SYS 501 – Kenan| 168 QUESTIONS| WITH COMPLETE SOLUTIONS

Which of of the following BEST describes an important security advantages yielded by implementing vendor diversity? CORRECT ANSWERS: Resiliency A botnet has hit a popular website with a massive number of GRE-encapsulated packets to perform a DDoS attack. News outlets discover a certain type of refrigerator was exploited and used to send outbound packets to the website that crashed. To which of the following categories does the refrigerator belong? CORRECT ANSWERS: IoT In a corporation where compute utilization spikes several times a year, the Chief Information Officer (CIO) has requested a cost-effective architecture to handle the variable capacity demand. Which of the following characteristics BEST describes what the CIP has requested? CORRECT ANSWERS: Elasticity A security analyst accesses corporate web pages and inputs random data in the forms. The response received includes the type of database used and SQL commands that the database accepts. Which of the following should the security analyst use to prevent this vulnerability? CORRECT ANSWERS: Input validation A company is developing a new secure technology and requires computers being used for development to be isolated. Which of the following should be implemented to provide the MOST secure environment? CORRECT ANSWERS: An air gapped computer network Which of the following types of cloud infrastructures would allow several organizations with similar structures and interests to realize the benefits of shared storage and resources? CORRECT ANSWERS: Community Which of the following BEST describes a routine in which semicolons, dashes, quotes, and commas are removed from a string? CORRECT ANSWERS: Input validation to protect against SQL injection A security consultant discovers that an organization is using the PCL protocol to print documents, utilizing the default driver and print settings. Which of the following is the MOST likely risk in this situation? CORRECT ANSWERS: An MITM attack can reveal sensitive information. A network administrator wants to implement a method of securing internal routing. Which of the following should the administrator implement? CORRECT ANSWERS: VPN An organization is comparing and contrasting migration from its standard desktop configuration to the newest version of the platform. Before this can happen, the Chief Information Security Officer (CISO) voices the need to evaluate the functionality of the newer desktop platform to ensure interoperability with existing software in use by the organization. In which of the following principles of architecture and design is the CISO engaging? C