7027ds

A security compliance requirement states that specific environments that handle sensitive data must be protected by need-to-know restrictions and can only connect to authorized endpoints. The requirement also states that a DLP solution within the environment must be used to control the data from leaving the environment.

Which of the following should be implemented for privileged users so they can support the environment from their workstations while remaining compliant?

1. NAC to control authorized endpoints
2. FIM on the servers storing the data
3. A jump box in the screened subnet
4. A general VPN solution to the primary network

A security analyst has noticed a steady increase in the number of failed login attempts to the external-facing mail server. During an investigation of one of the jump boxes, the analyst identified the following in the log file:

powershell `IEX(New-Object Net.WebClient).DownloadString ('

Which of the following security controls would have alerted and prevented the next phase of the attack?

1. Antivirus and UEBA
2. Reverse proxy and sandbox
3. EDR and application approved list
4. Forward proxy and MFA

A Chief Information Officer (CIO) wants to implement a cloud solution that will satisfy the following requirements:

✑ Support all phases of the SDL

✑ Use tailored website portal software.

✑ Allow the company to build and use its own gateway software.

✑ Utilize its own data management platform.

✑ Continue using agent-based security tools.

Which of the following cloud-computing models should the CIO implement?

1. SaaS
2. PaaS
3. MaaS
4. IaaS

2. We toss a fair six-sided die twice, and record the number that is showing on each toss.
(a) How many outcomes are there in the sample space?

(b) What is the probability that the die shows 5 at least once?

(c) What is the probability that the die does not show 5?

1. Solve the equation 3x + 7 = 22.