Joe, an analyst, has received notice that a vendor who is coming in for a presentation will require access to a server outside the network. Currently, users are only able to access remote sites through a VPN connection. Which of the following should Joe use to BEST accommodate the vendor?

• A.Write a firewall rule to allow the vendor to have access to the remote site.
• B.Allow incoming IPSec traffic into the vendor's IP address.
• C.Set up a VPN account for the vendor, allowing access to the remote site.
• D.Turn off the firewall while the vendor is in the office, allowing access to the remote site.

Comment: *

Name: *

Email: *

Verification: *

As part of an organization's information security governance process, a Chief Information Security Officer (CISO) is working with the compliance officer to update policies to include statements related to new regulatory and legal requirements. Which of the following should be done to BEST ensure all employees are appropriately aware of changes to the policies?

• A.Require all employees to attend updated security awareness training and sign an acknowledgement
• B.Conduct a risk assessment based on the controls defined in the newly revised policies
• C.Distribute revised copies of policies to employees and obtain a signed acknowledgement from them
• D.Post the policies on the organization's intranet and provide copies of any revised policies to all active

Comment: *

Name: *

Email: *

Verification: *

A security analyst is auditing firewall rules with the goal of scanning some known ports to check the firewall's behavior and responses. The analyst executes the following commands:

The analyst then compares the following results for port 22:
nmap returns "Closed"
hping3 returns "flags=RA"
Which of the following BEST describes the firewall rule?

• A.LOG --log-tcp-sequence
• B.DNAT --to-destination 1.1.1.1:3000
• C.DROP
• D.REJECT with --tcp-reset

Comment: *

Name: *

Email: *

Verification: *

A security analyst at a technology solutions firm has uncovered the same vulnerabilities on a vulnerability scan for a long period of time. The vulnerabilities are on systems that are dedicated to the firm's largest client. Which of the following is MOST likely inhibiting the remediation efforts?

• A.There is a potential disruption of the vendor-client relationship
• B.Patches for the vulnerabilities have not been fully tested by the software vendor
• C.The parties have an MOU between them that could prevent shutting down the systems
• D.There is an SLA with the client that allows very little downtime

Comment: *

Name: *

Email: *

Verification: *

During an incident, a cybersecurity analyst found several entries in the web server logs that are related to an IP with a bad reputation . Which of the following would cause the analyst to further review the incident?
A)

B)

C)

D)

E)

• A.Option E
• B.Option A
• C.Option C
• D.Option D
• E.Option B

Comment: *

Name: *

Email: *

Verification: *