CERTMASTER CE SECURITY + EXAM ACTUAL 2025/2026 QUESTIONS AND 100% CORRECT ANSWERS

CERTMASTER CE SECURITY + EXAM ACTUAL 2025/2026 QUESTIONS AND 100% CORRECT ANSWERS An authoritative Domain Name System (DNS) server for a zone creates a Resource Records Set (RRSet) signed with a zone signing key. What is the result of this action? - Answer -DNS Security Extensions A cloud service provider (CSP) dashboard provides a view of all applicable logs for cloud resources and services. When examining the application programming interface (API) logs, the cloud engineer sees some odd metrics. Which of the following are examples that the engineer would have concerns for? (Select all that apply.) - Answer - Spike in API calls & 78% average error rate A company would like to deploy a software service to monitor traffic and enforce security policies in their cloud environment. What tool should the company consider using? - Answer -CASB A Transport Layer Security (TLS) Virtual Private Network (VPN) requires a remote access server listening on port 443 to encrypt traffic with aclient machine. An IPSec (Internet Protocol Security) VPN can deliver traffic in two modes. One mode encrypts only the payload of the IP packet. The other mode encrypts the whole IP packet (header and payload). What are these two modes? (Select all that apply.) - Answer - Tunnel & Transport If managed improperly, which of the following would be most detrimental to access management of cloud-based storage resources? - Answer -Resource policies Which of the following is used to review application code for signatures of known issues before it is packaged as an executable? - Answer -Static code analysis A security engineer must install an X.509 certificate to a computer system, but it is not accepted. The system requires a Base64 encoded format. What must the security engineer execute to properly install this certificate? - Answer -Convert to a .pem file. Cloud service providers make services available around the world through a variety of methods. T