C795 Correct Questions & Answers (Latest Update )

A company's main asset is a physical working prototype stored in the research and development department. The prototype is not currently connected to the company's network. Which privileged user activity should be monitored? - ANSWER Accessing camera logs A company performs a data audit on its critical information every six months. Company policy states that the audit cannot be conducted by the same employee within a two-year time frame. Which principle is this company following? - ANSWER Job rotation A user is granted access to restricted and classified information but is supplied only with the information for a current assignment. Which type of authorization mechanism is being applied in this scenario? - ANSWER Need to know Which two data recovery components will back up a file and change the archive bit to 0? Choose 2 answers. - ANSWER Full backup, Incremental backup A company wants to monitor the inbound and outbound flow of packets and not the content. Which defense-in-depth strategy should be implemented? - ANSWER Traffic and trend analyses should be installed on the router. A penetration tester identifies a SQL injection vulnerability in a business-critical web application. The security administrator discusses this finding with the application developer, and the developer insists that the issue would take two months to remediate. Which defense-in-depth practice should the security administrator use to prevent an attacker from exploiting this weakness before the developer can implement a fix? - ANSWER Implement a web-application firewall