EVALUATING INCIDENT RESPONSE
OPERATIONS AND DEFENDING NETWORK
SECURITY COMPREHENSIVE EXAM STUDY
GUIDE COMPLETE QUESTIONS AND
SOLUTIONS
●● After finding some of the company's confidential data on the
internet, a software team is drafting a policy on vulnerability response
and remediation. What remediation practice refers to measures put in
place to mitigate the risk of a vulnerability when the team cannot
directly eliminate it?
Answer: Compensating controls
●● In a medium-sized company, the IT security team is enhancing
security measures by implementing Privileged Access Management
(PAM) tools. The team is considering the adoption of just-in-time (JIT)
permissions as part of their strategy. How do JIT permissions support the
objectives of PAM tools?
Answer: JIT permissions reduce unauthorized access risk by granting
temporary access only when necessary.
●● A large multinational company uses a cloud-based document storage
system. The system provides access to documents by considering a
combination of factors: the user's department, geographic location, the
document's sensitivity level, and the current date and time. What access
,control technique evaluates a set of attributes that each subject possesses
to determine if access should be granted?
Answer: C.Attribute-based access control
●● The network administrator of a small business needs to enhance the
security of the business's wireless network. The primary goal is to
implement Wi-Fi Protected Access 3 (WPA3) as the main security
measure but recognize the need to adjust other wireless security settings
to effectively complement WPA3 and create a robust network for all
employees to access critical company resources securely. Currently, the
Wi-Fi signal is strong across the company's footprint. What
considerations should the network administrator consider when
implementing WPA3 and adjusting wireless security settings? (Select the
two best options.)
Answer: C. Understanding best practices for implementing WPA3
security features
D.Adjusting signal strength to minimize interference from neighboring
networks (Wrong Answer)
●● A company has added several new assets and software to its system
and is meeting to review its risk matrix. It wants to ensure risk
management efforts focus on vulnerabilities most likely impacting its
operations significantly. What is this commonly referred to as?
Answer: Prioritization
, ●● A regional bank is facing increased cyber threats and is concerned
about the security of its servers. As a security analyst, you have been
asked to provide a recommendation designed to improve the security of
the servers while maintaining full operation. Which of the following
options is the MOST effective?
Answer: Implement a secure baseline, consistently apply updates and
patches, and adhere to hardening guidelines.
●● The security team wants to improve data access controls via rule-
based and time-of-day restrictions. How can rule-based access controls
and time-of-day restrictions improve data access controls? (Select the
two best options.)
Answer: To define specific access rules based on employees' roles and
responsibilities
To restrict access to critical systems during non-working hours to
enhance security
●● A cyber group is reviewing its web filtering capabilities after a recent
breach. Which centralized web-filtering technique groups websites into
categories such as social networking, gambling, and webmail?
Answer: B.Content categorization
●● A security administrator reviews the configuration of a newly
implemented Security Information and Event Management (SIEM)
system. The SIEM system collects and correlates data from various
OPERATIONS AND DEFENDING NETWORK
SECURITY COMPREHENSIVE EXAM STUDY
GUIDE COMPLETE QUESTIONS AND
SOLUTIONS
●● After finding some of the company's confidential data on the
internet, a software team is drafting a policy on vulnerability response
and remediation. What remediation practice refers to measures put in
place to mitigate the risk of a vulnerability when the team cannot
directly eliminate it?
Answer: Compensating controls
●● In a medium-sized company, the IT security team is enhancing
security measures by implementing Privileged Access Management
(PAM) tools. The team is considering the adoption of just-in-time (JIT)
permissions as part of their strategy. How do JIT permissions support the
objectives of PAM tools?
Answer: JIT permissions reduce unauthorized access risk by granting
temporary access only when necessary.
●● A large multinational company uses a cloud-based document storage
system. The system provides access to documents by considering a
combination of factors: the user's department, geographic location, the
document's sensitivity level, and the current date and time. What access
,control technique evaluates a set of attributes that each subject possesses
to determine if access should be granted?
Answer: C.Attribute-based access control
●● The network administrator of a small business needs to enhance the
security of the business's wireless network. The primary goal is to
implement Wi-Fi Protected Access 3 (WPA3) as the main security
measure but recognize the need to adjust other wireless security settings
to effectively complement WPA3 and create a robust network for all
employees to access critical company resources securely. Currently, the
Wi-Fi signal is strong across the company's footprint. What
considerations should the network administrator consider when
implementing WPA3 and adjusting wireless security settings? (Select the
two best options.)
Answer: C. Understanding best practices for implementing WPA3
security features
D.Adjusting signal strength to minimize interference from neighboring
networks (Wrong Answer)
●● A company has added several new assets and software to its system
and is meeting to review its risk matrix. It wants to ensure risk
management efforts focus on vulnerabilities most likely impacting its
operations significantly. What is this commonly referred to as?
Answer: Prioritization
, ●● A regional bank is facing increased cyber threats and is concerned
about the security of its servers. As a security analyst, you have been
asked to provide a recommendation designed to improve the security of
the servers while maintaining full operation. Which of the following
options is the MOST effective?
Answer: Implement a secure baseline, consistently apply updates and
patches, and adhere to hardening guidelines.
●● The security team wants to improve data access controls via rule-
based and time-of-day restrictions. How can rule-based access controls
and time-of-day restrictions improve data access controls? (Select the
two best options.)
Answer: To define specific access rules based on employees' roles and
responsibilities
To restrict access to critical systems during non-working hours to
enhance security
●● A cyber group is reviewing its web filtering capabilities after a recent
breach. Which centralized web-filtering technique groups websites into
categories such as social networking, gambling, and webmail?
Answer: B.Content categorization
●● A security administrator reviews the configuration of a newly
implemented Security Information and Event Management (SIEM)
system. The SIEM system collects and correlates data from various
