Technology Essentials

When analyzing a virtual machine's security, you note it is using a 'Bridged' network adapter. What is the primary security implication of this configuration?

You need to identify unauthorized modifications to system binaries on a Red Hat Enterprise Linux server. Which tool is best suited for this integrity verification?

You are troubleshooting a Windows Server service that refuses to start due to a permission issue. Which tool allows you to audit the effective permissions of the service account against the executable file?

In a cloud environment, you are configuring a Security Group for an EC2 instance. To allow only incoming web traffic over HTTPS from a specific subnet, which configuration is most secure?

During a forensic investigation, you find an entry in the Windows Registry under 'Run' keys. How can you determine if this entry is malicious?

Which protocol is most appropriate for secure remote management of network infrastructure devices?

You are hardening a web server. Which directive in an Apache configuration file helps prevent Clickjacking attacks?

You have identified a rogue DHCP server on your network. Which switch feature should be implemented to prevent this in the future?

You are monitoring an AWS environment. A specific IAM role has suddenly started performing anomalous API calls. Which service should you review to see the history of these calls?

A Windows server shows high disk I/O. Which tool can identify which specific process is performing the most write operations?

Which of the following best describes the function of a 'container runtime' in a virtualization environment?

An analyst needs to verify the hash of a downloaded binary to ensure it has not been tampered with. Which command is used on Windows PowerShell?

You are investigating a network segment using a protocol analyzer. You see traffic with the RST flag set. What does this typically signify?

When reviewing cloud storage buckets, you find one is configured with 'public read access'. What is the risk?

You are tasked with securing a database connection. Which technology is best for ensuring data in transit is encrypted?

A user reports they cannot access a shared drive. You find the 'Effective Access' is 'Deny'. What is the most likely cause?

You are auditing a web application server. You discover it is running with high privileges. What is the standard security practice to mitigate this risk?

Which TWO of the following are essential components of a secure network design for a segmented corporate network?

Which TWO of the following are primary security controls for securing virtual machines in a production environment?

Which TWO of the following are common indicators of a compromised system found during host-based log analysis?

Which THREE of the following are standard best practices for securing cloud infrastructure?

Which THREE of the following represent critical areas to inspect when a web application has been suspected of an injection attack?

Which THREE of the following are common steps in performing a security audit of a Linux system?

You are hardening a virtual machine's security. Which action is the most effective way to prevent VM escape attacks?

What is the function of the 'netstat' command in a Windows environment?

In the context of the principle of least privilege, why should you avoid using a root or administrator account for daily system administration?