Question 1

A security architect works with a client on security operations center (SOC) capabilities. The security architect wants to ensure the log correlation and investigation activities are accurate across the infrastructure. Which of the following is the best for the client to implement?

Options :

A : Network Time Protocol (NTP)

B : Zero Trust Network Access (ZTNA)

C : Account federation

D : Secure access service edge (SASE)

E : Application programming interfaces (APIs)

Answer: A

Question 2

Which of the following is the most important component to include in the preparation phase of anincident response plan?

Options :

A : Roles and responsibilities

B : After action reports

C : Data integrity validation

D : Chain of custody

Answer: A

Question 3

A security architect reviews a report from a third-party incident response consultant and observes the following:Which of the following frameworks did the consultant use to perform analysis?

Options :

A : Spoofing, tampering, repudiation, information disclosure, denial of service, elevation of privilege (STRIDE)

B : MITRE ATT&CK

C : Diamond Model of Intrusion Analysis

D : National Institute of Standards and Technology (NIST) Cybersecurity Framework

E : Cyber Kill Chain

Answer: C

Question 4

The Chief Information Officer (CIO) is requiring users to phase out a legacy system that no longerreceives security updates because the system will be decommissioned soon.Which of the following risk management strategies is the CIO using?

Options :

A : Avoidance

B : Mitigation

C : Acceptance

D : Transference

Answer: A

Question 5

A cybersecurity analyst is reviewing static application security testing scan results and notices afinding for hard-coded credentials.Which of the following should the analyst recommend to the application team to resolve thisconcern?

Options :

A : Implement a privileged access management solution.

B : Enable single sign-on.

C : Obfuscate application programming interface keys.

D : Integrate secrets management.

Answer: D