CCOAPreview

Which of the following BEST enables a cybersecurity analyst to influence the acceptance of effective security controls across an organization?

Which of the following security practices is MOST effective in reducing system risk through system hardening?

Which of the following is the PRIMARY purpose of load balancers in cloud networking?

Which of the following BEST describes privilege escalation in the context of kernel security?

Before performing a penetration test for a client, it is MOST crucial to ensure:

An organization has received complaints from a number of its customers that their data has been breached. However, after an investigation, the organization cannot detect any indicators of compromise. The breach was MOST likely due to which type of attack?

Which of the following is the PRIMARY reason for tracking the effectiveness of vulnerability remediation processes within an organization?

As part of a penetration testing program, which team facilitates education and training of architects and developers to encourage better security and awareness?

An organization uses containerization for its business application deployments, and all containers run on the same host, so they MUST share the same:

Which of the following would BEST enable an organization to prioritize remediation activities when multiple vulnerabilities are identified?

Which of the following is the PRIMARY security-related reason to use a tree network topology rather than a bus network topology?

After an organization's financial system was moved to a cloud-hosted solution that allows single sign-on (SSO) for authentication purposes, data was compromised by an individual logged onto the local network using a compromised username and password. What authentication control would have MOST effectively prevented this situation?

Which of the following is the MOST common output of a vulnerability assessment?

After identified weaknesses have been remediated, which of the following should be completed NEXT?

Target discovery and service enumeration would MOST likely be used by an attacker who has the initial objective of:

Which of the following risks is MOST relevant to cloud auto-scaling?

Which of the following should be the ULTIMATE outcome of adopting enterprise governance of information and technology in cybersecurity?

How can port security protect systems on a segmented network?

When identifying vulnerabilities, which of the following should a cybersecurity analyst determine FIRST?

Which of the following is the PRIMARY benefit of implementing logical access controls on a need-to-know basis?

Which of the following is a type of middleware used to manage distributed transactions?

Which of the following controls would BEST prevent an attacker from accessing sensitive data from files or disk images that have been obtained either physically or via the network?

Which of the following is a network port for service message block (SMB)?

Which type of middleware is used for connecting software components that are written in different programming languages?