88: An organization allows ping traffic into and out of their ne...; Question 89: Which of the following is the MOST important consideration w...; Question 90: Which of the following is the MOST effective practice in man...; Question 91: Which of the following is the MOST significant benefit to im...; Question 92: Which of the following is the BEST technique to facilitate s...; Question 93: Refer to the information below to answer the question. A lar...; Question 94: Which of the following is the PRIMARY reason a sniffer opera...; Question 95: A Simple Power Analysis (SPA) attack against a device direct...; Question 96: Secure real-time transport protocol (SRTP) provides security...; Question 97: What is the best way for mutual authentication of devices be...; Question 98: Assessing a third party's risk by counting bugs in the code ...; Question 99: When planning a penetration test, the tester will be MOST in...; Question 100: Which security approach will BEST minimize Personally Identi...; Question 101: Which of the following is an appropriate source for test dat...; Question 102: What are the roles within a scrum methodoligy?...; Question 103: During an audit of system management, auditors find that the...; Question 104: An employee receives a promotion that entities them to acces...; Question 105: Which of the following is an essential step before performin...; Question 106: What does the Maximum Tolerable Downtime (MTD) determine?...; Question 107: Discretionary Access Control (DAC) restricts access accordin...; Question 108: As part of the security assessment plan, the security profes...; Question 109: Which of the following is applicable to a publicly held comp...; Question 110: What does an organization FIRST review to assure compliance ...; Question 111: Refer to the information below to answer the question. An or...; Question 112: An employee of a retail company has been granted an extended...; Question 113: Organization A is adding a large collection of confidential ...; Question 114: An organization is designing a large enterprise-wide documen...; Question 115: Given the various means to protect physical and logical asse...; Question 116: What is the MOST efficient way to secure a production progra...; Question 117: What is the BEST approach for controlling access to highly s...; Question 118: To prevent inadvertent disclosure of restricted information,...; Question 119: An organization has hired a security services firm to conduc...; Question 120: What is the MAIN reason for testing a Disaster Recovery Plan...; Question 121: In a basic SYN flood attack, what is the attacker attempting...; Question 122: Due to system constraints, a group of system administrators ...; Question 123: A security analyst for a large financial institution is revi...; Question 124: Drag the following Security Engineering terms on the left to...; Question 125: Which of the following is the PRIMARY security consideration...; Question 126: Which of the following could be considered the MOST signific...; Question 127: A financial company has decided to move its main business ap...; Question 128: Two companies wish to share electronic inventory and purchas...; Question 129: Which of the following is MOST critical in a contract in a c...; Question 130: Refer to the information below to answer the question. A lar...; Question 131: What is the FIRST step required in establishing a records re...; Question 132: Which of the following is the BEST Identity-as-a-Service (ID...; Question 133: Functional security testing is MOST critical during which ph...; Question 134: A company receives an email threat informing of an Imminent ...; Question 135: Which of the following is critical if an employee is dismiss...; Question 136: Which of the following command line tools can be used in the...; Question 137: Which of the following BEST describes the standard used to e...; Question 138: A continuous information security monitoring program can BES...; Question 139: Which of the following is BEST achieved through the use of e...; Question 140: When is security personnel involvement in the Systems Develo...; Question 141: Which of the following is the MOST important reason for time...; Question 142: During an audit, the auditor finds evidence of potentially i...; Question 143: An international medical organization with headquarters in t...; Question 144: What is the ultimate objective of information classification...; Question 145: Which of the following is an important requirement when desi...; Question 146: When building a data classification scheme, which of the fol...; Question 147: What should be the INITIAL response to Intrusion Detection S...; Question 148: Which of the following is the weakest form of protection for...; Question 149: From a security perspective, which of the following assumpti...; Question 150: A security architect is responsible for the protection of a ...; Question 151: The PRIMARY security concern for handheld devices is the...; Question 152: Which of the following is the MOST efficient mechanism to ac...; Question 153: During the risk assessment phase of the project the CISO dis...; Question 154: When implementing a data classification program, why is it i...; Question 155: Alternate encoding such as hexadecimal representations is MO...; Question 156: What is the MOST important purpose of testing the Disaster R...; Question 157: Which of the following MUST be scalable to address security ...; Question 158: Why must all users be positively identified prior to using m...; Question 159: The process of mutual authentication involves a computer sys...; Question 160: Which of the following roles has the obligation to ensure th...; Question 161: Which of the following is the FIRST step during digital iden...; Question 162: Refer to the information below to answer the question. A new...; Question 163: Which of the following activities is MOST likely to be perfo...; Question 164: When implementing controls in a heterogeneous end-point netw...; Question 165: Rank the Hypertext Transfer protocol (HTTP) authentication t...; Question 166: Which of the following methods MOST efficiently manages user...; Question 167: The security team has been tasked with performing an interfa...; Question 168: Which of the following encryption types is used in Hash Mess...; Question 169: Which of the following is the GREATEST security risk associa...; Question 170: In order for a security policy to be effective within an org...; Question 171: When is a Business Continuity Plan (BCP) considered to be va...; Question 172: Which of the following methods provides the MOST protection ...; Question 173: What type of test assesses a Disaster Recovery (DR) plan usi...; Question 174: Which of the following BEST describes an access control meth...; Question 175: A large bank deploys hardware tokens to all customers that u...; Question 176: What is the difference between media marking and media label...; Question 177: Which security architecture strategy could be applied to sec...; Question 178: What should an auditor do when conducting a periodic audit o...; Question 179: Which of the following needs to be included in order for Hig...; Question 180: Which of the following is the BEST approach for a forensic e...; Question 181: What is an effective practice when returning electronic stor...; Question 182: When transmitting information over public networks, the deci...; Question 183: Which of the following types of business continuity tests in...; Question 184: Which of the following controls is the most for a system ide...; Question 185: Drag the following Security Engineering terms on the left to...; Question 186: Which of the following is the PRIMARY consideration when det...; Question 187: An organization's information security strategic plan MUST b...; Question 188: A health care provider is considering Internet access for th...; Question 189: Which layer of the Open system Interconnect (OSI) model is r...; Question 190: A global organization wants to implement hardware tokens as ...; Question 191: Without proper signal protection, embedded systems may be pr...; Question 192: Which of the following is the MOST crucial for a successful ...; Question 193: Copyright provides protection for which of the following?...; Question 194: Which of the following is included in the Global System for ...; Question 195: The Structured Query Language (SQL) implements Discretionary...; Question 196: Reciprocal backup site agreements are considered to be...; Question 197: Which of the following System and Organization Controls (SOC...; Question 198: An organization is found lacking the ability to properly est...; Question 199: The PRIMARY purpose of a security awareness program is to...; Question 200: Which of the following will accomplish Multi-Factor Authenti...; Question 201: A large university needs to enable student access to univers...; Question 202: Which of the following disaster recovery test plans will be ...; Question 203: Refer to the information below to answer the question. In a ...; Question 204: Are companies legally required to report all data breaches?...; Question 205: A security consultant has been asked to research an organiza...; Question 206: Vulnerability scanners may allow for the administrator to as...; Question 207: Passive Infrared Sensors (PIR) used in a non-climate control...; Question 208: An organization implements a Remote Access Server (RAS). Onc...; Question 209: Which of the following provides the minimum set of privilege...; Question 210: The BEST method to mitigate the risk of a dictionary attack ...; Question 211: A security architect plans to reference a Mandatory Access C...; Question 212: Which of the following analyses is performed to protect info...; Question 213: Which one of the following is a common risk with network con...; Question 214: Refer to the information below to answer the question. An or...; Question 215: If compromised, which of the following would lead to the exp...; Question 216: Which of the following is the BEST way to protect against st...; Question 217: Which of the following is a common measure within a Local Ar...; Question 218: Which technology is a prerequisite for populating the cloud-...; Question 219: What is the process of removing sensitive data from a system...; Question 220: Which of the following is the MOST common method of memory p...; Question 221: Which of the following steps should be conducted during the ...; Question 222: Which Identity and Access Management (IAM) process can be us...; Question 223: What access control scheme uses fine-grained rules to specif...; Question 224: Refer to the information below to answer the question. A sec...; Question 225: Which of the following authorization standards is built to h...; Question 226: What is the PRIMARY goal of fault tolerance?...; Question 227: Which one of these risk factors would be the LEAST important...; Question 228: Which of the following is the PRIMARY security concern assoc...; Question 229: Which of the following is the PRIMARY reason for employing p...; Question 230: Which of the following is the BIGGEST weakness when using na...; Question 231: During which of the following processes is least privilege i...; Question 232: An Information Technology (IT) professional attends a cybers...; Question 233: A chemical plan wants to upgrade the Industrial Control Syst...; Question 234: When using Security Assertion markup language (SAML), it is ...; Question 235: A development operations team would like to start building n...; Question 236: A security professional is assessing the risk in an applicat...; Question 237: What does secure authentication with logging provide?...; Question 238: Network-based logging has which advantage over host-based lo...; Question 239: A database administrator is asked by a high-ranking member o...; Question 240: An organization has outsourced its financial transaction pro...; Question 241: Which of the following is a peor entity authentication metho...; Question 242: Single Sign-On (SSO) is PRIMARILY designed to address which ...; Question 243: Mandatory Access Controls (MAC) are based on:...; Question 244: Which of the following processes has the PRIMARY purpose of ...; Question 245: Determining outage costs caused by a disaster can BEST be me...; Question 246: Which of the following is the MOST appropriate action when r...; Question 247: Which of the following is true of Service Organization Contr...; Question 248: Which is the RECOMMENDED configuration mode for sensors for ...; Question 249: At a MINIMUM, audits of permissions to individual or group a...; Question 250: Data leakage of sensitive information is MOST often conceale...; Question 251: Which type of fire alarm system sensor is intended to detect...; Question 252: Which of the following is most helpful in applying the princ...; Question 253: How can lessons learned from business continuity training an...; Question 254: During a recent assessment an organization has discovered th...; Question 255: It is MOST important to perform which of the following to mi...; Question 256: What is the expected outcome of security awareness in suppor...; Question 257: A security practitioner is tasked with securing the organiza...; Question 258: What component of a web application that stores the session ...; Question 259: Which of the following is a responsibility of a data steward...; Question 260: Which of the following is an effective control in preventing...; Question 261: A disadvantage of an application filtering firewall is that ...; Question 262: Although code using a specific program language may not be s...; Question 263: Which of the following is used to support the of defense in ...; Question 264: Which of the following is the BEST network defense against u...; Question 265: For the purpose of classification, which of the following is...; Question 266: During examination of Internet history records, the followin...; Question 267: With data labeling, which of the following MUST be the key d...; Question 268: Information security metrics provide the GREATEST value tp m...; Question 269: What is the MOST effective method for gaining unauthorized a...; Question 270: Which of the following is a characteristic of convert securi...; Question 271: Which of the following is a reason to use manual patch insta...; Question 272: Which of the following findings would MOST likely indicate a...; Question 273: The organization would like to deploy an authorization mecha...; Question 274: Which open standard could l large corporation deploy for aut...; Question 275: Transport Layer Security (TLS) provides which of the followi...; Question 276: Which of the following is a PRIMARY benefit of using a forma...; Question 277: Refer to the information below to answer the question. An or...; Question 278: The 802.1x standard provides a framework for what?...; Question 279: An external attacker has compromised an organization's netwo...; Question 280: Which of the following MUST be in place to recognize a syste...; Question 281: Data remanence is the biggest threat in which of the followi...; Question 282: When in the Software Development Life Cycle (SDLC) MUST soft...; Question 283: When conducting a security assessment of access controls, wh...; Question 284: Which Web Services Security (WS-Security) specification nego...; Question 285: Which of the following initiates the systems recovery phase ...; Question 286: Which of the following steps is performed during the forensi...; Question 287: A large corporation is locking for a solution to automate ac...; Question 288: When should an application invoke re-authentication in addit...; Question 289: Which of the following are effective countermeasures against...; Question 290: Changes to a Trusted Computing Base (TCB) system that could ...; Question 291: Which one of the following affects the classification of dat...; Question 292: Which of the following is a remote access protocol that uses...; Question 293: From an asset security perspective, what is the BEST counter...; Question 294: When assessing an organization's security policy according t...; Question 295: What is the foundation of cryptographic functions?...; Question 296: Refer to the information below to answer the question. A sec...; Question 297: During the Security Assessment and Authorization process, wh...; Question 298: The BEST way to check for good security programming practice...; Question 299: Which type of control recognizes that a transaction amount i...; Question 300: The overall goal of a penetration test is to determine a sys...

Question 30/300

Recent Comments (The most recent comments are at the top.)

LEAVE A REPLY

Download PDF File