Contenthive76

Q1 A Chief Information Security Officer (CISO) is concerned developers have too much visibility into customer data. Which of the following controls should be implemented to BEST address these concerns? A. Data masking B. Data loss prevention C. Data minimization D. Data sovereignty - ANSWER A 2 A Chief Information Security Officer (CISO) is concerned the development team, which consists of contractors, has too much access to customer data. Developers use personal workstations, giving ...

An organization has recently recovered from an incident where a managed switch had been accessed and reconfigured without authorization by an insider. The incident response team is working on developing a lessons learned report with recommendations. Which of the following recommendations will BEST prevent the same attack from occurring in the future? A. Remove and replace the managed switch with an unmanaged one. B. Implement a separate logical network segment for management interfaces. C...

What are the three key objectives of information security? - ANSWER Confidentiality, integrity, and availability Risk exists at the intersection of _______ and _________. - ANSWER Threats and vulnerabilities. What is the overall risk rating for a risk that has medium likelihood and high impact? - ANSWER High What type of system controls access to a network based on criteria such as time of day, location, device type, and system - ANSWER Network access control What are the three networks ...

The IT team reports the EDR software that is installed on laptops is using a large amount of resources. Which of the following changes should a security analyst make to the EDR to BEST improve performance without compromising security? A. Quarantine the infected systems. B. Disable on-access scanning. C. Whitelist known-good applications. D. Sandbox unsigned applications. - ANSWER Whitelist known-good applications A security analyst is reviewing the following requirements for new time clo...

What federal law requires the use of vulnerability scanning on information systems operated by federal government agencies? A. HIPAA B. GLBA C. FISMA D. FERPA - ANSWER C: FISMA. The Federal Information Security Management Act (FISMA) requires that federal agencies implement vulnerability management programs for federal information systems. Gary is the system administrator for a federal agency and is responsible for a variety of information systems. Which systems must be covered by vulne...

Ty is reviewing the scan report for a Windows system joined to his organization's domain and finds the vulnerability shown here. What should be Ty's most significant concern related to this vulnerability? Window shows sections for 3 administrator account's password does not expire and threat, and options for first detected, last detected, vendor reference, user modified, et cetera. The presence of this vulnerability indicates that an attacker may have compromised his network. The pres...

_________ Report provides information about all the accounts in the System. - ANSWER Privileged Accounts Inventory Report __________ Report is for each user and shows Accounts and Safes what they can access in the System. - ANSWER Entitlement Report File for: - main configuration file of the Vault. - any change requests requires a restart of the Vault Service. - ANSWER DBP PTA Statistics Log Name - ANSWER S Within the Vault, each password is encrypted by? - ANSWER Its own unique key Goo...

How many potential insider threat indicators does a person who is married with two children, vacations at the beach every year, is pleasant to work with, but sometimes has poor work quality display? - correct answers 0 indicators What is the best response if you find classified government data on the internet? - correct answers Note any identifying information, such as the website's URL, and report the situation to your security POC. After reading an online story about a new security proj...

Which of the following actions is appropriate after finding classified Government information on the internet? - ANSWER Note any identifying information and the website's URL Which of the following may help to prevent inadvertent spillage? - ANSWER Label all files, removable media, and subject headers with appropriate classification markings. A colleague asks to leave a report containing protected health information (PHI) on his desk overnight so he can continue working on it the next day...

Spillage After reading an online story about a new security project being developed on the military installation where you work, your neighbor asks you to comment about the article. You know that this project is classified. How should you respond? - ANSWER Attempt to change the subject to something non-work related, but neither confirm nor deny the article's authenticity *Spillage Which of the following may help to prevent spillage? - ANSWER Label all files, removable media, and subject...

SPILLAGE* Which of the following may be helpful to prevent spillage? - CORRECT ANSWER Be aware of classification markings and all handling caveats. *SPILLAGE* Which of the following may be helpful to prevent spillage? - CORRECT ANSWER Label all files, removable media, and subject headers with appropriate classification markings. * CLASSIFIED DATA* Which type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization? - CORR...

How many potential insider threat indicators does a person who is married with two children, vacations at the beach every year, is pleasant to work with, but sometimes has poor work quality display? - ANSWER 0 indicators What is the best response if you find classified government data on the internet? - ANSWER Note any identifying information, such as the website's URL, and report the situation to your security POC. After reading an online story about a new security project being develope...

Multiple PVWA servers are always all active - ANSWER true Within the Vault each password is encrypted by - ANSWER It own unique key. In an SMTP integration it is recommended to use the FQDN when specifying the SMTP server address(es) - ANSWER true The vault supports a number of dual factor authentication methods. - ANSWER true During LDAP/S integration you should specify the FQDN of Domain Controller - ANSWER true A stand alone Vault server requires DNS services to operate properly - ANSW...

Core Privileged Access Security (PAS) Components - ANSWER EPV + PSM +PTA Enterprise Password Vault (EPV) = - ANSWER Digital Vault + PVWA + CPM EPV - ANSWER Enterprise Password Vault Enterprise Password Vault - ANSWER A hardened and secured digital vault used to store privileged account information. CPM - ANSWER Central Policy Manager Central Policy Manager - ANSWER Performs password changes and SSH key rotations on devices based on the policies set by Vault Administrators. PVWA - ANSWER ...

EPV - ANSWER Enterprise Password Vault PSM - ANSWER Privilege Session Manager EPV = - ANSWER EPV = Digital Vault + PVWA +CPM PVWA - ANSWER Password Vault Web Access Portal CPM - ANSWER Central Policy Manager Enterprise Password Vault (EPV) - ANSWER A hardened and secured digital vault used to store privileged account information Central Policy Manager (CPM) - ANSWER Performs password changes and SSH key rotations on devices based on the policies set by Vault Administrators Password Vaul...

In order to connect to a target device through PSM, the account credentials used for the connection must be stored in the vault? - ANSWER FALSE. Because the user can also enter credentials manually using Secure Connect Which CyberArk components or products can be used to discover Windows Services of Scheduled Taks that use privileged accounts? - ANSWER Discovery and Audit (DNA) Auto Detection (AD) Accounts Discovery What conditions must be met in order to login into the vault as the Maste...

Which of the following is NOT used in the textbook as an analogy for a worldview? -ANSWER-- Personal Library Which of the following worldview families would see the universe as a closed system? -ANSWER-- Atheism Which groups best fit the Pantheistic worldview? -ANSWER-- Buddhism, Hinduism, and New Age :True or False? The Christian worldview evaluates its worldview based on faith and not on reason. -ANSWER-- False Which of the following is noted for spiritualism but NOT for belief in a p...

What is co-parenting? - ANSWERS Shared parenting responsibilities between parties who do not live together. Children have the right to have a relationship with both parents regardless of their relationship with each other. Potential Co-Parents in Child Welfare - ANSWERS Birth parents Foster parents Case Managers GAL Therapist DCF Core Tenants of Florida's Practice Model - ANSWERS Engage: Build rapport and trust with the family. Partner: Identify formal and informal partners who have...

Chapter 1. Disease Prevention & Health Promotion 1. Which of the following behaviors indicates the highest potential for spreading infections among clients? The nurse: 1) disinfects dirty hands with antibacterial soap. 2) allows alcohol-based rub to dry for 10 seconds. 3) washes hands only after leaving each room. 4) uses cold water for medical asepsis. 2. What is the most frequent cause of the spread of infection among institutionalized patients? 1) Airborne microbes from other patient...

How does reviewing the genetic makeup of a client help guide the PMHNP in selecting medication for clients? - ANSWER Genetic testing can assist by providing more information on how clients may respond to certain psychotropic medications, as well as providing information on how a client may break down and metabolize medications based on the cytochrome P450 system. There may be an environmental exposure that turned a gene "on" that should have been "off" for one twin to develop schizophr...