The Chief Information Security Officer (CISO) of a large financial institution is seeking a solution that will block a predetermined set of data points from being transferred or downloaded by employees. The CISO also wants to track the data assets by name, type, content, or data profile.

Which of the following BEST describes what the CIS wants to purchase?

Which of the following is the software development process by which function, usability,
and scenarios are tested against a known set of base requirements?

A vulnerability assessment solution is hosted in the cloud This solution will be used as an accurate inventory data source for both the configuration management database and the governance nsk and compliance tool An analyst has been asked to automate the data acquisition Which of the following would be the BEST way to acqutre the data'

Which of the following BEST identifies the appropriate use of threat intelligence as a function of detection and response?

Which of the following BEST explains the function of trusted firmware updates as they
relate to hardware assurance?

A security analyst is reviewing the following server statistics:

Which of the following Is MOST likely occurring?

A security analyst is researching ways to improve the security of a company's email system to mitigate emails that are impersonating company executives. Which of the following would be BEST for the analyst to configure to achieve this objective?

At which of the following phases of the SDLC shoukJ security FIRST be involved?

A security analyst performs various types of vulnerability scans. Review the vulnerability
scan results to determine the type of scan that was executed and if a false positive
occurred for each device.
Instructions:
Select the Results Generated drop-down option to determine if the results were generated from a credentialed scan, non-credentialed scan, or a compliance scan.
For ONLY the credentialed and non-credentialed scans, evaluate the results for false
positives and check the findings that display false positives. NOTE: If you would like to
uncheck an option that is currently selected, click on the option a second time.
Lastly, based on the vulnerability scan results, identify the type of Server by dragging the
Server to the results.
The Linux Web Server, File-Print Server and Directory Server are draggable.
If at any time you would like to bring back the initial state of the simulation, please select
the Reset All button. When you have completed the simulation, please select the Done
button to submit. Once the simulation is submitted, please select the Next button to
continue.

A security analyst is deploying a new application in the environment. The application needs
to be integrated with several existing applications that contain SPI Pnor to the deployment,
the analyst should conduct:

A security analyst is reviewing the following server statistics:

Which of the following is MOST likely occurring?

An organization is experiencing security incidents in which a systems administrator is
creating unauthorized user accounts A security analyst has created a script to snapshot the
system configuration each day. Following iss one of the scripts:

This script has been running successfully every day. Which of the following commands
would provide the analyst with additional useful information relevant to the above script?

A)

B)

C)

D)

A security learn implemented a SCM as part for its security-monitoring program there is a
requirement to integrate a number of sources Into the SIEM to provide better context
relative to the events being processed. Which of the following B€ST describes the result
the security learn hopes to accomplish by adding these sources?

A help desk technician inadvertently sent the credentials of the company's CRM n clear
text to an employee's personal email account. The technician then reset the employee's
account using the appropriate process and the employee's corporate email, and notified
the security team of the incident According to the incident response procedure, which of the
following should the security team do NEXT?

While monitoring the information security notification mailbox, a security analyst notices several emails were repotted as spam. Which of the following should the analyst do FIRST?