Podcast
Questions and Answers
What should the company do to assign different DLP rules based on the type of data hosted on the file server?
What should the company do to assign different DLP rules based on the type of data hosted on the file server?
- Use the same DLP rules for all types of data
- Ignore the data types and use generic DLP rules
- Rely on manual checks to assign DLP rules
- Implement classification-based DLP rules (correct)
Which policy should the CISO use to prevent someone from using the exfiltrated credentials?
Which policy should the CISO use to prevent someone from using the exfiltrated credentials?
- Single sign-on policy
- Password complexity policy
- Password rotation policy (correct)
- Account lockout policy
What type of certificate should the company implement to simplify the certificate management process for its domain and subdomains?
What type of certificate should the company implement to simplify the certificate management process for its domain and subdomains?
- EV SSL certificate
- Code signing certificate
- Self-signed certificate
- Wildcard certificate (correct)
What type of attack is described when a user is presented with a certificate mismatch warning from the browser?
What type of attack is described when a user is presented with a certificate mismatch warning from the browser?
What is the BEST solution to provide increased scalability and flexibility for back-end infrastructure without disrupting services?
What is the BEST solution to provide increased scalability and flexibility for back-end infrastructure without disrupting services?
Which social engineering technique seeks to exploit a person's sense of urgency?
Which social engineering technique seeks to exploit a person's sense of urgency?
What should a security professional implement to satisfy both the CPO's and the development team's requirements regarding the use of PII in the development environment?
What should a security professional implement to satisfy both the CPO's and the development team's requirements regarding the use of PII in the development environment?
