Question 1

The customer is responsible only for which type of security when using a SaaS application?

Accepted Answer

Correct answer: C

Question 2

Under which category does an application that is approved by the IT department, such as Office 365, fall?

Accepted Answer

Correct answer: D

Question 3

Which TCP/IP sub-protocol operates at the Layer7 of the OSI model?

Accepted Answer

Application (Layer 7 or L7): This layer identifies and establishes availability of communication partners, determines resource availability, and synchronizes
communication.
Presentation (Layer 6 or L6): This layer provides coding and conversion functions (such as data representation, character conversion, data compression, and data
encryption) to ensure that data sent from the Application layer of one system is compatible with the Application layer of the receiving system.
Session (Layer 5 or L5): This layer manages communication sessions (service requests and service responses) between networked systems, including connection
establishment, data transfer, and connection release.
Transport (Layer 4 or L4): This layer provides transparent, reliable data transport and end-to-end transmission control.

Question 4

Which option would be an example of PII that you need to prevent from leaving your enterprise network?

Accepted Answer

Correct answer: A

Question 5

What are three benefits of SD-WAN infrastructure? (Choose three.)

Accepted Answer

Simplicity: Because each device is centrally managed, with routing based on application policies, WAN managers can create and update security rules in real time
as network requirements change. Also, when SD-WAN is combined with zero-touch provisioning, a feature that helps automate the deployment and
configuration processes, organizations can further reduce the complexity, resources, and operating expenses required to spin up new sites. Improved
performance: By allowing efficient access to cloud-based resources without the need to backhaul traffic to centralized locations, organizations can provide a better
user experience.

Question 6

Which attacker profile uses the internet to recruit members to an ideology, to train them, and to spread fear and include panic?

Accepted Answer

Correct answer: CE

Question 7

Order the OSI model with Layer7 at the top and Layer1 at the bottom.

Accepted Answer

Correct answer: A

Question 8

Which term describes data packets that move in and out of the virtualized environment from the host network or a corresponding traditional data center?

Accepted Answer

Correct answer: A

Question 9

Which method is used to exploit vulnerabilities, services, and applications?

Accepted Answer

Attack communication traffic is usually hidden with various techniques and tools, including:
Encryption with SSL, SSH (Secure Shell), or some other custom or proprietary encryption Circumvention via proxies, remote access tools, or tunneling. In some
instances, use of cellular networks enables complete circumvention of the target network for attack C2 traffic. Port evasion using network anonymizers or port
hopping to traverse over any available open ports
Fast Flux (or Dynamic DNS) to proxy through multiple infected endpoints or multiple, ever-changing C2 servers to reroute traffic and make determination of the
true destination or attack source difficult
DNS tunneling is used for C2 communications and data infiltration

Question 10

Which type of malware takes advantage of a vulnerability on an endpoint or server?

Accepted Answer

Correct answer: A