Preview a few questions below — answers are revealed when you take the
exam.
-
A multinational corporation is planning to implement a new cloud-based security solution to protect sensitive data across various global offices. The security team needs to ensure that the solution complies with different regional data protection regulations while maintaining a unified security policy. What approach should they take to address these requirements?
- Implement a multi-cloud strategy with region-specific security configurations to comply with local regulations, while using a centralized security management platform to enforce a unified policy.
- Adopt a single-cloud provider with global data centers, ensuring that all data is stored in a single jurisdiction to simplify compliance with regional regulations.
- Use a hybrid cloud approach, storing sensitive data on-premises and non-sensitive data in the cloud, with separate security policies for each environment.
- Deploy a cloud security solution that automatically adapts to regional regulations without manual intervention, ensuring compliance and a unified policy.
-
Identify the command used to scan for open ports and services on a network using Nmap.
- nmap -sS -p- <target>
- nmap -A -T4 <target>
- nmap -sV -O <target>
- nmap -p- -A <target>
-
A security analyst notices unusual network traffic patterns that suggest a potential data exfiltration attempt. The analyst needs to quickly identify the source and destination of the suspicious traffic. Which tool should they use to capture and analyze network packets in real-time?
- Wireshark
- tcpdump
- NetFlow Analyzer
- Splunk
-
Consider a scenario where a company experiences a ransomware attack that encrypts critical data. The incident response team must decide on the best course of action to recover the data and prevent future attacks. Which method solves it best?
- Pay the ransom to obtain the decryption key and implement additional endpoint security solutions to prevent future attacks.
- Restore data from the latest backup and conduct a thorough security audit to identify and address vulnerabilities.
- Negotiate with the attackers for a lower ransom payment and enhance network segmentation to limit the spread of future attacks.
- Use a third-party decryption tool and increase user awareness training to reduce the risk of future ransomware attacks.
-
Which configuration is most appropriate for implementing a zero-trust architecture in a large enterprise with multiple remote offices?
- Deploy a centralized identity management system with multi-factor authentication and continuous monitoring of user activities across all offices.
- Use a perimeter-based security model with firewalls and VPNs to secure remote office connections.
- Implement a distributed security model with independent security policies for each remote office.
- Rely on traditional antivirus solutions and regular patch management for all remote offices.