E-LI and Shilpa : 

both of you suggested option B is the answer now Shilpa is saying option A and E-Li i did not understand you last clarification are you saying option D ?????

A systems administrator is preparing to run a vulnerability scan on a set of information systems in the organization. The systems administrator wants to ensure that the targeted systems produce accurate information especially regarding configuration settings.

Which of the following scan types will provide the systems administrator with the MOST accurate information?

1. A passive, credentialed scan
   B. A passive, non-credentialed scan
   C. An active, non-credentialed scan
   D. An active, credentialed scan

All staff at a company have started working remotely due to a global pandemic. To transition to remote work, the company has migrated to SaaS collaboration tools. The human resources department wants to use these tools to process sensitive information but is concerned the data could be:

Leaked to the media via printing of the documents

Sent to a personal email address

Accessed and viewed by systems administrators

Uploaded to a file storage site

Which of the following would mitigate the department's concerns?

Options:
A. Data loss detection, reverse proxy, EDR, and PGP
B. VDI, proxy, CASB, and DRM
C. Watermarking, forward proxy, DLP, and MFA
D. Proxy, secure VPN, endpoint encryption, and AV

which of the following statements is true of information systems?

A) Information systems include all business process activities.
B) Every information system has at least one application.
C) Information systems should be bought entirely off-the-shelf.
D) Every business process should include at least one information system.

the answer is A or C ???? please guide with the correct answer 

A company hired a third party to develop software as part of its strategy to be quicker to market. The company's policy outlines the following requirements:

The credentials used to publish production software to the container registry should be stored in a secure location.

Access should be restricted to the pipeline service account, without the ability for the third-party developer to read the credentials directly.

Which of the following would be the BEST recommendation for storing and monitoring access to these shared credentials?

Which of the following would be the BEST recommendation for storing and monitoring access to these shared credentials?

Options: A TPM
B Local secure password file
C MFA
D Key vault