Question 1

An employee accessed a website that caused a device to become infected with invasive malware. The incident

response analyst has:

• created the initial evidence log.

• disabled the wireless adapter on the device.

• interviewed the employee, who was unable to identify the website that was accessed

• reviewed the web proxy traffic logs.

Which of the following should the analyst do to remediate the infected device?

Options :

A : Update the system firmware and reimage the hardware.

B : Install an additional malware scanner that will send email alerts to the analyst.

C : Configure the system to use a proxy server for Internet access.

D : Delete the user profile and restore data from backup.

Answer: A

Question 2

A security administrator has been notified by the IT operations department that some vulnerability reports

contain an incomplete list of findings. Which of the following methods should be used to resolve

this issue?

Options :

A : Credentialed scan

B : External scan

C : Differential scan

D : Network scan

Answer: A

Question 3

An analyst is designing a message system for a bank. The analyst wants to include a feature that allows the recipient of a message to prove to a third party that the message came from the sender Which of the following information security goals is the analyst most likely trying to achieve?

Options :

A : Non-repudiation

B : Authentication

C : Authorization

D : Integrity

Answer: A

Question 4

Which of the following best describes the goal of a tabletop exercise?

Options :

A : To test possible incident scenarios and how to react properly

B : To perform attack exercises to check response effectiveness

C : To understand existing threat actors and how to replicate their techniques

D : To check the effectiveness of the business continuity plan

Answer: A

Question 5

An organization has deployed a cloud-based storage system for shared data that is in phase two of the data life cycle. Which of the following controls should the security team ensure are addressed? (Choose two.)

Options :

A : Data classification

B : Data destruction

C : Data loss prevention

D : Encryption

E : Backups

F : Access controls

Answer: D,F