Question 1

After identified weaknesses have been remediated, which of the following should be completed NEXT?

Options :

A : Perform a validation scan before moving to production.

B : Perform software code testing.

C : Perform a software quality assurance (QA) activity.

D : Move the fixed system directly to production.

Answer: A

Question 2

An organization has received complaints from a number of its customers that their data has been breached. However, after an investigation, the organization cannot detect any indicators of compromise. The breach was MOST likely due to which type of attack?

Options :

A : Supply chain attack

B : Zero-day attack

C : injection attack

D : Man-in the-middle attack

Answer: A

Question 3

Which of the following is the PRIMARY reason for tracking the effectiveness of vulnerability remediation processes within an organization?

Options :

A : To provide reports to senior management so that they can justify the expense of vulnerability management tools

B : To identify executives who are responsible for delaying patching and report them to the board

C : To ensure employees responsible for patching vulnerabilities are actually doing their job correctly

D : To reduce the likelihood of a threat actor successfully exploiting vulnerabilities In the organization's systems

Answer: D

Question 4

Which of the following is theMOSTimportant component oftheasset decommissioning process from a data risk perspective?

Options :

A : Informing the data owner when decommissioning is complete

B : Destruction of data on the assets

C : Updating the asset status in the configuration management database (CMD8)

D : Removing the monitoring of the assets

Answer: B

Question 5

Which of the following is the PRIMARY benefit of using software-defined networking for network security?

Options :

A : It simplifies network topology and reduces complexity.

B : It provides greater scalability and flexibility for network devices.

C : It allows for centralized security management and control.

D : It Improves security monitoring and alerting capabilities.

Answer: C