An analyst performs a routine scan of a host using Nmap and receives the following output:

Which of the following should the analyst investigate FIRST?

• A.Port 23
• B.Port 22
• C.Port 80
• D.Port 21

Comment: *

Name: *

Email: *

Verification: *

A security analyst at exampte.com receives a SIEM alert for an IDS signature and reviews the associated packet capture and TCP stream:


Winch of the following actions should the security analyst lake NEXT?

• A.Contact the application owner for connect example local tor additional information
• B.Review the known Apache vulnerabilities to determine if a compromise actually occurred
• C.Raise a request to the firewall team to block 203.0.113.15.
• D.Mark the alert as a false positive scan coming from an approved source.

Comment: *

Name: *

Email: *

Verification: *

A compliance officer of a large organization has reviewed the firm's vendor management program but has discovered there are no controls defined to evaluate third-party risk or hardware source authenticity. The compliance officer wants to gain some level of assurance on a recurring basis regarding the implementation of controls by third parties.
Which of the following would BEST satisfy the objectives defined by the compliance officer? (Choose two.)

• A.Executing vendor compliance assessments against the organization's security controls
• B.Completing a business impact assessment for all critical service providers
• C.Utilizing DLP capabilities at both the endpoint and perimeter levels
• D.Maintaining and reviewing the organizational risk assessment on a quarterly basis
• E.Soliciting third-party audit reports on an annual basis
• F.Executing NDAs prior to sharing critical data with third parties

Comment: *

Name: *

Email: *

Verification: *

A security is reviewing a vulnerability scan report and notes the following finding:

As part of the detection and analysis procedures, which of the following should the analyst do NEXT?

• A.Restart the antiviruses running processes
• B.Isolate the host from the network to prevent exposure
• C.Confirm the workstation's signatures against the most current signatures.
• D.Patch or reimage the device to complete the recovery

Comment: *

Name: *

Email: *

Verification: *

An organization that handles sensitive financial information wants to perform tokenization of data to enable the execution of recurring transactions. The organization is most interested m a secure, built-in device to support its solution. Which of the following would MOST likely be required to perform the desired function?

• A.HSM
• B.eFuse
• C.FPGA
• D.UEFI
• E.TPM

Comment: *

Name: *

Email: *

Verification: *