QUESTION: 153

Which of the following are measures that should be taken when a data breach occurs? (Select TWO).

Restore the data from backup.
Disclose the incident.
Disable unnecessary ports.
Run an antivirus scan.
Identify the exploited vulnerability.
Move the data to a different location.

Answer(s): B,E

Explanation:

These are two measures that should be taken when a data breach occurs. A data breach is an unauthorized or illegal access to confidential or sensitive data by an internal or external actor. A data breach can result in financial losses, reputational damage, legal liabilities, and regulatory penalties for the affected organization. Disclosing the incident is a measure that involves informing the relevant stakeholders, such as customers, employees, partners, regulators, and law enforcement, about the nature, scope, and impact of the data breach. Disclosing the incident can help to mitigate the negative consequences of the data breach, comply with legal obligations, and restore trust and confidence. Identifying the exploited vulnerability is a measure that involves investigating and analyzing the root cause and source of the data breach. Identifying the exploited vulnerability can help to prevent further data loss, remediate the security gaps, and improve the security posture of the organization. Restoring the data from backup is a measure that involves recovering the lost or corrupted data from a secondary storage device or location. However, this does not address the underlying issue of how the data breach occurred or prevent future breaches. Disabling unnecessary ports is a measure that involves closing or blocking network communication endpoints that are not required for legitimate purposes. However, this does not address how the data breach occurred or what vulnerability was exploited. Running an antivirus scan is a measure that involves detecting and removing malicious software from a system or network. However, this does not address how the data breach occurred or what vulnerability was exploited. Moving the data to a different location is a measure that involves transferring the data to another storage device or location that may be more secure or less accessible. However, this does not address how the data breach occurred or what vulnerability was exploited.

Reference:

https://www.howtogeek.com/428483/what-is-end-to-end- encryption-and-why-does-it-matter/ https://www.howtogeek.com/202794/what-is-the-difference- between-127.0.0.1-and-0.0.0.0/ https://www.howtogeek.com/443611/how-to-encrypt-your-macs- system-drive-removable-devices-and-individual-files/

Reveal Solution Next Question

QUESTION: 154

DRAG DROP (Drag and Drop is not supported)
A recent power Outage caused email services to go down. A sever administrator also received alerts from the datacenter's UPS.
After some investigation, the server administrator learned that each POU was rated at a maximum Of 12A.

INSTRUCTIONS
Ensure power redundancy is implemented throughout each rack and UPS alarms are resolved.
Ensure the maximum potential PDU consumption does not exceed 80% or 9.6A).

a) PDU selections must be changed using the pencil icon.
b) VM Hosts 1 and 2 and Mail Relay can be moved between racks.
c) Certain devices contain additional details

See Explanation section for answer.

Answer(s): A

Explanation:

1. Mailrelay - Keep the mail relay on the existing Rack1 and change the primary power supply to PDU-B and Failover powersupply as PDU B.
2. Move the VM Host 1 and VM Host2 to Rack2.
Assign primary power supply PDU A to VM host1
Assign Failover power supply PDU B to VM host1
Assign primary power supply PDU B to VM host2
Assign Failover power supply PDU A to VM host2

Reveal Solution Next Question

QUESTION: 155

An organization implements split encryption keys for sensitive files.
Which of the following types of risks does this mitigate?

Hardware failure
Marware
Data corruption
Insider threat

Answer(s): D

Explanation:

An insider threat is a type of risk that can be mitigated by implementing split encryption keys for sensitive files. An insider threat is a malicious actor who has authorized access to an organization's system or data and uses it for unauthorized or harmful purposes. An insider threat can cause data breaches, sabotage, fraud, theft, espionage, or other damages to the organization. Split encryption keys are a method of encrypting data using multiple keys that are stored separately and require collaboration to decrypt. Split encryption keys can prevent an insider threat from accessing or compromising sensitive data without being detected by another authorized party who holds another key. Hardware failure is a type of risk that involves physical damage or malfunction of hardware components such as hard drives, memory modules, power supplies, or fans. Hardware failure can cause data loss, system downtime, performance issues, or other problems for the organization. Hardware failure cannot be mitigated by split encryption keys, but by backup, redundancy, monitoring, and maintenance measures.

Reveal Solution Next Question

QUESTION: 156

A data center employee shows a driver's license to enter the facility Once the employee enters, the door immediately doses and locks, triggering a scale that then weighs the employee before granting access to another locked door. This is an example of.

mantrap.
a bollard
geofencing
RFI

Answer(s): A

Explanation:

A mantrap is a security device that consists of a small space with two sets of interlocking doors, such that the first set of doors must close before the second one opens. A mantrap can be used to control access to a data center by verifying the identity and weight of the person entering. A bollard is a sturdy post that prevents vehicles from entering a restricted area. Geofencing is a technology that uses GPS or RFID to create a virtual boundary around a location and trigger an action when a device crosses it. RFID is a technology that uses radio waves to identify and track objects or people.

Reference:

https://www.techopedia.com/definition/16293/mantrap https://www.techopedia.com/definition/1437/bollard https://www.techopedia.com/definition/23961/geofencing https://www.techopedia.com/definition/506/radio-frequency-identification-rfid

Reveal Solution Next Question

Free SK0-005 Exam Braindumps (page: 39)

QUESTION: 153

Explanation:

Reference:

QUESTION: 154

Explanation:

QUESTION: 155

Explanation:

QUESTION: 156

Explanation:

Reference: