1/5/26, 1:07 PM SANS - SEC530 Exam comprehensive questions | FREQUENTLY MOST TESTED QUESTIONS AND VERIFIED SOLUTIONS/GET …
SANS - SEC530 Exam comprehensive questions |
FREQUENTLY MOST TESTED QUESTIONS AND
VERIFIED SOLUTIONS/GET IT 100% ACCURATE!!
Save
Terms in this set (396)
Which of the following is a C) Block the USB devices physically.
recommended USB keyboard
mitigation for sites requiring high
security?
A) Disable USB ports in the system.
B) Restrict USB devices with
approved PIDs and VIDs.
C) Block the USB devices physically.
D) Restrict USB devices with
approved user accounts.
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 1/90
,1/5/26, 1:07 PM SANS - SEC530 Exam comprehensive questions | FREQUENTLY MOST TESTED QUESTIONS AND VERIFIED SOLUTIONS/GET …
Which of the following Cisco IOS A) switchport port-security violation shutdown
commands is used to shut the port
down automatically when the
maximum number of MAC addresses
is exceeded?
A) switchport port-security violation
shutdown
B) switchport port-security limit rate
source-mac-shutdown
C) switchport port-security violation
auto-shutdown
D) switchport port-security mac-
exceed-port-shutdown
What is a common failing associated D) Compliance-driven security tends to fail in the
with focusing only on compliance- face of a persistent adversary.
drive security?
A) Compliance-driven security tends
to focus only on hardening internal
systems.
B) Compliance-driven security tends
to focus only on hardening the
perimeter.
C) Compliance-driven security tends
to be costly in terms of solutions and
resources.
D) Compliance-driven security tends
to fail in the face of a persistent
adversary.
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 2/90
,1/5/26, 1:07 PM SANS - SEC530 Exam comprehensive questions | FREQUENTLY MOST TESTED QUESTIONS AND VERIFIED SOLUTIONS/GET …
Which of the following is described A) Disrupt
by Lockheed Martin as a
countermeasure action to the Kill
Chain?
A) Disrupt
B) Prevent
C) React
D) Remove
What is an easy to implement and C) Private VLAN
effective control an organization can
leverage to make pivoting more
difficult for an attacker?
A) WPA2
B) P2P patching
C) Private VLAN
D) VPN
Which type of private VLAN ports A) Isolated
may only communicate with
promiscuous ports?
A) Isolated
B) Promiscuous
C) Network
D) Community
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 3/90
, 1/5/26, 1:07 PM SANS - SEC530 Exam comprehensive questions | FREQUENTLY MOST TESTED QUESTIONS AND VERIFIED SOLUTIONS/GET …
Which of the following wireless B) 802.11ac
standards supports up to 1300
Mbps?
A) 802.11b
B) 802.11ac
C) 802.11n
D) 802.11w
In which phase of the security C) Plan
architecture design lifecycle is threat
modeling and attack surface analysis
conducted?
A) Scan
B) Discover and Assess
C) Plan
D) Design
Which of the following is the best A) Disable the CDP unless expressly required.
practice to mitigate against the Cisco
Discovery Protocol (CDP)
information leakage attack?
A) Disable the CDP unless expressly
required.
B) No mitigations are needed since
CDP is secure by default.
C) Schedule the CDP patch
regularly.
D) Enable the SECDP feature in the
CDP to secure the CDP.
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 4/90
SANS - SEC530 Exam comprehensive questions |
FREQUENTLY MOST TESTED QUESTIONS AND
VERIFIED SOLUTIONS/GET IT 100% ACCURATE!!
Save
Terms in this set (396)
Which of the following is a C) Block the USB devices physically.
recommended USB keyboard
mitigation for sites requiring high
security?
A) Disable USB ports in the system.
B) Restrict USB devices with
approved PIDs and VIDs.
C) Block the USB devices physically.
D) Restrict USB devices with
approved user accounts.
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 1/90
,1/5/26, 1:07 PM SANS - SEC530 Exam comprehensive questions | FREQUENTLY MOST TESTED QUESTIONS AND VERIFIED SOLUTIONS/GET …
Which of the following Cisco IOS A) switchport port-security violation shutdown
commands is used to shut the port
down automatically when the
maximum number of MAC addresses
is exceeded?
A) switchport port-security violation
shutdown
B) switchport port-security limit rate
source-mac-shutdown
C) switchport port-security violation
auto-shutdown
D) switchport port-security mac-
exceed-port-shutdown
What is a common failing associated D) Compliance-driven security tends to fail in the
with focusing only on compliance- face of a persistent adversary.
drive security?
A) Compliance-driven security tends
to focus only on hardening internal
systems.
B) Compliance-driven security tends
to focus only on hardening the
perimeter.
C) Compliance-driven security tends
to be costly in terms of solutions and
resources.
D) Compliance-driven security tends
to fail in the face of a persistent
adversary.
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 2/90
,1/5/26, 1:07 PM SANS - SEC530 Exam comprehensive questions | FREQUENTLY MOST TESTED QUESTIONS AND VERIFIED SOLUTIONS/GET …
Which of the following is described A) Disrupt
by Lockheed Martin as a
countermeasure action to the Kill
Chain?
A) Disrupt
B) Prevent
C) React
D) Remove
What is an easy to implement and C) Private VLAN
effective control an organization can
leverage to make pivoting more
difficult for an attacker?
A) WPA2
B) P2P patching
C) Private VLAN
D) VPN
Which type of private VLAN ports A) Isolated
may only communicate with
promiscuous ports?
A) Isolated
B) Promiscuous
C) Network
D) Community
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 3/90
, 1/5/26, 1:07 PM SANS - SEC530 Exam comprehensive questions | FREQUENTLY MOST TESTED QUESTIONS AND VERIFIED SOLUTIONS/GET …
Which of the following wireless B) 802.11ac
standards supports up to 1300
Mbps?
A) 802.11b
B) 802.11ac
C) 802.11n
D) 802.11w
In which phase of the security C) Plan
architecture design lifecycle is threat
modeling and attack surface analysis
conducted?
A) Scan
B) Discover and Assess
C) Plan
D) Design
Which of the following is the best A) Disable the CDP unless expressly required.
practice to mitigate against the Cisco
Discovery Protocol (CDP)
information leakage attack?
A) Disable the CDP unless expressly
required.
B) No mitigations are needed since
CDP is secure by default.
C) Schedule the CDP patch
regularly.
D) Enable the SECDP feature in the
CDP to secure the CDP.
https://quizlet.com/1127231954/sans-sec530-exam-comprehensive-questions-frequently-most-tested-questions-and-verified-solutionsget-it-100-accur… 4/90
