NEW QUESTION 188
A dynamic application vulnerability scan identified code injection could be performed using a web form.
Which of the following will be BEST remediation to prevent this vulnerability?

NEW QUESTION 189
An end user reports a computer has been acting slower than normal for a few weeks. During an investigation, an analyst determines the system is sending the user’s email address and a ten-digit number to an IP address once a day. The only recent log entry regarding the user’s computer is the following:

Which of the following is the MOST likely cause of the issue?

NEW QUESTION 190
An organization needs to implement more stringent controls over administrator/root credentials and service accounts. Requirements for the project include:
* Check-in/checkout of credentials
* The ability to use but not know the password
* Automated password changes
* Logging of access to credentials
Which of the following solutions would meet the requirements?

NEW QUESTION 191
A security analyst Is hardening a Linux workstation and must ensure It has public keys forwarded to remote systems for secure login Which of the following steps should the analyst perform to meet these requirements? (Select TWO).

NEW QUESTION 192
A security analyst Is hardening a Linux workstation and must ensure It has public keys forwarded to remote systems for secure login Which of the following steps should the analyst perform to meet these requirements?
(Select TWO).

NEW QUESTION 193
A cyber threat intelligence analyst is gathering data about a specific adversary using OSINT techniques.
Which of the following should the analyst use?

NEW QUESTION 194
A security analyst is investigation an incident that was first reported as an issue connecting to network shares and the internet, While reviewing logs and tool output, the analyst sees the following:

Which of the following attacks has occurred?

NEW QUESTION 195
An attacker was easily able to log in to a company’s security camera by performing a basic online search for a setup guide for that particular camera brand and model.
Which of the following BEST describes the configurations the attacker exploited?

NEW QUESTION 196
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

NEW QUESTION 197
Which of the following is the MOST secure but LEAST expensive data destruction method for data that is stored on hard drives?

NEW QUESTION 198
A Chief Security Officer (CSO) was notified that a customer was able to access confidential internal company files on a commonly used file-sharing service. The file-sharing service is the same one used by company staff as one of its approved third-party applications.
After further investigation, the security team
determines the sharing of confidential files was accidental and not malicious. However, the CSO wants to implement changes to minimize this type of incident from reoccurring but does not want to impact existing business processes. Which of the following would BEST meet the CSO’s objectives?

NEW QUESTION 199
A company is implementing a new SIEM to log and send alerts whenever malicious activity is blocked by its antivirus and web content filters. Which of the following is the primary use case for this scenario?

NEW QUESTION 200
A company was compromised, and a security analyst discovered the attacker was able to get access to a service account. The following logs were discovered during the investigation:

Which of the following MOST likely would have prevented the attacker from learning the service account name?

NEW QUESTION 201
A security analyst is Investigating a malware incident at a company. The malware Is accessing a command-and-control website at www.comptia.com. All outbound Internet traffic is logged to a syslog server and stored in /logfiles/messages.
Which of the following commands would be BEST for the analyst to use on the syslog server to search for recent traffic to the command-and-control website?

NEW QUESTION 202
Following a prolonged datacenter outage that affected web-based sales a company has decided to move its operations to a private cloud solution. The security team has received the following requirements:
– There must be visibility into how teams are using cloud-based
services.
– The company must be able to identify when data related to payment
cards is being sent to the cloud.
– Data must be available regardless of the end user’s geographic
location
– Administrators need a single pane-of-glass view into traffic and
trends.
Which of the following should the security analyst recommend?

NEW QUESTION 203
The Chief Information Security Officer wants to pilot a new adaptive, user-based authentication method. The concept Includes granting logical access based on physical location and proximity.
Which of the following Is the BEST solution for the pilot?

NEW QUESTION 204
An organization has hired a security analyst to perform a penetration test. The analyst captures 1Gb worth of inbound network traffic to the server and transfers the pcap back to the machine for analysis. Which of the following tools should the analyst use to further review the pcap?

NEW QUESTION 205
An incident response technician collected a mobile device during an investigation. Which of the following should the technician do to maintain chain of custody?

NEW QUESTION 206
The exploitation of a buffer-overrun vulnerability in an application will MOST likely lead to:

NEW QUESTION 207
Phishing and spear-phishing attacks have been occurring more frequently against a company’s staff. Which of the following would MOST likely help mitigate this issue?

NEW QUESTION 208
Joe. a security analyst, recently performed a network discovery to fully understand his organization’s electronic footprint from a “public” perspective. Joe ran a set of commands and received the following output:

Which of the following can be determined about the organization’s public presence and security posture? (Select TWO).

NEW QUESTION 209
A SOC is implementing an in sider-threat-detection program. The primary concern is that users may be accessing confidential data without authorization. Which of the following should be deployed to detect a potential insider threat?

NEW QUESTION 210
Given the following logs:

Which of the following BEST describes the type of attack that is occurring?

NEW QUESTION 211
A company uses wireless tor all laptops and keeps a very detailed record of its assets, along with a comprehensive list of devices that are authorized to be on the wireless network. The Chief Information Officer (CIO) is concerned about a script kiddie potentially using an unauthorized device to brute force the wireless PSK and obtain access to the internal network. Which of the following should the company implement to BEST prevent this from occurring?