Prep Test: Questions 181-270

Question 181

An analyst is trying to identify insecure services that are running on the internal network. After performing a port scan, the analyst identifies that a server has some insecure services enabled on default ports. Which of the following BEST describes the services that are currently running and the secure alternatives for replacing them? (Choose three.)

Question 182

A security analyst is reviewing output of a web server log and notices a particular account is attempting to transfer large amounts of money:

Which of the following types of attack is MOST likely being conducted?

Question 183

A privileged user at a company stole several proprietary documents from a server. The user also went into the log files and deleted all records of the incident. The systems administrator has just informed investigators that other log files are available for review. Which of the following did the administrator MOST likely configure that will assist the investigators?

Question 184

The following are the logs of a successful attack:

Which of the following controls would be BEST to use to prevent such a breach in the future?

Question 185

A security administrator currently spends a large amount of time on common security tasks, such as report generation, phishing investigations, and user provisioning and de-provisioning. This prevents the administrator from spending time on other security projects. The business does not have the budget to add more staff members. Which of the following should the administrator attempt?

Question 186

A company just developed a new web application for a government agency. The application must be assessed and authorized prior to being deployed. Which of the following is required to assess the vulnerabilities resident in the application?

Question 187

A security analyst is performing a packet capture on a series of SOAP HTTP requests for a security assessment. The analyst redirects the output to a file. After the capture is complete, the analyst needs to review the first transactions quickly and then search the entire series of requests for a particular string. Which of the following would be BEST to use to accomplish this task? (Choose two.)

Question 188

A company is upgrading its wireless infrastructure to WPA2-Enterprise using EAP-TLS. Which of the following must be part of the security architecture to achieve AAA? (Choose two.)

Question 189

A university is opening a facility in a location where there is an elevated risk of theft. The university wants to protect the desktops in its classrooms and labs. Which of the following should the university use to BEST protect these assets deployed in the facility?

Question 191

A security analyst needs to perform periodic vulnerability scans on production systems. Which of the following scan types would produce the BEST vulnerability scan report?

Question 190

Which of the following BEST describes the MFA attribute that requires a callback on a predefined landline?

Question 192

A worldwide manufacturing company has been experiencing email account compromises. In one incident, a user logged in from the corporate office in France, but then seconds later, the same user account attempted a login from Brazil. Which of the following account policies would BEST prevent this type of attack?

Question 193

A network administrator has been asked to design a solution to improve a company’s security posture. The administrator is given the following requirements:

✑ The solution must be inline in the network.

✑ The solution must be able to block known malicious traffic.

✑ The solution must be able to stop network-based attacks.

Which of the following should the network administrator implement to BEST meet these requirements?

Question 194

A security administrator checks the table of a network switch, which shows the following output:

Which of the following is happening to this switch?

Question 195

A critical file server is being upgraded, and the systems administrator must determine which RAID level the new server will need to achieve parity and handle two simultaneous disk failures. Which of the following RAID levels meet this requirement?

Question 196

A security engineer needs to implement the following requirements:

✑ All Layer 2 switches should leverage Active Directory for authentication.

✑ All Layer 2 switches should use local fallback authentication of Active Directory is offline.

✑ All Layer 2 switches are not the same and are manufactured by several vendors.

Which of the following actions should the engineer take to meet these requirements? (Choose two.)

Question 197

A security analyst is preparing a threat brief for an upcoming internal penetration test. The analyst needs to identify a method for determining the tactics, techniques, and procedures of a threat actor against the organization’s network. Which of the following will the analyst MOST likely use to accomplish the objective?

Question 198

A security analyst needs to make a recommendation for restricting access to certain segments of the network using only data-link layer security. Which of the following controls will the analyst MOST likely recommend?

Question 199

Which of the following types of controls is a CCTV camera that is not being monitored?