Control Implementation

You are setting up an IDS/IPS (e.g., Snort). Where should you place the sensor to monitor both internal and external traffic?

Which type of control is an alarm system installed in a server room?

Which TWO of the following represent best practices for password management?

Which TWO of the following are critical requirements for implementing an effective patch management program?

Which TWO of the following are examples of administrative security controls?

You are configuring a Linux firewall using 'iptables'. Which chain should you use to filter traffic destined for the local host?

Which administrative control is essential before deploying a new security tool to production?

You are deploying a PKI solution using Microsoft AD CS. You need to ensure that compromised certificates can be revoked. What must be configured?

What is the physical security control used to prevent piggybacking at an entry point?

When performing vulnerability management, what is the purpose of a 'credentialed scan'?

Which THREE of the following are steps required to properly decommission a server containing sensitive data?

To ensure compliance with PCI-DSS for a database, you must implement FDE (Full Disk Encryption). Which tool is appropriate for a Linux-based server?

You are implementing Windows AppLocker. You want to ensure that only signed binaries from your organization are executed. Which configuration should you choose?

When implementing an 802.1X environment, what is the role of the RADIUS server?

Which TWO of the following are considered 'technical' security controls?

Which THREE of the following are components of a secure server hardening process?

You are managing access to a file server. You want to ensure that users can read files but not delete them. What is this an example of?

You are configuring a SIEM (e.g., Splunk) to monitor failed login attempts. What is the most efficient way to reduce noise while maintaining audit integrity?

You are hardening a web server. You need to ensure that only secure ciphers are used for TLS connections. Where is this typically configured?

You are configuring an AWS Security Group for a web server. To allow incoming HTTPS traffic from the internet while restricting all other traffic, which rule should you apply?

Which TWO of the following are effective ways to secure endpoints against malware?

When configuring Cisco ASA firewall rules, you notice that traffic is being dropped despite an 'allow' access-list. What is the most likely cause?

You are managing an AWS S3 bucket that stores sensitive PII. Which control is the primary mechanism to prevent public access?

You are implementing Disk Encryption using BitLocker. You want to ensure that the recovery key is stored securely. Where should it be stored?

In VMware vSphere, what is the best practice for securing virtual machine consoles?

You need to enforce MFA on Azure AD (Microsoft Entra ID) users. Which policy type is the most recommended for modern authentication control?

When configuring an email security gateway (e.g., Proofpoint), which record should be added to DNS to prevent domain spoofing?

Which TWO of the following are recommended practices for managing firewall rules?

Which THREE of the following are elements of a secure incident response control set?

Which TWO of the following are examples of physical security controls?

Which document is used to standardize the implementation of security controls across an organization?

You are securing a database server. What is the most effective administrative control to minimize the impact of a compromised DBA account?

A developer needs to access a production server. To maintain the highest level of security, how should you implement this access?

You are deploying an EDR (Endpoint Detection and Response) solution. Which configuration minimizes false positives while maintaining visibility?