Preview a few questions below — answers are revealed when you take the
exam.
-
A security analyst is investigating a potential data breach. They suspect that an attacker has used a SQL injection attack to extract sensitive information from the database. Which method should the analyst use to verify if the SQL injection attack was successful and to identify the compromised data?
- A. Review server logs for any unusual SQL queries and compare them with the database schema to identify any discrepancies.
- B. Perform a vulnerability scan on the web application to check for any SQL injection vulnerabilities.
- C. Use a network sniffer to capture and analyze network traffic for any SQL injection payloads.
- D. Conduct a penetration test on the database server to simulate a SQL injection attack and observe the results.
-
An organization is implementing a new security policy that requires multi-factor authentication (MFA) for all remote access to the corporate network. Which approach should the organization take to ensure a smooth transition to MFA while minimizing disruption to users?
- A. Implement MFA immediately for all users and provide detailed training sessions to help them adapt to the new authentication process.
- B. Roll out MFA in phases, starting with high-risk users and gradually expanding to all users over several weeks.
- C. Allow users to opt-in to MFA initially, and then make it mandatory after a certain period to give them time to adjust.
- D. Provide users with the option to choose between MFA and a strong password policy, allowing them to select the method they prefer.
-
A cybersecurity team is conducting a risk assessment for a new cloud-based application. They need to evaluate the security posture of the application and identify any potential vulnerabilities. Which strategy should the team apply to effectively assess the security of the cloud-based application?
- A. Perform a comprehensive security audit of the cloud provider's infrastructure and services to ensure they meet industry standards.
- B. Conduct a series of penetration tests on the cloud-based application to identify any exploitable vulnerabilities.
- C. Review the cloud provider's security policies and compliance certifications to verify their commitment to security.
- D. Engage a third-party security firm to perform a thorough security assessment of the cloud-based application.
-
Identify the command used to display the current network connections and listening ports on a Linux system.
- A. netstat
- B. ifconfig
- C. iptables
- D. route
-
Select the service that provides centralized authentication, authorization, and accounting for users who connect and use a network.
- A. LDAP
- B. RADIUS
- C. DNS
- D. DHCP