Which of the following policies would state an employee should not disable security safeguards, such as host firewalls and antivirus on company systems?

• A.Code of conduct policy
• B.Account management policy
• C.Password policy
• D.Acceptable use policy

Comment: *

Name: *

Email: *

Verification: *

A security team is implementing a new vulnerability management program in an environment that has a historically poor security posture. The team is aware of issues patch management in the environment and expects a large number of findings. Which of the following would be the MOST efficient way to increase the security posture of the organization in the shortest amount of time?

• A.Create an SLA stating that remediation actions must occur within 30 days of discovery for all levels of vulnerabilities.
• B.Implement a change control policy that allows the security team to quickly deploy patches in the production environment to reduce the risk of any vulnerabilities found.
• C.Create classification criteria for data residing on different servers and provide remediation only for servers housing sensitive data.
• D.Incorporate prioritization levels into the remediation process and address critical findings first.

Comment: *

Name: *

Email: *

Verification: *

A security analyst has received a report that servers are no longer able to connect to the network. After many hours of troubleshooting, the analyst determines a Group Policy Object is responsible for the network connectivity Issues. Which of the following solutions should the security analyst recommend to prevent an interruption of service in the future?

• A.Cl/CD pipeline
• B.Appropriate network segmentation
• C.Change management process
• D.Impact analysis and reporting

Comment: *

Name: *

Email: *

Verification: *

An analyst receives artifacts from a recent Intrusion and is able to pull a domain, IP address, email address, and software version. When of the following points of the Diamond Model of Intrusion Analysis does this intelligence represent?

• A.Victims
• B.Capabilities
• C.Infrastructure
• D.Adversary

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity analyst has access to several threat feeds and wants to organize them while simultaneously comparing intelligence against network traffic.
Which of the following would BEST accomplish this goal?

• A.Information sharing and analysis
• B.Automation and orchestration
• C.Continuous integration and deployment
• D.Static and dynamic analysis

Comment: *

Name: *

Email: *

Verification: *