Question 1

Which type of disaster recovery plan (DRP) testing carries the MOST operational risk?

Options :

A : Cutover

B : Walkthrough

C : Tabletop

D : Parallel

Answer: C

Question 2

A security engineer is required to integrate security into a software project that is implemented by small groups test quickly, continuously, and independently develop, test, and deploy code to the cloud. The engineer will MOST likely integrate with which software development process'

Options :

A : Service-oriented architecture (SOA)

B : Spiral Methodology

C : Structured Waterfall Programming Development

D : Devops Integrated Product Team (IPT)

Answer: C

Question 3

When conducting a security assessment of access controls, which activity is part of the data analysis phase?

Options :

A : Present solutions to address audit exceptions.

B : Conduct statistical sampling of data transactions.

C : Categorize and identify evidence gathered during the audit.

D : Collect logs and reports.

Answer: C

Question 4

Which of the following MUST be done before a digital forensics investigator may acquire digital evidence?

Options :

A : Inventory the digital evidence.

B : Isolate the digital evidence.

C : Verify that the investigator has the appropriate legal authority to proceed.

D : Perform hashing to verify the integrity of the digital evidence.

Answer: C

Question 5

After a breach incident, investigators narrowed the attack to a specific network administrator's credentials. However, there was no evidence to determine how the hackers obtained the credentials. Much of the following actions could have BEST avoided the above breach per the investigation described above?

Options :

A : A periodic review of network access loos

B : A periodic review of active users en the network

C : A periodic review of all privileged accounts actions

D : A periodic review of password strength of all users across the organization

Answer: C