A recent penetration test discovered that several employees were enticed to assist attackers by visiting specific websites and running downloaded files when prompted by phone calls. Which of the following would best address this issue?

• A.Increasing training and awareness for all staff
• B.Ensuring that malicious websites cannot be visited
• C.Blocking all scripts downloaded from the internet
• D.Disabling all staff members' ability to run downloaded applications

Comment: *

Name: *

Email: *

Verification: *

An incident response analyst is taking over an investigation from another analyst. The investigation has been going on for the past few days. Which of the following steps is most important during the transition between the two analysts?

• A.Identify and discuss the lessons learned with the prior analyst.
• B.Accept all findings and continue to investigate the next item target.
• C.Review the steps that the previous analyst followed.
• D.Validate the root cause from the prior analyst.

Comment: *

Name: *

Email: *

Verification: *

An analyst is remediating items associated with a recent incident. The analyst has isolated the vulnerability and is actively removing it from the system. Which of the following steps of the process does this describe?

• A.Preparation
• B.Containment
• C.Recovery
• D.Eradication

Comment: *

Name: *

Email: *

Verification: *

Which of the following best explains the importance of communicating with staff regarding the official public communication plan related to incidents impacting the organization?

• A.To establish what information is allowed to be released by designated employees
• B.To designate an external public relations firm to represent the organization
• C.To ensure that all news media outlets are informed at the same time
• D.To define how each employee will be contacted after an event occurs

Comment: *

Name: *

Email: *

Verification: *

An organization conducted a web application vulnerability assessment against the corporate website, and the following output was observed:

Which of the following tuning recommendations should the security analyst share?

• A.Set an HttpOnlvflaq to force communication by HTTPS
• B.Block requests without an X-Frame-Options header
• C.Configure an Access-Control-Allow-Origin header to authorized domains
• D.Disable the cross-origin resource sharing header

Comment: *

Name: *

Email: *

Verification: *