1. You need to implement a solution to protect internet-facing applications from common attacks like XSSm CSRF, and SQL injection. Which option is best suited to the task?

2. Which aspect of cybersecurity do Distributed Denial of Service (DDoS) attacks affect the most?

3. You choose a cybersecurity framework for your financial organization that implements an effective and auditable set of governance and management processes for IT. Which framework are you choosing?

4. What is the name for a short-term interruption in electrical power supply?

5. Site-to-site VPN provides access from one network address space (192.168.0.0/24) to another network address space '
\_'.Site-to-site VPN provides access from one network address space (192.168.0.0/24) to another network address space '
\_'.

6. Which type of security assessment requires access to source code?

7. You are researching probable threats to your company’s internet-facing web applications. Which organization should you reference as an authoritative source for information on web-based attack vectors?You are researching probable threats to your company’s internet-facing web applications. Which organization should you reference as an authoritative source for information on web-based attack vectors?

8. You have been tasked with recommending a solution to centrally manage mobile devices used throughout your organization. Which technology would best meet this need?

9. SQL injection inserts a code fragment that makes a database statement universally true, like '\_'.

10. Which phase of the incident response process happens immediately following identification?

11. Which list correctly describes risk management techniques?

12. In 2014, 4,278 IP addresses of zombie computers were used to flood a business with over one million packets per minute for about one hour. What is this type of attack called?

13. You need to recommend a solution to automatically assess your cloud-hosted VMs against CIS benchmarks to identify deviations from security best practices. What type of solution should you recommend?

14. Which main reference coupled with the Cloud Security Alliance Guidance comprise the Security Guidance for Critical Areas of Focus in Cloud Computing?

15. Which type of attack targets vulnerabilities associated with translating MAC addresses into IP addresses in computer networking?

16. Which security control scheme do vendors often submit their products to for evaluation, to provide an independent view of product assurance?

17. Which is an example of privacy regulation at the state government level in the U.S.?

18. Which option describes a core principle of DevSecOps?

19. You believe a recent service outage due to a denial-of-service attack from a disgruntled inside source. What is the name for the malicious act this employee has committed?

20. You organization is conducting a pilot deployment of a new e-commerce application being considered for purchase. You need to recommend a strategy to evaluate the security of the new software. Your organization does not have access to the application's source code.
#### Which strategy should you choose?

21. You have recovered a server that was compromised in a malware attack to its previous state. What is the final step in the incident response process?

22. Where would you record risks that have been identified and their details, such as their ID and name, classification of information, and the risk owner?

23. The regulatory requirements for notifications of data breaches, particularly the European General Data Protection Regulations, have had what sort of effect on business?

24. What is the process of challenging a user to prove their identity?

25. Which encryption type uses a public and private key pair for encrypting and decrypting data?