The majority of a company's employees have stated they are unable to perform their job duties due to outdated workstations, so the company has decided to institute BYOD. Which of the following would a security analyst MOST likely recommend for securing the proposed solution?

• A.A Linux-based system and mandatory training on Linux for all BYOD users
• B.A standardized anti-malware platform and a unified operating system vendor
• C.802.1X lo enforce company policy on BYOD user hardware
• D.A firewalled environment for client devices and a secure VDl for BYOO users

Comment: *

Name: *

Email: *

Verification: *

A security architect is reviewing the options for performing input validation on incoming web form submissions. Which of the following should the architect as the MOST secure and manageable option?

• A.Server-side whitelisting
• B.Client-side blacklisting
• C.Client-side whitelisting
• D.Server-side blacklisting

Comment: *

Name: *

Email: *

Verification: *

A security analyst receives an alert from the SIEM about a possible attack happening on the network The analyst opens the alert and sees the IP address of the suspected server as 192.168.54.66. which is part of the network 192 168 54 0/24. The analyst then pulls all the command history logs from that server and sees the following

Which of the following activities is MOST likely happening on the server?

• A.Enumeration
• B.A MITM attack
• C.Fuzzing
• D.A vulnerability scan

Comment: *

Name: *

Email: *

Verification: *

A security analyst is responding to an incident on a web server on the company network that is making a large number of outbound requests over DNS Which of the following is the FIRST step the analyst should take to evaluate this potential indicator of compromise'?

• A.Isolate the system on the network to ensure it cannot access other systems while evaluation is underway.
• B.Shut down the system to prevent further degradation of the company network
• C.Run an anti-malware scan on the system to detect and eradicate the current threat
• D.Start a network capture on the system to look into the DNS requests to validate command and control traffic.
• E.Reimage the machine to remove the threat completely and get back to a normal running state.

Comment: *

Name: *

Email: *

Verification: *

A security analyst is trying to determine if a host is active on a network. The analyst first attempts the following:

The analyst runs the following command next:

Which of the following would explain the difference in results?

• A.The original ping command needed root permission to execute.
• B.hping3 is returning a false positive.
• C.The routing tables for ping and hping3 were different.
• D.ICMP is being blocked by a firewall.

Comment: *

Name: *

Email: *

Verification: *