An organization disabled unneeded services and placed a firewall in front of a business-critical legacy system.
Which of the following best describes the actions taken by the organization?

• A.Exception
• B.Segmentation
• C.Risk transfer
• D.Compensating controls

Comment: *

Name: *

Email: *

Verification: *

You are security administrator investigating a potential infection on a network.
Click on each host and firewall. Review all logs to determine which host originated the Infecton and then deny each remaining hosts clean or infected.

Correct Answer:

Explanation:
A screenshot of a computer AI-generated content may be incorrect.

Based on the logs, it seems that the host that originated the infection is 192.168.10.22. This host has a suspicious process named svchost.exe running on port 443, which is unusual for a Windows service. It also has a large number of outbound connections to different IP addresses on port 443, indicating that it is part of a botnet.
The firewall log shows that this host has been communicating with 10.10.9.18, which is another infected host on the engineering network. This host also has a suspicious process named svchost.exe running on port 443, and a large number of outbound connections to different IP addresses on port 443.
The other hosts on the R & D network (192.168.10.37 and 192.168.10.41) are clean, as they do not have any suspicious processes or connections.

Comment: *

Name: *

Email: *

Verification: *

Which of the following should an organization implement to avoid unnecessary liability after the end of a legal contract obligation with a third party?

• A.Data encryption
• B.Data classification
• C.Data retention
• D.Data inventory

Comment: *

Name: *

Email: *

Verification: *

A company tested and validated the effectiveness of network security appliances within the corporate network. The IDS detected a high rate of SQL injection attacks against the company's servers, and the company's perimeter firewall is at capacity. Which of the following would be the best action to maintain security and reduce the traffic to the perimeter firewall?

• A.Set the appliance to IPS mode and place it in front of the company firewall.
• B.Convert the firewall to a WAF and use IPSec tunnels to increase throughput.
• C.Set the firewall to fail open if it is overloaded with traffic and send alerts to the SIEM.
• D.Configure the firewall to perform deep packet inspection and monitor TLS traffic.

Comment: *

Name: *

Email: *

Verification: *

Which of the following describes the reason for using an MDM solution to prevent jailbreaking?

• A.To secure end-of-life devices from incompatible firmware updates
• B.To avoid hypervisor attacks through VM escape
• C.To eliminate buffer overflows at the application layer
• D.To prevent users from changing the OS of mobile devices

Comment: *

Name: *

Email: *

Verification: *