An accountant is attempting to log in to the internal accounting system and receives a message that the website's certificate is fraudulent. The accountant finds instructions for manually installing the new trusted root onto the local machine. Which of the following would be the company's BEST option for this situation in the future?

• A.Utilize a central CRL.
• B.Implement certificate management.
• C.Ensure access to KMS.
• D.Use a stronger cipher suite.

Comment: *

Name: *

Email: *

Verification: *

Ann, an employee in the payroll department, has contacted the help desk citing multiple issues with her device, including:
Slow performance
Word documents, PDFs, and images no longer opening
A pop-up
Ann states the issues began after she opened an invoice that a vendor emailed to her.
Upon opening the invoice, she had to click several security warnings to view it in her word processor.
With which of the following is the device MOST likely infected?

• A.Spyware
• B.Crypto-malware
• C.Rootkit
• D.Backdoor

Comment: *

Name: *

Email: *

Verification: *

A CSIRT has completed restoration procedures related to a breach of sensitive data is creating documentation used to improve the organization's security posture. The team has been specifically tasked to address logical controls in their suggestions. Which of the following would be MOST beneficial to include in lessons learned documentation? (Choose two.)

• A.A summary of the activities performed during each phase of the incident response activity
• B.Data from the organization's IDS/IPS tools, which show the timeline of the breach and the activities executed by the attacker
• C.A list of topics that should be added to the organization's security awareness training program based on weaknesses exploited during the attack
• D.Recommendations relating to improved log correlation and alerting tools
• E.A list of policies, which should be revised to provide better clarity to employees regarding acceptable use
• F.A list of potential improvements to the organization's NAC capabilities, which would improve AAA within the environment

Comment: *

Name: *

Email: *

Verification: *

An employee uses RDP to connect back to the office network.
If RDP is misconfigured, which of the following security exposures would this lead to?

• A.A virus on the administrator's desktop would be able to sniff the administrator's username and password.
• B.Result in an attacker being able to phish the employee's username and password.
• C.A social engineering attack could occur, resulting in the employee's password being extracted.
• D.A man in the middle attack could occur, resulting the employee's username and password being captured.

Comment: *

Name: *

Email: *

Verification: *

An analyst is reviewing the following web-server log after receiving an alert from the DLP system about multiple PII records being transmitted in cleartext:

Which of the following IP addresses in MOST likely involved in the data leakage attempt?

• A.192.4.43.122
• B.10.43.40.112
• C.172.44.33.10
• D.10.45.10.200

Comment: *

Name: *

Email: *

Verification: *