Technology Essentials

You need to identify unauthorized modifications to system binaries on a Red Hat Enterprise Linux server. Which tool is best suited for this integrity verification?

What is the function of the 'netstat' command in a Windows environment?

You are tasked with securing a database connection. Which technology is best for ensuring data in transit is encrypted?

You are investigating a network segment using a protocol analyzer. You see traffic with the RST flag set. What does this typically signify?

Which protocol is most appropriate for secure remote management of network infrastructure devices?

Which TWO of the following are essential components of a secure network design for a segmented corporate network?

Which TWO of the following are common indicators of a compromised system found during host-based log analysis?

You are hardening a virtual machine's security. Which action is the most effective way to prevent VM escape attacks?

You have identified a rogue DHCP server on your network. Which switch feature should be implemented to prevent this in the future?

Which TWO of the following are primary security controls for securing virtual machines in a production environment?

When analyzing a virtual machine's security, you note it is using a 'Bridged' network adapter. What is the primary security implication of this configuration?

You are troubleshooting a Windows Server service that refuses to start due to a permission issue. Which tool allows you to audit the effective permissions of the service account against the executable file?

Which THREE of the following are standard best practices for securing cloud infrastructure?

You are auditing a web application server. You discover it is running with high privileges. What is the standard security practice to mitigate this risk?

Which THREE of the following are common steps in performing a security audit of a Linux system?

You are hardening a web server. Which directive in an Apache configuration file helps prevent Clickjacking attacks?

A user reports they cannot access a shared drive. You find the 'Effective Access' is 'Deny'. What is the most likely cause?

In a cloud environment, you are configuring a Security Group for an EC2 instance. To allow only incoming web traffic over HTTPS from a specific subnet, which configuration is most secure?

An analyst needs to verify the hash of a downloaded binary to ensure it has not been tampered with. Which command is used on Windows PowerShell?

Which THREE of the following represent critical areas to inspect when a web application has been suspected of an injection attack?

You are monitoring an AWS environment. A specific IAM role has suddenly started performing anomalous API calls. Which service should you review to see the history of these calls?

In the context of the principle of least privilege, why should you avoid using a root or administrator account for daily system administration?

During a forensic investigation, you find an entry in the Windows Registry under 'Run' keys. How can you determine if this entry is malicious?

Which of the following best describes the function of a 'container runtime' in a virtualization environment?

When reviewing cloud storage buckets, you find one is configured with 'public read access'. What is the risk?

A Windows server shows high disk I/O. Which tool can identify which specific process is performing the most write operations?