Question 1

As part of a cybersecurity training simulation, you are analyzing traffic logs for suspicious activities targeting a web application. Your task is to identify SQL injection techniques commonly used by attackers. Which two of the following are examples of SQL injection techniques? (Choose two)

Options :

A : Command injection

B : Union-based SQL injection

C : DNS tunneling

D : Error-based SQL injection

E : Cross-site scripting (XSS)

Answer: B,D

Question 2

A cybersecurity analyst is configuring a Security Information and Event Management (SIEM) solution for an organization. Which of the following best describes a primary function of a SIEM in security operations?

Options :

A : Conducting penetration tests to assess the effectiveness of security controls.

B : Automatically blocking malicious IP addresses in real time.

C : Performing vulnerability scans and generating patch recommendations.

D : Correlating and analyzing logs from multiple sources to detect potential threats.

Answer: D

Question 3

A financial organization is developing its Security Operations strategy. They need to ensure it aligns with the key pillars of effective security operations while addressing business objectives. Which of the following measures best demonstrates aligning security operations with business priorities?

Options :

A : Implementing a threat intelligence system that focuses only on external attacks, disregarding internal risks.

B : Establishing a process for the Security Operations Center (SOC) to assess risks based on business-critical assets and prioritizing incident responses accordingly.

C : Regularly updating firewalls to meet compliance requirements without engaging other business units.

D : Conducting security drills with only the IT team and excluding non-technical business stakeholders.

Answer: B

Question 4

Which of the following devices primarily operates at Layer 2 of the OSI model and is responsible for forwarding data based on MAC addresses?

Options :

A : Switch

B : Firewall

C : Hub

D : Router

Answer: A

Question 5

A company is concerned about employees accessing unauthorized websites during work hours, potentially exposing the organization to security risks or productivity loss. Which of the following best describes the primary function of URL filtering in a network security solution?

Options :

A : Encrypting web traffic to ensure secure communication with websites.

B : Blocking all external traffic to the internet to prevent malware attacks.

C : Monitoring user activity on the network without enforcing restrictions.

D : Allowing or denying access to websites based on their categorization.

Answer: D

Confidently Practice Online with Free Cybersecurity-Apprentice Exam Cram

Buying Options: