Question 1

How should a security analyst detect a potential structured query language (SQL) injection attack?

Options :

A : By looking for extra and unexpected symbols and characters in certain queries

B : By looking for database primary key changes on the production environment

C : By looking for repeated failed login attempts to the database server

D : By looking for administrative command attempts within database log files

Answer: A

Question 2

An organization's board of directors is reviewing the risk register and attempting to evaluate whether there is too much risk for the organization. Which metric should the board review?

Options :

A : Risk appetite

B : Risk evaluation plan

C : Risk treatment plan

D : Risk tolerance

Answer: A

Question 3

An IT organization needs to enable secure communication across virtual networks in Microsoft Azure and Amazon Web Services. Which protocol will offer the most reliable and secure method for data transport?

Options :

A : File Transfer Protocol (FTP)

B : Secure Shell (SSH)

C : Internet Protocol Security (IPsec)

Answer: C

Question 4

A healthcare organization would like to interoperate with another healthcare organization without needing to maintain individual accounts for members of the other organization. Which technology concept should the company use?

Options :

A : Single Sign-On (SSO)

B : Federated Authentication

C : Multi-Factor Authentication (MFA)

D : Cloud Identity Provider

Answer: B

Question 5

A company is moving its applications to the cloud and is concerned about cyber security threats. The security team has been tasked with providing a comprehensive view of how attackers gainaccess, move through networks, and carry out attacks. Which framework identifies the seven phases of an attack, from initial infiltration to post-exploitation?

Options :

A :

Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) for industrial control systems (ICS)

B : MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK)

C : Cyber kill chain

D : Diamond Model of Intrusion Analysis

Answer: C