NO SHOW MONDAY
Analyze and select the statements that accurately distinguish the differences between Mean Time to Failure (MTTF) and Mean Time Between Failures (MTBF).
Non-repairable assets use an MTTF, while an MTBF would describe a server.
The MTBF and MTTF calculations are different for the same tests.
Two technology firms are in preliminary discussions to work together on several projects. The goal of the joint venture entails providing support services to a wider customer base as an entity with shared resources. Each firm has its own customer base, custom-branded products, and established processes. Evaluating the current situation between the two
firms, which type of agreement should they put in place?
Memorandum of Understanding (MOU)
A hardware manufacturer has created a new USB storage device. Before its release to market, the manufacturer found a vulnerability. As a result, the company immediately placed an internal change management process for quality assurance procedures. Based on the scenario, what approach is the manufacturer implementing?
Proactive
Analyze and select the statement that accurately distinguishes the similarities between Mean Time to Failure (MTTF) and Mean Time Between Failures (MTBF)?
Both MTTF and MTBF can determine the amount of asset redundancy a system should have.
Employees in a company are required to complete an annual security awareness and prevention course. Each quarter, the employees participate in computer-based disaster and recovery exercises. Employees are continuously subjected to phishing campaigns to test the likelihood of exploitation. What method is the company using to encourage the employees to retain vital security information?
Diversity
A wireless access point (WAP) resides in the middle of an office area. A network administrator wants to gather information about data packets coming through the WAP for subsequent examination. Which of the following will provide the minimum level of support for completion of this task?
A packet sniffer
A network administrator is setting up new address pools on a Dynamic Host Configuration Protocol (DHCP) server and is having difficulty remembering available Internet Protocol (IP) addresses. Which of the following would make the management of allocated IP addresses on the network easier?
An IPAM service
Which command in MS Windows displays a table consisting of IP addresses and their resolved physical addresses?
arp -a
Which command-line command in MS Windows is used to display the contents of a routing table?
route print
A security manager sends employees an email that has a forged FROM block to look like it is coming from the CEO of the company. The email requests that the employees click on the link to annotate their weekly activity. However, the link redirects the employees to an automated malware download, which notifies them to report to the training room for additional security training. Which type of training technique did the security manager send?
Phishing campaign
A malware security breach occurred at a small firm. A maintenance agreement put in place by the IT support company has not been honored since numerous security updates were missing on all computer systems. When reviewing company agreements, which type is for support?
SLA
What command visualizes the general NetFlow data on the command line?
Show ip cache flow
The Department of Defense issues a mandate that within 365 days they will no longer support Internet Explorer. This includes application software, servers, and standard desktop configurations throughout the department. Which of the following does the mandate imply?
EOSL
A wireless AP (access point) is placed on a table on the corner of an office floor with many furniture items and cubicles. Which of the following is most likely causing a weak or loss of signal in some areas of the office? (Select
Furniture is absorbing the signal
AP is in the wrong location
A network engineer is determining where an antenna should be installed on the businesses' property. What is the engineer considering when they refer to the orientation of the wave propagating from the antenna?
Polarization
A new job has become available at a firm that utilizes several important databases. The new job is ultimately responsible for enforcing access control and data encryption. Analyze the job titles and consider the responsibilities of each. Which job role has most likely become available?
Data custodian
A multinational company is assessing risk appetite and how risks could affect mission essential functions in different regions, such as complying with local regulations and licensing to avoid financial risk or addressing security risks, and adjusting risk posture to compensate. Recommend a tool or technology that will help the assessment team find solutions to security challenges categorized by regulatory requirements and their impacts on risk posture.
risk matrix
Which of the following are included in a quantitative risk assessment?
SLE
ARO
ALE
An information security officer creates a document that identifies downtime, likelihood of occurrence, the probable impact of the downtime, and steps to mitigate the downtime and scores the likelihood based on defined security controls. What is the information security officer creating?
Risk register
During quarterly training, systems administrators must complete computer-based training that instructs them to recreate the company’s secure infrastructure, using a drag and drop feature. This training ensures the administrators understand the infrastructure and the devices used to secure it. Which of the following best describes the training technique?
Gamification
Which data and privacy law ensures executives within a financial institution take individual responsibility for the accuracy of financial reporting?
SOX
The Gramm-Leach-Bliley Act (GLBA) requires that a financial institution safeguard sensitive customer data. In order to comply with the regulation, the institution implements a database de-identification method that replaces social security numbers in a data field with randomly generated gestures. Which of the following de-identification methods did the company implement to comply with the GLBA?
Tokenization
Which study aims to identify vulnerabilities that may lead to the data breach of personal information and to evaluate controls mitigating those risks?
Privacy Impact Assessment (PIA)
What is the goal of a hacker who infiltrates an Information Technology (IT) company's network using a spear phishing technique and attempts to steal sensitive data related to new and developing technologies?
IP theft
A network manager cannot communicate with a system on the network that has an Internet Protocol (IP) address of 192.150.060.024. The manager uses the ping command and can reach the IP address. Recommend a command the network manager can use for troubleshooting the issue.
arp -a 192.150.060.024