Question 166

A customer called a company's security team to report that all invoices the customer has received over the last five days from the company appear to have fraudulent banking details. An investigation
into the matter reveals the following
* The manager of the accounts payable department is using the same password across multiple external websites and the corporate account.
* One of the websites the manager used recently experienced a data breach.
* The manager's corporate email account was successfully accessed in the last five days by an IP address located in a foreign country
Which of the following attacks has MOST likely been used to compromise the manager's corporate account?
  • Question 167

    A Chief Information Security Officer (CISO) is concerned about the organization's ability to continue business operation in the event of a prolonged DDoS attack on its local datacenter that consumes database resources. Which of the following will the CISO MOST likely recommend to mitigate this risk?
  • Question 168

    An organization recently acquired an ISO 27001 certification. Which of the following would MOST likely be considered a benefit of this certification?
  • Question 169

    A security analyst was deploying a new website and found a connection attempting to authenticate on the site's portal.
    While Investigating the incident, the analyst identified the following Input in the username field:


    Which of the following BEST explains this type of attack?
  • Question 170

    A company recently added a DR site and is redesigning the network. Users at the DR site are having issues browsing websites.
    INSTRUCTIONS
    Click on each firewall to do the following:
    Deny cleartext web traffic.
    Ensure secure management protocols are used.
    Resolve issues at the DR site.
    The ruleset order cannot be modified due to outside constraints.
    If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.