Question 251

An organization has the following policy statements:
* AlI emails entering or leaving the organization will be subject to inspection for malware, policy violations, and unauthorized coolant.
* AM network activity will be logged and monitored.
* Confidential data will be tagged and tracked
* Confidential data must never be transmitted in an unencrypted form.
* Confidential data must never be stored on an unencrypted mobile device.
Which of the following is the organization enforcing?
  • Question 252

    During a routine review of service restarts a security analyst observes the following in a server log:

    Which of the following is the GREATEST security concern?
  • Question 253

    A security analyst is concerned about sensitive data living on company file servers following a zero-day attack that nearly resulted in a breach of millions of customer records. The after action report indicates a lack of controls around the file servers that contain sensitive dat a. Which of the following DLP considerations would best help the analyst to classify and address the sensitive data on the file servers?
  • Question 254

    A vulnerability scan came back with critical findings for a Microsoft SharePoint server:

    Which of the following actions should be taken?
  • Question 255

    During a review of vulnerability scan results an analyst determines the results may be flawed because a control-baseline system which is used to evaluate a scanning tools effectiveness was reported as not vulnerable Consequently, the analyst verifies the scope of the scan included the control-baseline host which was available on the network during the scan. The use of a control-baseline endpoint in this scenario assists the analyst in confirming.