Question 1

An organization has implemented a policy to detect and remove malicious software from its network. Which of the following actions is focused on correcting rather
than preventing attack?

Accepted Answer

Correct answer: B

Question 2

Which of the options below will do the most to reduce an organization??s attack surface on the internet?

Accepted Answer

Correct answer: D

Question 3

An organization is implementing a control for the Account Monitoring and Control CIS Control, and have set the Account Lockout Policy as shown below. What is
the risk presented by these settings?

Accepted Answer

Correct answer: B

Question 4

Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS
Control?

Accepted Answer

Correct answer: D

Question 5

Which approach is recommended by the CIS Controls for performing penetration tests?

Accepted Answer

Correct answer: C

Question 6

An organization has installed a firewall for Boundary Defense. It allows only outbound traffic from internal workstations for web and SSH, allows connections from
the internet to the DMZ, and allows guest wireless access to the internet only. How can an auditor validate these rules?

(93 New Questions)

Accepted Answer

Correct answer: D

Question 7

An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the
root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?

Accepted Answer

Correct answer: C

Question 8

Which of the following should be measured and analyzed regularly when implementing the Secure Configuration for Hardware and Software on Mobile Devices,
Laptops, Workstations, and Servers CIS Control?

Accepted Answer

Correct answer: D

Question 9

Which of the following archiving methods would maximize log integrity?

Accepted Answer

Correct answer: A

Question 10

As part of an effort to implement a control on E-mail and Web Protections, an organization is monitoring their webserver traffic. Which event should they receive an
alert on?

Accepted Answer

Correct answer: C