QUESTION: 205

An organization’s Chief Financial Officer (CFO) was the target of several different social engineering attacks recently. The CFO has subsequently worked closely with the Chief Information Security Officer (CISO) to increase awareness of what attacks may look like. An unexpected email arrives in the CFO’s inbox from a familiar name with an attachment. Which of the following should the CISO task a security analyst with to determine whether or not the attachment is safe?

Place it in a malware sandbox.
Perform a code review of the attachment.
Conduct a memory dump of the CFO’s P
Run a vulnerability scan on the email server.

Answer(s): A

Reveal Solution Next Question

QUESTION: 206

A Chief Information Security Officer (CISO) is reviewing technical documentation from various regional offices and notices some key differences between these groups. The CISO has not discovered any governance documentation. The CISO creates the following chart to visualize the differences among the networking used:

Which of the following would be the CISO’s MOST immediate concern?

There are open standards in use on the network.
Network engineers have ignored defacto standards.
Network engineers are not following SOPs.
The network has competing standards in use.

Answer(s): D

Reveal Solution Next Question

QUESTION: 207

A security architect has been assigned to a new digital transformation program. The objectives are to provide better capabilities to customers and reduce costs. The program has highlighted the following requirements:

1. Long-lived sessions are required, as users do not log in very often.
2. The solution has multiple SPs, which include mobile and web applications.
3. A centralized IdP is utilized for all customer digital channels.
4. The applications provide different functionality types such as forums and customer portals.
5. The user experience needs to be the same across both mobile and web-based applications.

Which of the following would BEST improve security while meeting these requirements?

Social login to IdP, securely store the session cookies, and implement one-time passwords sent to the mobile device
Certificate-based authentication to IdP, securely store access tokens, and implement secure push notifications.
Username and password authentication to IdP, securely store refresh tokens, and implement context-aware authentication.
Username and password authentication to SP, securely store Java web tokens, and implement SMS OTPs.

Answer(s): A

Reveal Solution Next Question