The Chief Information Security Officer is directing a new program to reduce attack surface risks and threats as part of a zero trust approach. The IT security team is required to come up with priorities for the program.
Which of the following is the best priority based on common attack frameworks?

• A.Reduce the administrator and privileged access accounts
• B.Employ a network-based IDS
• C.Conduct thorough incident response
• D.Enable SSO to enterprise applications

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reviewing the network security monitoring logs listed below:

Which of the following is the analyst most likely observing? (Select two).

• A.10.1.1.128 sent potential malicious traffic to the web server.
• B.10.1.1.128 sent malicious requests, and the alert is a false positive
• C.10.1.1.129 successfully exploited a vulnerability on the web server
• D.10.1.1.129 sent potential malicious requests to the web server
• E.10.1.1.129 can determine mat port 443 is being used
• F.10.1.1.130 can potentially obtain information about the PHP version

Comment: *

Name: *

Email: *

Verification: *

An analyst wants to ensure that users only leverage web-based software that has been pre-approved by the organization. Which of the following should be deployed?

• A.Blocklisting
• B.Allowlisting
• C.Graylisting
• D.Webhooks

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements best describes the MITRE ATT&CK framework?

• A.It provides a comprehensive method to test the security of applications.
• B.It provides threat intelligence sharing and development of action and mitigation strategies.
• C.It helps identify and stop enemy activity by highlighting the areas where an attacker functions.
• D.It tracks and understands threats and is an open-source project that evolves.
• E.It breaks down intrusions into a clearly defined sequence of phases.

Comment: *

Name: *

Email: *

Verification: *

A company has the following security requirements:
. No public IPs
All data secured at rest
. No insecure ports/protocols
After a cloud scan is completed, a security analyst receives reports that several misconfigurations are putting the company at risk. Given the following cloud scanner output:

Which of the following should the analyst recommend be updated first to meet the security requirements and reduce risks?

• A.VM_PRD_DB
• B.VM_DEV_DB
• C.VM_DEV_Web02
• D.VM_PRD_Web01

Comment: *

Name: *

Email: *

Verification: *