Exam (elaborations)
CERTMASTER CE SECURITY
- Course
- Institution
CERTMASTER CE SECURITY
[Show more]
Seller
Follow
Content preview
vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvCERTMASTER CE SECURITY+ DOMAIN
4.0 SECURITY OPERATIONS
vThe vchief vinformation vofficer v(CIO) vwants vto vexpand vthe vcompany's vability vto
vaccurately videntify vvulnerabilities vacross vthe vcompany. vThe vCIO vwants vto vbe
vable vto vscan vclient vPCs, vmobile vdevices, vservers, vrouters, vand vswitches. vWhat
vtype vof vscanner vare vthey vlooking vto vinstitute? v- vcorrect vanswers-A. vNetwork
vvulnerability vscanner
A vfinancial vservices vcompany vis vdecommissioning vmany vservers vthat vcontain
vhighly vsensitive vfinancial vinformation. vThe vcompany's vdata vprotection vpolicy
vstipulates vthe vneed vto vuse vthe vmost vsecure vdata vdestruction vmethods vand
vcomply vwith vstrict vregulatory vrequirements. vThe vcompany valso vhas va vsignificant
venvironmental vsustainability vcommitment vand vseeks vto vminimize vwaste vwherever
vpossible. vWhat vshould vthe vcompany's vprimary vcourse vof vaction vbe vduring vthis
vprocess? v- vcorrect vanswers-D. vDegaussing vthe vservers, vrendering vthe vdata
virretrievable, vfollowed vby vreselling vor vrecycling vthe vservers vafter vcertification
,vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
A vcyber vtechnician vpulls vlogs von vthe vnew vApple viMacs vto vensure vthe
vcompany's vemployees vadhere vto vthe vpolicy. vWhat vlog vcan vprovide vthe
vtechnician vwith vthe vcomputer's vattempted vlogins vor vdenial vwhen van vemployee
vattempts vto vaccess va vfile? v- vcorrect vanswers-B. vOperating vsystem-specific
vsecurity vlogs
A vlarge vmultinational vcompany vuses va vcloud-based vdocument vstorage vsystem.
vThe vsystem vprovides vaccess vto vdocuments vby vconsidering va vcombination vof
vfactors: vthe vuser's vdepartment, vgeographic vlocation, vthe vdocument's vsensitivity
vlevel, vand vthe vcurrent vdate vand vtime. vFor vexample, vonly vthe vfinance
vdepartment vof va vspecific vregion vcan vaccess vits vfinancial vreports, vand vthey vcan
vdo vso vonly vduring vbusiness vhours. vWhich vaccess vcontrol vmodel vdoes vthe
vcompany vMOST vlikely vuse vto vmanage vthis vcomplex vaccess vcontrol v- vcorrect
vanswers-C. vAttribute-based vaccess vcontrol
The vIT vteam vat va vmedium-sized vcompany vis vupgrading vits vwireless vnetwork
vsecurity vto vprotect vsensitive vdata vand vensure vsecure vcommunication vbetween
vdevices. vThey vhave vdecided vto vimplement vWi-Fi vProtected vAccess v3 v(WPA3).
vWhat vis vthe vprimary vpurpose vof vimplementing vWPA3 von vthe vcompany's
vwireless vnetwork? v- vcorrect vanswers-C v.To venhance vwireless vnetwork vsecurity
vwith vthe vlatest vencryption vstandards
A vsecurity vspecialist vis vdrafting va vmemorandum von vsecure vdata vdestruction vfor
vthe vorganization vafter va vrecent vbreach. vWhat vbenefit vdoes vthe vcertification
vconcept voffer vwhen vevaluating vappropriate vdisposal/decommissioning? v- vcorrect
vanswers-B. vIt vrefers vto vthe vdocumentation vand vverification vof vthe vdata
vsanitization vor vdestruction vprocess.
The vIT vsecurity vteam vat va vlarge vcompany vis vimplementing vmore vrobust
vauthentication vmeasures vto vsafeguard vsensitive vdata vand vsystems. vThe vteam vis
vexploring vmultifactor vauthentication v(MFA) voptions vto vbolster vsecurity. vThe
vcompany vdeals vwith vhighly vconfidential vinformation vand vrequires va vrobust
vsolution. vThe vteam vhas vnarrowed vthe vchoices vand vis vevaluating vwhich valigns
vBEST vwith vtheir vsecurity vneeds. vWhich vmulti-factor vauthentication vmethod
vutilizes vunique vphysical vcharacteristics vof vindividuals vto v- vcorrect vanswers-C.
vBiometrics
, vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
Following van vincident vin vwhich va vcompany's vincident vresponse vplan v(IRP)
vfailed, vthe vresponse vteam vmade vseveral vupdates vand vchanges vto vthe vIRP.
vThe vCEO vwants vto vtest vthe vIRP vwith va vrealistic vincident vthat vallows vfor
vhands-on vdemonstrations vwithout vengaging vin va vfull-blown vsimulation vand vthat
vdoesn't vrequire vextensive vinvestment vand vplanning. vWhich vIRP vexercise vis vthe
vBEST voption vfor vthis vcompany? v- vcorrect vanswers-D. vWalkthrough
A vtechnology vfirm's vnetwork vsecurity vspecialist vnotices va vsudden vincrease vin
vunidentified vactivities von vthe vfirm's vSecurity vEvent vand vIncident vManagement
v(SIEM) vincident vtracking vsystem. vAn vunknown ventity vor vprocess valso vincreases
vthe vnumber vof vreported vincidents. vThe vspecialist vdecides vto vinvestigate vthese
vincidents. vWhich vcombination vof vdata vsources vwould vprovide va vbalanced
vperspective vto vsupport vthe vinvestigation? v- vcorrect vanswers-B. vSystem-specific
vsecurity vlogs, vwhich vtrack vsystem-level voperations; vlogs vgenerated vby
vapplications vrunning von vhosts; vand vreal-time vreports vfrom vthe vSIEM vsolution,
vsummarizing vincidents.
A vproprietary vsoftware vremains vmission-critical vten vyears vafter vits vin-house
vcreation. vThe vsoftware vrequires van vexception vto vthe vrules vas vit vcannot vuse
vthe vlatest vin-use voperating vsystem v(OS) vversion. vHow vcan vthe vIT vdepartment
vprotect vthis vmission-critical vsoftware vand vreduce vits vexposure vfactor? v(Select
vthe vtwo vbest voptions.) v- vcorrect vanswers-A. vNetwork vsegmentation
C. vCompensating vcontrols
A vsystem vadministrator vhas vseen vrepeated vpositive vvulnerability vmessages vonly
vto vdiscover vthat vno vvulnerability vexists. vThe vvulnerability vmessages vrepeat vdaily
vfor vseveral vdays, vcausing vthe vsystem vadministrators vto vignore vthem. vWhat vcan
vthe vsystem vadministrator vdo vto vcombat vfalse vpositives? v(Select vthe vtwo vbest
voptions.) v- vcorrect vanswers-A. vReview vlogs
B. vUse vdifferent vscanners
A vglobal vfinancial vinstitution vwith va vvast vnetwork vof voffices vand vdata vcenters
vhas vfaced vincreasing vcybersecurity vthreats. vThe vorganization's vIT vteam vrealizes
vthat vprivileged vaccounts vare va vprime vtarget vfor vhackers, vand vmanually
vmanaging vthem vposes va vsignificant vrisk. vThe vcompany vimplemented va
vPrivileged vAccess vManagement v(PAM) vsolution vto vstrengthen vits vsecurity
vposture. vAs vpart vof vthe vimplementation, vthe vIT vteam vfocuses von vpassword
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller CATEJOHNS. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
78252 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now