Blog

Marcella has been hired to perform an audit of a security incident where a large corporation was using an open-source application that they had deployed to a cloud service provider. The application was used to manage the many people whose information it tracked and included a lot of identifying information about them that could be used in identity fraud. Unfortunately, the person that installed the application never removed the default administrative account that was still using the default password. Which of the following describes this scenario?

Lara is trying to decide on a protocol to use for a VPN to connect from one cloud service provider to another. She knows there are a variety of protocols out there that can be used for VPNs but wants to make sure she chooses one that both cloud service providers support and that can be combined with IPsec. Which of the following protocols would she most likely need to choose?

Lyle’s manager has asked him to implement micro-segmentation for his company’s cloud deployment. He wasn’t very familiar with this term and upon researching, came across the reasoning to implement this as being that nothing should be trusted in a cloud environment and every system, communication, and user is considered a threat until proven otherwise. To which of the following concepts does this relate?

Joy has received several complaints that none of the users can access the company’s resources that are hosted on a cloud service provider. The company has a piece of hardware installed that provides a VPN tunnel to the CSP. Upon entering the data center, she sees that all the lights are off on the device. She unplugs it and plugs it back in and does not see any changes. Which of the following has most likely occurred?

Adrienne wants to be able to analyze the traffic coming into a Linux server’s network interface. Which of the following command line utilities will allow her to see this information?

Colm is designating the QoS level to the messages on his corporation’s network and has determined a certain type of message should be delivered exactly once when it is sent. Which QoS level should he designate these messages?

Sebastian is trying to access a resource that has been labeled as top secret, but he only has secret clearance. Which of the following access control methods does his organization use?

One of the sales managers has requested improvements to one of the online programs his team uses from the development team. The development team manager told him that although he had made several excellent proposals, they couldn’t be implemented without following the prescribed procedure. What should the development manager request from the sales manager?

Emily has just migrated the email from the company’s on-premises data center to a cloud service provider. She has modified the appropriate A records, but e-mail isn’t being delivered to the new servers. Which of the following records does she still need to modify?

Rose is implementing digital certificates for all of the users in her organization. Which of the following certificate types should she use?