SecurityX (Extended) Practice Questions

A security engineer is designing a logging and monitoring solution for a serverless application built with AWS Lambda and API Gateway. The requirements are to centralize application and execution logs, enable real-time analysis of error rates, and create automated alerts for specific security events (e.g., a sudden spike in 4xx error codes). Which combination of AWS services would be the MOST effective and integrated solution to meet these requirements?

During an incident response, an analyst discovers that an attacker has gained access to a DevOps engineer's credentials and is attempting to alter the CI/CD pipeline. The goal is to insert malicious code into a container image during the build process. Which of the following security controls would be MOST effective at preventing the compromised credentials from being used to push a malicious image to the container registry?

A security operations team has been tasked with improving its ability to detect insider threats. The team needs to identify anomalous user behavior, such as an employee accessing sensitive files they have never accessed before, logging in at unusual hours, or exfiltrating large amounts of data. The solution must integrate with Active Directory, file servers, and cloud application logs. Which security technology is specifically designed to address this requirement?

A hospital is designing a network architecture to protect its sensitive electronic health record (EHR) systems while allowing connectivity for medical IoT devices (e.g., infusion pumps, heart monitors) and guest Wi-Fi. The primary goals are to prevent lateral movement from less trusted devices to the critical EHR systems and to enforce strict access controls. Which network design principle is MOST critical to implement?

A GRC analyst is creating a RACI matrix for the company's new vulnerability management program to clarify roles and responsibilities. For the task 'Approve Emergency Patch Deployment,' which role should be assigned as 'Accountable'?

A company plans to implement a research facility with intellectual property data that should be protected. The following is the security diagram proposed by the security architect:Which of the following security architect models is illustrated by the diagram?

A financial technology firm works collaboratively with business partners in the industry to share threat intelligence within a central platform. This collaboration gives partner organizations the ability to obtain and share data associated with emerging threats from a variety of adversaries. Which of the following should the organization most likely leverage to facilitate this activity? (Choose two.) A.CWPPB.YARAC.ATT&CKD.STIXE.TAXIIF.JTAG

During a gap assessment, an organization notes that BYOD usage is a significant risk. The organization implemented administrative policies prohibiting BYOD usage. However, the organization has not implemented technical controls to prevent the unauthorized use of BYOD assets when accessing the organization's resources. Which of the following solutions should the organization implement to best reduce the risk of BYOD devices? (Choose two.) A.Cloud IAM, to enforce the use of token-based MFAB.Conditional access, to enforce user-to-device bindingC.NAC, to enforce device configuration requirementsD.PAM, to enforce local password policiesE.SD-WAN, to enforce web content filtering through external proxiesF.DLP, to enforce data protection capabilities

A security administrator is performing a gap assessment against a specific OS benchmark. The benchmark requires the following configurations be applied to endpoints:• Full disk encryption• Host-based firewall• Time synchronization• Password policies• Application allow listing• Zero Trust application accessWhich of the following solutions best addresses the requirements? (Choose two.)

A global organization is reviewing potential vendors to outsource a critical payroll function. Each vendor's plan includes using local resources in multiple regions to ensure compliance with all regulations. The organization's Chief Information Security Officer is conducting a risk assessment on the potential outsourcing vendors' subprocessors. Which of the following best explains the need for this risk assessment? A.Risk mitigations must be more comprehensive than the existing payroll provider.B.Due care must be exercised during all procurement activities.C.The responsibility of protecting PII remains with the organization.D.Specific regulatory requirements must be met in each jurisdiction.