An organization is focused on restructuring its data governance programs and an analyst has been Tasked with surveying sensitive data within the organization. Which of the following is the MOST accurate method for the security analyst to complete this assignment?

• A.Perform an enterprise-wide discovery scan.
• B.Consult with an internal data custodian.
• C.Review enterprise-wide asset Inventory.
• D.Create a survey and distribute it to data owners.

Comment: *

Name: *

Email: *

Verification: *

The Chief Information Security Officer (CISO) of a large financial institution is seeking a solution that will block a predetermined set of data points from being transferred or downloaded by employees. The CISO also wants to track the data assets by name, type, content, or data profile.
Which of the following BEST describes what the CIS wants to purchase?

• A.File integrity monitor
• B.DLP
• C.Asset tagging
• D.SIEM

Comment: *

Name: *

Email: *

Verification: *

Which of the following would a security engineer recommend to BEST protect sensitive system data from being accessed on mobile devices?

• A.Implement a self-encrypted disk.
• B.Configure filesystem encryption
• C.Enable Secure Boot using TPM
• D.Use a UEFl boot password.

Comment: *

Name: *

Email: *

Verification: *

A company was recently awarded several large government contracts and wants to determine its current risk from one specific APT.
Which of the following threat modeling methodologies would be the MOST appropriate to use during this analysis?

• A.Attack vectors
• B.Total attack surface
• C.Kill chain
• D.Diamond Model of Intrusion Analysis
• E.Adversary capability

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity analyst is investigating a potential incident affecting multiple systems on a company's internal network. Although there is a negligible impact to performance, the following symptom present on each of the affected systems:
* Existence of a new and unexpected svchost exe process
* Persistent, outbound TCP/IP connections to an unknown external host with routine keep-alives transferred
* DNS query logs showing successful name resolution for an Internet-resident dynamic DNS domain If this situation remains unresolved, which of the following will MOST likely occur?

• A.Key files on the affected hosts may become encrypted and require ransom payment for unlock.
• B.An adversary may leverage the affected hosts to reconfigure the company's router ACLs.
• C.The affected hosts may participate in a coordinated DDoS attack upon command
• D.The adversary may attempt to perform a man-in-the-middle attack.

Comment: *

Name: *

Email: *

Verification: *