A company hired an external consultant to assist with required system upgrades to a critical
business application. A systems administrator needs to secure the consultant's access
without sharing passwords to critical systems. Which of the following solutions should most
likely be utilized?
A. TACACS+
B. SAML
C. An SSO platform
D. Role-based access control
E. PAM software - ANSWER E. PAM software
A newly implemented wireless network is designed so that visitors can connect to the
wireless network for business activities. The legal department is concerned that visitors
might connect to the network and perform illicit activities. Which of me following should the
security team implement to address this concern?
A. Configure a RADIUS server to manage device authentication.
B. Use 802.1X on all devices connecting to wireless.
C. Add a guest captive portal requiring visitors to accept terms and conditions.
1
, D. Allow for new devices to be connected via WPS. - ANSWER C. Add a guest captive
portal requiring visitors to accept terms and conditions.
Which of the following data roles is responsible for identifying risks and appropriate access
to data?
A. Owner
B. Custodian
C. Steward
D. Controller - ANSWER A. Owner
Which of the following physical controls can be used to both detect and deter? (Choose
two.)
A. Lighting
B. Fencing
C. Signage
D. Sensor
E. Bollard
F. Lock - ANSWER A. Lighting
2
business application. A systems administrator needs to secure the consultant's access
without sharing passwords to critical systems. Which of the following solutions should most
likely be utilized?
A. TACACS+
B. SAML
C. An SSO platform
D. Role-based access control
E. PAM software - ANSWER E. PAM software
A newly implemented wireless network is designed so that visitors can connect to the
wireless network for business activities. The legal department is concerned that visitors
might connect to the network and perform illicit activities. Which of me following should the
security team implement to address this concern?
A. Configure a RADIUS server to manage device authentication.
B. Use 802.1X on all devices connecting to wireless.
C. Add a guest captive portal requiring visitors to accept terms and conditions.
1
, D. Allow for new devices to be connected via WPS. - ANSWER C. Add a guest captive
portal requiring visitors to accept terms and conditions.
Which of the following data roles is responsible for identifying risks and appropriate access
to data?
A. Owner
B. Custodian
C. Steward
D. Controller - ANSWER A. Owner
Which of the following physical controls can be used to both detect and deter? (Choose
two.)
A. Lighting
B. Fencing
C. Signage
D. Sensor
E. Bollard
F. Lock - ANSWER A. Lighting
2
