Question 1

Which of the following methods is most effective for detecting a command-and-control (C2) communication channel in a compromised network?

Options :

A : Using endpoint detection tools to identify unauthorized USB device connections.

B : Scanning email attachments for known malware signatures.

C : Blocking all internet access from the internal network to prevent potential C2 channels.

D : Monitoring network traffic for abnormal outbound connections to uncommon or suspicious domains.

Answer: D

Question 2

A financial services company is migrating its workloads to a cloud-native environment. To ensure robust security, they are considering using a Cloud Native Security Platform (CNSP). Which of the following best aligns with a core tenet of CNSP for securing workloads in a dynamic, multi-cloud environment?

Options :

A : Focusing solely on north-south network traffic inspection between workloads

B : Providing static, signature-based threat detection for workloads in the cloud

C : Applying runtime protection to identify and block anomalous workload behavior

D : Deploying agentless security tools to maintain minimal resource utilization

Answer: C

Question 3

How does TLS ensure the confidentiality of the session key during the handshake process?

Options :

A : The session key is shared over an encrypted channel established by the server’s certificate.

B : The client sends the session key encrypted with the server’s private key.

C : The session key is pre-shared before the handshake begins.

D : The session key is derived independently by both parties using shared secrets.

Answer: D

Question 4

Your organization uses a host-based security architecture to secure virtual machines in a multi-cloud environment. You are tasked with designing a security strategy for monitoring and protecting each host. Which of the following is the most critical component of a host-based security solution in this scenario?

Options :

A : Cloud Service Provider’s Shared Responsibility Model

B : Perimeter Firewalls

C : Host-based Intrusion Detection System (HIDS)

D : Virtual Private Network (VPN) Connections

Answer: C

Question 5

Your organization uses a Cloud Native Security Platform (CNSP) to ensure compliance with regulatory standards. Which capability is most critical for automating compliance in a multi-cloud environment?

Options :

A : Real-time compliance reporting integrated with cloud-native tools like AWS Config and Azure Policy

B : Manual tagging of compliant and non-compliant resources

C : Focusing on securing only production workloads while ignoring development environments

D : Setting up individual compliance scripts for each cloud environment

Answer: A

Confidently Practice Online with Free Cybersecurity-Practitioner Exam Cram

Buying Options: