Question 216

A security analyst received several service tickets reporting that a company storefront website is not accessible by internal domain users. However, external users are accessing the website without issue. Which of the following is the MOST likely reason for this behavior?
  • Question 217

    After a breach involving the exfiltration of a large amount of sensitive data, a security analyst is reviewing the following firewall logs to determine how the breach occurred:

    Which of the following IP addresses does the analyst need to investigate further?
  • Question 218

    Organizational policies require vulnerability remediation on severity 7 or greater within one week.
    Anything with a severity less than 7 must be remediated within 30 days. The organization also requires security teams to investigate the details of a vulnerability before performing any remediation. If the investigation determines the finding is a false positive, no remediation is performed and the vulnerability scanner configuration is updates to omit the false positive from future scans:
    The organization has three Apache web servers:

    The results of a recent vulnerability scan are shown below:

    The team performs some investigation and finds a statement from Apache:

    Which of the following actions should the security team perform?
  • Question 219

    An organization needs to limit its exposure to accidental disclosure when employees send emails that contain personal information to recipients outside the company Which of the following technical controls would BEST accomplish this goal?
  • Question 220

    A security analyst was alerted to a tile integrity monitoring event based on a change to the vhost-paymonts .conf file The output of the diff command against the known-good backup reads as follows

    Which of the following MOST likely occurred?