A security administrator suspects an employee has been emailing proprietary information to
a competitor. Company policy requires the administrator to capture an exact copy of the
employee's hard disk.
Which of the following should the administrator use?
A. dd
B. chmod
C. dnsenum
D. logger - ANSWER A
DRAG AND DROP SIMULATION (SEE IMAGE) - ANSWER THIS IS THE ORDER AS
FOLLOWS:
ssh-keygen -t rsa
ssh-copy-id -i ~/.ssh/id_rsa.pub user@server
chmod 644 ~/.ssh/id_rsa
ssh root@server
DROP DOWN SIMULATION (SEE IMAGE) - ANSWER Firewall 1:DNS Rule "" ANY --> ANY
--> DNS --> PERMIT
HTTPS Outbound "" 10.0.0.1/24 --> ANY --> HTTPS --> PERMIT
Management "" ANY --> ANY --> SSH --> PERMIT
1
,HTTPS Inbound "" ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound "" ANY --> ANY --> HTTP --> DENY
Firewall 2: No changes should be made to this firewall
Firewall 3:DNS Rule "" ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound "" 192.168.0.1/24 --> ANY --> HTTPS --> PERMIT
Management "" ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound "" ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound "" ANY --> ANY --> HTTP --> DENY
DRAG AND DROP SIMULATION (SEE ANSWERS IN IMAGE) - ANSWER See IMAGE
Which of the following will MOST likely adversely impact the operations of unpatched
traditional programmable-logic controllers, running a back-end LAMP server and OT systems
with human-management interfaces that are accessible over the Internet via a web
interface? (Choose two.)
A. Cross-site scripting
B. Data exfiltration
C. Poor system logging
D. Weak encryption
E. SQL injection
F. Server-side request forgery - ANSWER DF
A company recently transitioned to a strictly BYOD culture due to the cost of replacing lost or
damaged corporate-owned mobile devices.
2
,Which of the following technologies would be BEST to balance the BYOD culture while also
protecting the company's data?
A. Containerization
B. Geofencing
C. Full-disk encryption
D. Remote wipe - ANSWER A
A Chief Security Office's (CSO's) key priorities are to improve preparation, response, and
recovery practices to minimize system downtime and enhance organizational resilience to
ransomware attacks.
Which of the following would BEST meet the CSO's objectives?
A. Use email-filtering software and centralized account management, patch high-risk
systems, and restrict administration privileges on fileshares.
B. Purchase cyber insurance from a reputable provider to reduce expenses during an
incident.
C. Invest in end-user awareness training to change the long-term culture and behavior of
staff and executives, reducing the organization's susceptibility to phishing attacks.
D. Implement application whitelisting and centralized event-log management, and perform
regular testing and validation of full backups. - ANSWER D
A network engineer has been asked to investigate why several wireless barcode scanners
and wireless computers in a warehouse have intermittent connectivity to the shipping
server. The barcode scanners and computers are all on forklift trucks and move around the
warehouse during their regular use.
3
, Which of the following should the engineer do to determine the issue? (Choose two.)
A. Perform a site survey
B. Deploy an FTK Imager
C. Create a heat map
D. Scan for rogue access points
E. Upgrade the security protocols
F. Install a captive portal - ANSWER AC
Which of the following is MOST likely to outline the roles and responsibilities of data
controllers and data processors?
A. SSAE SOC 2
B. PCI DSS
C. GDPR
D. ISO 31000 - ANSWER C
Phishing and spear-phishing attacks have been occurring more frequently against a
company's staff.
Which of the following would MOST likely help mitigate this issue?
A. DNSSEC and DMARC
B. DNS query logging
C. Exact mail exchanger records in the DNS
D. The addition of DNS conditional forwarders - ANSWER C
4
a competitor. Company policy requires the administrator to capture an exact copy of the
employee's hard disk.
Which of the following should the administrator use?
A. dd
B. chmod
C. dnsenum
D. logger - ANSWER A
DRAG AND DROP SIMULATION (SEE IMAGE) - ANSWER THIS IS THE ORDER AS
FOLLOWS:
ssh-keygen -t rsa
ssh-copy-id -i ~/.ssh/id_rsa.pub user@server
chmod 644 ~/.ssh/id_rsa
ssh root@server
DROP DOWN SIMULATION (SEE IMAGE) - ANSWER Firewall 1:DNS Rule "" ANY --> ANY
--> DNS --> PERMIT
HTTPS Outbound "" 10.0.0.1/24 --> ANY --> HTTPS --> PERMIT
Management "" ANY --> ANY --> SSH --> PERMIT
1
,HTTPS Inbound "" ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound "" ANY --> ANY --> HTTP --> DENY
Firewall 2: No changes should be made to this firewall
Firewall 3:DNS Rule "" ANY --> ANY --> DNS --> PERMIT
HTTPS Outbound "" 192.168.0.1/24 --> ANY --> HTTPS --> PERMIT
Management "" ANY --> ANY --> SSH --> PERMIT
HTTPS Inbound "" ANY --> ANY --> HTTPS --> PERMIT
HTTP Inbound "" ANY --> ANY --> HTTP --> DENY
DRAG AND DROP SIMULATION (SEE ANSWERS IN IMAGE) - ANSWER See IMAGE
Which of the following will MOST likely adversely impact the operations of unpatched
traditional programmable-logic controllers, running a back-end LAMP server and OT systems
with human-management interfaces that are accessible over the Internet via a web
interface? (Choose two.)
A. Cross-site scripting
B. Data exfiltration
C. Poor system logging
D. Weak encryption
E. SQL injection
F. Server-side request forgery - ANSWER DF
A company recently transitioned to a strictly BYOD culture due to the cost of replacing lost or
damaged corporate-owned mobile devices.
2
,Which of the following technologies would be BEST to balance the BYOD culture while also
protecting the company's data?
A. Containerization
B. Geofencing
C. Full-disk encryption
D. Remote wipe - ANSWER A
A Chief Security Office's (CSO's) key priorities are to improve preparation, response, and
recovery practices to minimize system downtime and enhance organizational resilience to
ransomware attacks.
Which of the following would BEST meet the CSO's objectives?
A. Use email-filtering software and centralized account management, patch high-risk
systems, and restrict administration privileges on fileshares.
B. Purchase cyber insurance from a reputable provider to reduce expenses during an
incident.
C. Invest in end-user awareness training to change the long-term culture and behavior of
staff and executives, reducing the organization's susceptibility to phishing attacks.
D. Implement application whitelisting and centralized event-log management, and perform
regular testing and validation of full backups. - ANSWER D
A network engineer has been asked to investigate why several wireless barcode scanners
and wireless computers in a warehouse have intermittent connectivity to the shipping
server. The barcode scanners and computers are all on forklift trucks and move around the
warehouse during their regular use.
3
, Which of the following should the engineer do to determine the issue? (Choose two.)
A. Perform a site survey
B. Deploy an FTK Imager
C. Create a heat map
D. Scan for rogue access points
E. Upgrade the security protocols
F. Install a captive portal - ANSWER AC
Which of the following is MOST likely to outline the roles and responsibilities of data
controllers and data processors?
A. SSAE SOC 2
B. PCI DSS
C. GDPR
D. ISO 31000 - ANSWER C
Phishing and spear-phishing attacks have been occurring more frequently against a
company's staff.
Which of the following would MOST likely help mitigate this issue?
A. DNSSEC and DMARC
B. DNS query logging
C. Exact mail exchanger records in the DNS
D. The addition of DNS conditional forwarders - ANSWER C
4
