Control Implementation

When configuring Cisco ASA firewall rules, you notice that traffic is being dropped despite an 'allow' access-list. What is the most likely cause?

You are implementing Windows AppLocker. You want to ensure that only signed binaries from your organization are executed. Which configuration should you choose?

You are configuring a SIEM (e.g., Splunk) to monitor failed login attempts. What is the most efficient way to reduce noise while maintaining audit integrity?

To ensure compliance with PCI-DSS for a database, you must implement FDE (Full Disk Encryption). Which tool is appropriate for a Linux-based server?

You are configuring an AWS Security Group for a web server. To allow incoming HTTPS traffic from the internet while restricting all other traffic, which rule should you apply?

You are setting up an IDS/IPS (e.g., Snort). Where should you place the sensor to monitor both internal and external traffic?

You are deploying a PKI solution using Microsoft AD CS. You need to ensure that compromised certificates can be revoked. What must be configured?

You need to enforce MFA on Azure AD (Microsoft Entra ID) users. Which policy type is the most recommended for modern authentication control?

When implementing an 802.1X environment, what is the role of the RADIUS server?

In VMware vSphere, what is the best practice for securing virtual machine consoles?

You are securing a database server. What is the most effective administrative control to minimize the impact of a compromised DBA account?

You are managing an AWS S3 bucket that stores sensitive PII. Which control is the primary mechanism to prevent public access?

What is the physical security control used to prevent piggybacking at an entry point?

A developer needs to access a production server. To maintain the highest level of security, how should you implement this access?

You are configuring a Linux firewall using 'iptables'. Which chain should you use to filter traffic destined for the local host?

When performing vulnerability management, what is the purpose of a 'credentialed scan'?

You are deploying an EDR (Endpoint Detection and Response) solution. Which configuration minimizes false positives while maintaining visibility?

Which administrative control is essential before deploying a new security tool to production?

Which type of control is an alarm system installed in a server room?

You are hardening a web server. You need to ensure that only secure ciphers are used for TLS connections. Where is this typically configured?

When configuring an email security gateway (e.g., Proofpoint), which record should be added to DNS to prevent domain spoofing?

You are managing access to a file server. You want to ensure that users can read files but not delete them. What is this an example of?

Which document is used to standardize the implementation of security controls across an organization?

You are implementing Disk Encryption using BitLocker. You want to ensure that the recovery key is stored securely. Where should it be stored?

Which TWO of the following are examples of physical security controls?

Which TWO of the following represent best practices for password management?

Which TWO of the following are considered 'technical' security controls?

Which TWO of the following are recommended practices for managing firewall rules?

Which TWO of the following are examples of administrative security controls?

Which TWO of the following are critical requirements for implementing an effective patch management program?

Which THREE of the following are steps required to properly decommission a server containing sensitive data?

Which THREE of the following are components of a secure server hardening process?

Which TWO of the following are effective ways to secure endpoints against malware?

Which THREE of the following are elements of a secure incident response control set?