Which of the following steps in the risk management process involves establishing the scope and potential risks involved with a project?
A. Risk assessment
B. Risk identification
C. Risk treatment
D. Risk monitoring and review
Show Answer
Correct Answer: B
Explanation: Risk identification is the phase where the project context/scope is established for the purpose of identifying what could affect objectives, and potential risks are identified and documented. Risk assessment follows identification and analyzes the likelihood and impact of those identified risks. Risk treatment is about selecting responses, and monitoring/review is ongoing oversight.
Question 145
A security administrator is implementing encryption on all hard drives in an organization. Which of the following security concepts is the administrator applying?
A. Integrity
B. Authentication
C. Zero Trust
D. Confidentiality
Show Answer
Correct Answer: D
Explanation: Encrypting hard drives protects data at rest from unauthorized disclosure. This primarily implements the security concept of confidentiality, not integrity, authentication, or Zero Trust.
Question 146
Which of the following is the best way to prevent an unauthorized user from plugging a laptop into an employee's phone network port and then using tools to scan for database servers?
A. MAC filtering
B. Segmentation
C. Certification
D. Isolation
Show Answer
Correct Answer: B
Explanation: Network segmentation is the best control for preventing a device connected through an employee's VoIP phone port from discovering or scanning database servers. By placing user/phone access ports on separate VLANs or network segments with ACLs/firewalls controlling access to server networks, an unauthorized laptop cannot reach or enumerate database servers. MAC filtering is easily bypassed by MAC spoofing, certification is ambiguous wording (likely certificate-based auth/802.1X) and is not the listed standard control name, and isolation is too generic.
Sources:
https://routersecurity.org/RouterNews.php
Question 147
A security team is in the process of hardening the network against externally crafted malicious packets. Which of the following is the most secure method to protect the internal network?
A. Anti-malware solutions
B. Host-based firewalls
C. Intrusion prevention systems
D. Network access control
E. Network allow list
Show Answer
Correct Answer: C
Explanation: An Intrusion Prevention System (IPS) is purpose-built to inspect network traffic inline and automatically block malicious or malformed packets before they reach internal systems. Anti-malware and host-based firewalls protect endpoints, NAC controls device admission rather than packet inspection, and a network allow list can reduce exposure but does not generally provide comprehensive protection against externally crafted malicious packets in the way an IPS does.
Question 148
An analyst is reviewing job postings to ensure sensitive company information is not being shared with the general public. Which of the following is the analyst most likely looking for?
A. Office addresses
B. Software versions
C. List of board members
D. Government identification numbers
Show Answer
Correct Answer: B
Explanation: Job postings are commonly reviewed for inadvertent information disclosure that helps attackers profile an environment. Listing specific software products and versions can reveal the organization's technology stack and potentially expose known vulnerabilities, making it valuable reconnaissance information. Office addresses and board members are generally public, and government identification numbers would not normally appear in a job posting or be relevant to the hiring description.
Question 149
A network engineer is increasing the overall security of network devices and needs to harden the devices. Which of the following will best accomplish this task?
A. Configuring centralized logging
B. Generating local administrator accounts
C. Replacing Telnet with SSH
D. Enabling HTTP administration
Show Answer
Correct Answer: C
Explanation: Replacing Telnet with SSH hardens network devices by using encrypted remote administrative access instead of Telnet, which sends credentials and session data in plaintext. Centralized logging aids monitoring rather than hardening, local administrator accounts are not the best hardening measure in this context, and enabling HTTP administration is insecure because HTTP is unencrypted.
Question 150
A systems administrator is reviewing the VPN logs and notices that during non-working hours a user is accessing the company file server and information is being transferred to a suspicious IP address. Which of the following threats is most likely occurring?
A. Typosquatting
B. Root or trust
C. Data exfiltration
D. Blackmail
Show Answer
Correct Answer: C
Explanation: The scenario describes unauthorized transfer of company data from an internal file server to an external suspicious IP address, especially during non-working hours. This is characteristic of data exfiltration, often performed by a malicious insider or a compromised account. The other options do not match: typosquatting involves deceptive domain names, root of trust refers to a security concept, and blackmail is an extortion tactic rather than the observed network activity.
Question 151
A new employee accessed an unauthorized website. An investigation found that the employee violated the company's rules. Which of the following did the employee violate?
A. MOU
B. AUP
C. NDA
D. MOA
Show Answer
Correct Answer: B
Explanation: An Acceptable Use Policy (AUP) defines the rules for appropriate use of an organization's systems, networks, internet access, and other IT resources. Accessing an unauthorized website violates the AUP. An MOU (Memorandum of Understanding) and MOA (Memorandum of Agreement) define relationships or agreements between parties, while an NDA (Non-Disclosure Agreement) concerns confidentiality, not acceptable system use.
Question 152
A malicious actor is trying to access sensitive financial information from a company's database by intercepting and reusing log-in credentials. Which of the following attacks is the malicious actor attempting?
A. SQL injection
B. On-path
C. Brute-force
D. Password spraying
Show Answer
Correct Answer: B
Explanation: The key indicators are that the attacker is intercepting communications and then reusing captured login credentials. That describes an on-path (formerly man-in-the-middle) attack. SQL injection targets databases through unsanitized queries, brute-force attempts many password guesses, and password spraying tries a small set of common passwords across many accounts rather than intercepting valid credentials.
Question 153
A company is performing a risk assessment on new software the company plans to use. Which of the following should the company assess during this process?
A. Software vulnerabilities
B. Cost-benefit analysis
C. Ongoing monitoring strategies
D. Network infrastructure compatibility
Show Answer
Correct Answer: A
Explanation: A risk assessment for new software focuses on identifying and evaluating risks associated with adopting the software, including known and potential software vulnerabilities that could affect confidentiality, integrity, or availability. While cost-benefit analysis, ongoing monitoring, and compatibility may be part of broader evaluation or implementation planning, they are not the primary focus of a security risk assessment.
$19
Get all 609 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.