Exam Dumps VCE

QUESTION 174
During the development process, the team identifies major components that need to be rewritten.
As a result, the company hires a security consultant to help address major process issues. Which of the following should the consultant recommend to best prevent these issues from reoccurring in the future?

QUESTION 175
A security architect for a large, multinational manufacturer needs to design and implement a security solution to monitor traffic.
When designing the solution, which of the following threats should the security architect focus on to prevent attacks against the network?

QUESTION 176
A security engineer was auditing an organization’s current software development practice and discovered that multiple open-source libraries were Integrated into the organization’s software. The organization currently performs SAST and DAST on the software it develops.
Which of the following should the organization incorporate into the SDLC to ensure the security of the open-source libraries?

QUESTION 177
A security engineer needs to ensure production containers are automatically scanned for vulnerabilities before they are accepted into the production environment. Which of the following should the engineer use to automatically incorporate vulnerability scanning on every commit?

QUESTION 178
A security architect is reviewing the following proposed corporate firewall architecture and configuration:

Both firewalls are stateful and provide Layer 7 filtering and routing. The company has the following requirements:
Web servers must receive all updates via HTTP/S from the corporate network.
Web servers should not initiate communication with the Internet.
Web servers should only connect to preapproved corporate database servers.
Employees’ computing devices should only connect to web services over ports 80 and 443.
Which of the following should the architect recommend to ensure all requirements are met in the MOST secure manner? (Choose two.)

QUESTION 179
A security architect works for a manufacturing organization that has many different branch offices.
The architect is looking for a way to reduce traffic and ensure the branch offices receive the latest copy of revoked certificates issued by the CA at the organization’s headquarters location. The solution must also have the lowest power requirement on the CA.
Which of the following is the BEST solution?

QUESTION 180
A security administrator has been provided with three separate certificates and is trying to organize them into a single chain of trust to deploy on a website. Given the following certificate properties:

Which of the following are true about the PKI hierarchy? (Select two).

QUESTION 181
Which of the following encryption methods is most suitable for protecting sensitive data at rest in a cloud environment, ensuring both confidentiality and integrity?

QUESTION 182
A financial services company has proprietary trading algorithms, which were created and are maintained by a team of developers on their private source code repository.
If the details of this operation became known to competitors, the company’s ability to profit from its trading would disappear immediately.
Which of the following would the company MOST likely use to protect its trading algorithms?

QUESTION 183
An analyst determined that the current process for manually handling phishing attacks within the company is ineffective. The analyst is developing a new process to ensure phishing attempts are handled internally in an appropriate and timely manner. One of the analyst’s requirements is that a blocklist be updated automatically when phishing attempts are identified. Which of the following would help satisfy this requirement?

QUESTION 184
A company just released a new video card. Due to limited supply and nigh demand, attackers are employing automated systems to purchase the device through the company’s web store so they can resell it on the secondary market. The company’s Intended customers are frustrated. A security engineer suggests implementing a CAPTCHA system on the web store to help reduce the number of video cards purchased through automated systems. Which of the following now describes the level of risk?

QUESTION 185
SIMULATION
During the course of normal SOC operations, three anomalous events occurred and were flagged as potential IoCs. Evidence for each of these potential IoCs is provided.
INSTRUCTIONS
Review each of the events and select the appropriate analysis and remediation options for each IoC.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

QUESTION 186
A security engineer needs to implement a solution to increase the security posture of user endpoints by providing more visibility and control over local administrator accounts. The endpoint security team is overwhelmed with alerts and wants a solution that has minimal operational burdens. Additionally, the solution must maintain a positive user experience after implementation.
Which of the following is the BEST solution to meet these objectives?

QUESTION 187
A security architect was asked to modify an existing internal network design to accommodate the following requirements for RDP:
* Enforce MFA for RDP
* Ensure RDP connections are only allowed with secure ciphers.
The existing network is extremely complex and not well segmented. Because of these limitations, the company has requested that the connections not be restricted by network-level firewalls Of ACLs.
Which of the following should the security architect recommend to meet these requirements?

QUESTION 188
A security analyst runs a vulnerability scan on a network administrator’s workstation The network administrator has direct administrative access to the company’s SSO web portal The vulnerability scan uncovers cntical vulnerabilities with equally high CVSS scores for the user’s browser, OS, email client and an offline password manager Which of the following should the security analyst patch FIRST?