akamichann7

A bank is working with a security architect to find the BEST solution to detect database management system compromises. The solution should meet the following requirements:

✑ Work at the application layer

✑ Send alerts on attacks from both privileged and malicious users

✑ Have a very low false positive

Which of the following should the architect recommend?

1. FIM
2. WAF
3. NIPS
4. DAM
5. UTM

An organization's existing infrastructure includes site-to-site VPNs between datacenters. In the past year, a sophisticated attacker exploited a zero-day vulnerability on the VPN concentrator. Consequently, the Chief Information Security Officer (CISO) is making infrastructure changes to mitigate the risk of service loss should another zero-day exploit be used against the VPN solution.

Which of the following designs would be BEST for the CISO to use?

1. Adding a second redundant layer of alternate vendor VPN concentrators
2. Using Base64 encoding within the existing site-to-site VPN connections
3. Distributing security resources across VPN sites
4. Implementing IDS services with each VPN concentrator
5. Transitioning to a container-based architecture for site-based services

Complete Denture Base Adjustment