SE
Security+ Domain
R
U
N
4.0 Security
L
EA
Operations
ID
, The chief information officer (CIO) wants to expand the company's ability to accurately identify
vulnerabilities across the company. The CIO wants to be able to scan client PCs, mobile
devices, servers, routers, and switches. What type of scanner are they looking to institute? -
ANSA. Network vulnerability scanner
A financial services company is decommissioning many servers that contain highly sensitive
financial information. The company's data protection policy stipulates the need to use the most
secure data destruction methods and comply with strict regulatory requirements. The company
also has a significant environmental sustainability commitment and seeks to minimize waste
SE
wherever possible. What should the company's primary course of action be during this process?
- ANSD. Degaussing the servers, rendering the data irretrievable, followed by reselling or
recycling the servers after certification
A cyber technician pulls logs on the new Apple iMacs to ensure the company's employees
R
adhere to the policy. What log can provide the technician with the computer's attempted logins
or denial when an employee attempts to access a file? - ANSB. Operating system-specific
security logs
U
A large multinational company uses a cloud-based document storage system. The system
provides access to documents by considering a combination of factors: the user's department,
N
geographic location, the document's sensitivity level, and the current date and time. For
example, only the finance department of a specific region can access its financial reports, and
they can do so only during business hours. Which access control model does the company
MOST likely use to manage this complex access control - ANSC. Attribute-based access
L
control
EA
The IT team at a medium-sized company is upgrading its wireless network security to protect
sensitive data and ensure secure communication between devices. They have decided to
implement Wi-Fi Protected Access 3 (WPA3). What is the primary purpose of implementing
WPA3 on the company's wireless network? - ANSC .To enhance wireless network security
with the latest encryption standards
ID
A security specialist is drafting a memorandum on secure data destruction for the organization
after a recent breach. What benefit does the certification concept offer when evaluating
appropriate disposal/decommissioning? - ANSB. It refers to the documentation and
verification of the data sanitization or destruction process.
The IT security team at a large company is implementing more robust authentication measures
to safeguard sensitive data and systems. The team is exploring multifactor authentication (MFA)
options to bolster security. The company deals with highly confidential information and requires
a robust solution. The team has narrowed the choices and is evaluating which aligns BEST with