Dlp 1 5 - Study guides, Class notes & Summaries

Final Exam 1. Your company has an on-premises Microsoft Exchange Server 2016 organization. The organization is in the company's main office in Melbourne. The main office has a low-bandwidth connection to the Internet. The organization contains 250 mailboxes. You purchase a Microsoft 365 subscription and plan to migrate to Exchange Online next month. In 12 months, you plan to increase the bandwidth available for the Internet connection. You need to recommend the best migration strategy...

HBSS - used within the DOD to monitor, detect and counter known cyber threats to DOD computer networks and systems 1. ePO Server 2. McAfee Agent 3. HIPS 4. RSD 5. Policy Auditor 6. Asset Baseline Module (ABM) - 6 components of HBSS ePO Server - network security management console that integrates multiple security solutions through a single console/single agent Common Management Agent (CMA) - -controls all communication to and from the ePO server -receive policy updates and send notifi...

OJT Basic Handbook Section 1 correct answer: Introduction to HBSS OJT basic handbook section 9 correct answer: HIPS Host Intrusion Prevention System OJT Basic Handbook Section 11 correct answer: Firewalls OJT Basic Handbook Section 5 correct answer: McAfee Agent Management OJT Basic Handbook Section 7 correct answer: Manage ePO Policies OJT Basic Handbook Section 19 correct answer: DLP Host Data Loss Prevention OJT Advanced Handbook Section 4 correct answer: Troubleshoot...

What 2 things does DLM establish? - Answer- 1. Data handling 2.Employee roles and responsibilities What are the manners in which breach occurs? What percent does each account for? - Answer- 1. Negligent insider 34% 2. Outsourcing data to 3rd party 19% 3. Malicious insider 16% 4. Systems "glitch" 11% 5. Cyber attack 7% 6. Failure to shred documents 6% 3 types of Audits? - Answer- 1st Party - Internal 2nd Party - Supplier/Contractor 3rd Party - External How does a complaint han...

Security and Operations and Incident Response Exam 134 Questions with Verified Answers Eren needs to establish a tool that can let him see all of the systems that a given IP address connects to and how much data that IP received by port and protocol. Which is NOT a suitable tool for that need? A. NetFlow B. IPSec C. IPFIX D. sFlow - CORRECT ANSWER B. IPSec; IPSec is not used to capture network flows. A system that Mark takes responsibility for crashed and he guesses that a malware iss...

In the A.D. 400's and 500's, three Germanic tribes -- the Angles, the Saxons, and the jutes -- settled in England. correct answers1) capitalize Jutes The newcomers began to slowly drive out the native Britons, and by A.D. 600 they occupied nearly all of England. correct answersThe newcomers slowly began to drive out... In England, the Anglo Saxons established seven main kingdoms, who often fought between themselves. correct answersIn England, the Anglo-Saxon established seven main kingdo...

1. CND Services include Prepare; Protect and _________ -Respond 2. What action should be taken if an event is found to be a false positive? -Start the tuning process 3. Which product is responsible for collecting endpoint properties and policy enforcement? -McAfee HIPS (?) 4. What is the correct order for prioritizing events? -Severity; Action Taken; Volume 5. An admin creates ___________ to manage the software installed on the endpoint. -Policies 6. Which...

Three ways to control network traffic Packet filtering, stateful inspection, application firewall Packet filtering source & destination IP, port, protocol Stateful Inspection same as packet filtering but now looking at packet content Application FW Granular level filtering; inspects traffic through lower levels of TCP/IP module and up to the application layer SIC Secure internal communications - how gateways and mgmt servers authenticate one another to communi...

SY0 - 601 Exam Latest Questions with 100% Correct Answers | Pass in First Attempt Guaranteed 1 A company has limited storage available and online presence that cannot for more than four hours. Which of the following backup methodologies should the company implement to allow for the FASTEST database restore time In the event of a failure, which being maindful of the limited available storage space? - A). Implement fulltape backup every Sunday at 8:00 p.m and perform nightly tape rotatio...

(EU) MA - Answer-Market Authorization or product license issued by health authority. Valid for 5 years and subject to 1 renewal. 4 EU procedures to obtain an MA - Answer-National, centralised, mutual recognition, decentralized procedures MAH - Answer-A legal person or legal entity who must be established in the European Economic Area comprising of 28 member states. What does an MA include? - Answer-Active substance international non-proprietary name, trade name. SmPC - Answer-Summary...