sriharisrini.30

A Chief Information Officer is considering migrating all company data to the cloud to save money on expensive SAN storage.

Which of the following is a security concern that will MOST likely need to be addressed during migration?

1. Latency
2. Data exposure
3. Data loss
4. Data dispersion

A developer wants to maintain integrity to each module of a program and ensure the code cannot be altered by malicious users.

Which of the following would be BEST for the developer to perform? (Choose two.)

1. Utilize code signing by a trusted third party.
2. Implement certificate-based authentication.
3. Verify MD5 hashes.
4. Compress the program with a password.
5. Encrypt with 3DES.
6. Make the DACL read-only.

A company has hired a security architect to address several service outages on the endpoints due to new malware. The Chief Executive Officer's laptop was impacted while working from home. The goal is to prevent further endpoint disruption. The edge network is protected by a web proxy.

Which of the following solutions should the security architect recommend?

1. Replace the current antivirus with an EDR solution.
2. Remove the web proxy and install a UTM appliance.
3. Implement a deny list feature on the endpoints.
4. Add a firewall module on the current antivirus solution.

A home automation company just purchased and installed tools for its SOC to enable incident identification and response on software the company develops. The company would like to prioritize defenses against the following attack scenarios:

✑ Unauthorized insertions into application development environments

✑ Authorized insiders making unauthorized changes to environment configurations

Which of the following actions will enable the data feeds needed to detect these types of attacks on development environments? (Choose two.)

1. Perform static code analysis of committed code and generate summary reports.
2. Implement an XML gateway and monitor for policy violations.
3. Monitor dependency management tools and report on susceptible third-party libraries.
4. Install an IDS on the development subnet and passively monitor for vulnerable services.
5. Model user behavior and monitor for deviations from normal.
6. Continuously monitor code commits to repositories and generate summary logs.

A recent data breach revealed that a company has a number of files containing customer data across its storage environment. These files are individualized for each employee and are used in tracking various customer orders, inquiries, and issues. The files are not encrypted and can be accessed by anyone. The senior management team would like to address these issues without interrupting existing processes.

Which of the following should a security architect recommend?

1. A DLP program to identify which files have customer data and delete them
2. An ERP program to identify which processes need to be tracked
3. A CMDB to report on systems that are not configured to security baselines
4. A CRM application to consolidate the data and provision access based on the process and need