A company policy requires third-party suppliers to self-report data breaches within a specific time frame. Which
of the following third-party risk management policies is the company complying with?


A. MOU
B. SLA
C. EOL
D. NDA

Which of the following is required in order for an IDS and a WAF to be effective on HTTPS traffic?


A. Hashing
B. DNS sinkhole
C. TLS inspection
D. Data masking

Which of the following is a security implication of newer ICS devices that are becoming more common in
corporations?


A. Devices with cellular communication capabilities bypass traditional network security controls
B. Many devices do not support elliptic-curve encryption algorithms due to the overhead they require
C. These devices often lack privacy controls and do not meet newer compliance regulations
D. Unauthorized voice and audio recording can cause loss of intellectual property

An employee's company email is configured with conditional access and requires that MFA is enabled and
used. An example of MFA is a phone call and:


A. a push notification
B. a password
C. an SMS message
D. an authentication application

Which of the following rales is responsible for defining the protection type and classification type for a given set
of files?


A. General counsel
B. Data owner
C. Risk manager
D. Chief Information Officer

Which of the following documents specifies what to do in the event of catastrophic loss of a physical or virtual
system?


A. Data retention plan
B. Incident response plan
C. Disaster recovery plan
D. Communication plan

A security administrator examines the ARP table of an access switch and sees the following output:

A. DDoS on Fa0/2 port
B. MAC flooding on Fa0/2 port
C. ARP poisoning on Fa0/1 port
D. DNS poisoning on port Fa0/1

Which of the following measures the average time that equipment will operate before it breaks?


A. SLE
B. MTBF
C. RTO
D. ARO

Which of the following incident response phases should the proper collection of the detected IoCs and
establishment of a chain of custody be performed before?


A. Containment
B. Identification
C. Preparation
D. Recovery

A security administrator needs to add fault tolerance and load balancing to the connection from the file server to
the backup storage. Which of the following is the best choice to achieve this objective?


A. Multipath
B. RAID
C. Segmentation
D. 802.11