An organization is moving its infrastructure to the cloud in an effort to meet the budget and reduce staffing requirements. The organization has three environments: development, testing, and production. These environments have interdependencies but must remain relatively segmented.
Which of the following methods would BEST secure the company's infrastructure and be the simplest to manage and maintain?

• A.Create three separate cloud accounts for each environment and a single core account for network services.
  Route all traffic through the core account.
• B.Create one cloud account with one VPC for all environments. Purchase a virtual firewall and create granular security rules.
• C.Create one cloud account and three separate VPCs for each environment. Create security rules to allow access to and from each environment.
• D.Create three separate cloud accounts for each environment. Configure account peering and security rules to allow access to and from each environment.

Comment: *

Name: *

Email: *

Verification: *

A cybersecurity analyst has access to several threat feeds and wants to organize them while simultaneously comparing intelligence against network traffic.
Which of the following would BEST accomplish this goal?

• A.Continuous integration and deployment
• B.Information sharing and analysis
• C.Automation and orchestration
• D.Static and dynamic analysis

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reviewing the following log entries to identify anomalous activity:

Which of the following attack types is occurring?

• A.Cross-site scripting
• B.Directory traversal
• C.SQL injection
• D.Buffer overflow

Comment: *

Name: *

Email: *

Verification: *

A security analyst on the threat-hunting team has developed a list of unneeded, benign services that are currently running as part of the standard OS deployment for workstations. The analyst will provide this list to the operations team to create a policy that will automatically disable the services for all workstations in the organization.
Which of the following BEST describes the security analyst's goal?

• A.To reduce the attack surface
• B.To create a system baseline
• C.To improve malware detection
• D.To optimize system performance

Comment: *

Name: *

Email: *

Verification: *

A security analyst scanned an internal company subnet and discovered a host with the following Nmap output.

Based on the output of this Nmap scan, which of the following should the analyst investigate FIRST?

• A.Port 3389
• B.Port 22
• C.Port 135
• D.Port 445

Comment: *

Name: *

Email: *

Verification: *