When should containment occur during the incident response lifecycle?

• A.Immediately after recovery
• B.Before eradication
• C.Before identification
• D.After lessons learned

Comment: *

Name: *

Email: *

Verification: *

SIMULATION
Instructions
Part1
Use drop-down menu to select the most appropriate protocol or cipher for each system component.
Part2
Use the drop-down menu to select the most appropriate technique to apply to the modified data.
It at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
An engineer is analyzing findings from a penetration test that indicate insufficient data encryption.
The engineer must implement data security.

Correct Answer:

Explanation:
Part 1 (Protocols/Ciphers):
API Gateway: TLS 1.2
* Database: AES-512
* AI Model: gRPC
Part 2 (Techniques):
1. {pin:"999-99-9999", name:"john doe"} → {pin:"999-99-9999", name:"john doe", sensitivity:"SECRET"} → Classification
2. {ip_addr:"1.2.3.4", cookie:"aK3idkd==", name:"John Doe" uid="1111"} → {cookie:"aK3idkd==", uid="1111"} → De-identification
3. {pin:"999-99-9999", name:"john doe"} → {pin:"999-99-XXXX", name:"john doe"} → Masking
4. {card_number:"1111222233334444", name:"john doe", user_id:"1"} →
{card_number:"0x019238829", name:"john doe", user_id:"1"} → Tokenization
5. {name:"john doe", patient_id:"10000", dob:"1980-Jan-05"} → {patient_id:"10000", dob:"1980- Jan-05"} → Anonymization Part 1:
* TLS 1.2 secures client-to-gateway communications.
* AES-512 provides strong encryption for data at rest in the database.
* gRPC ensures efficient, secure communication between services (AI model).
Part 2:
* Classification tags sensitive data for handling.
* De-identification strips direct identifiers.
* Masking obscures part of sensitive values while keeping format.
* Tokenization replaces sensitive data with a reversible placeholder.
* Anonymization removes identifying attributes, making re-identification impossible.

Comment: *

Name: *

Email: *

Verification: *

An analyst finds failed login attempts across multiple systems using different usernames but from the same IP. Which attack is MOST likely?

• A.Credential stuffing
• B.Password spraying
• C.Brute-force attack
• D.Privilege escalation

Comment: *

Name: *

Email: *

Verification: *

Which of the following describe the practice of providing examples in a prompt? (Choose two.)

• A.User prompt
• B.System prompt
• C.Prompt template
• D.Quantization
• E.One-shot
• F.Multi-shot

Comment: *

Name: *

Email: *

Verification: *

Which of the following job roles in an organizational governance structure develops a model from business use cases?

• A.Platform architect
• B.AI risk analyst
• C.Machine learning operations (MLOps) engineer
• D.Data scientist

Comment: *

Name: *

Email: *

Verification: *