HikeLetter | PMP Training & Certification Online Course | Project Management Learning

1

During a security assessment, consider: A company wants to reduce account takeover risk. Which control is most effective to add to passwords?

A. Multifactor authentication (MFA). B. Disable all security controls until the issue is resolved. C. Ignore the issue unless it immediately interrupts business operations. D. Share credentials or sensitive data with any requester who claims urgency.

2

During a security assessment, consider: An employee receives a message asking them to urgently sign in through a shortened link. What should they do?

A. Share credentials or sensitive data with any requester who claims urgency. B. Avoid the link, verify the request through a trusted channel, and report the message. C. Disable all security controls until the issue is resolved. D. Ignore the issue unless it immediately interrupts business operations.

3

During a security assessment, consider: A server is missing a critical security patch. What should the security team do?

A. Ignore the issue unless it immediately interrupts business operations. B. Share credentials or sensitive data with any requester who claims urgency. C. Assess exposure and business impact, prioritize remediation, and apply a tested patch or mitigation. D. Disable all security controls until the issue is resolved.

4

During a security assessment, consider: Which control most directly limits what a compromised user account can access?

A. Disable all security controls until the issue is resolved. B. Ignore the issue unless it immediately interrupts business operations. C. Share credentials or sensitive data with any requester who claims urgency. D. Least privilege and role-based access control.

5

During a security assessment, consider: A security team needs to protect data if a laptop is stolen. Which control helps most?

A. Full-disk encryption combined with strong authentication and device management. B. Disable all security controls until the issue is resolved. C. Ignore the issue unless it immediately interrupts business operations. D. Share credentials or sensitive data with any requester who claims urgency.

6

During a security assessment, consider: An alert indicates possible malware execution on an endpoint. What should the analyst do first?

A. Share credentials or sensitive data with any requester who claims urgency. B. Follow incident response procedures and contain the endpoint as appropriate. C. Disable all security controls until the issue is resolved. D. Ignore the issue unless it immediately interrupts business operations.

7

During a security assessment, consider: Which solution helps identify and correlate security events across multiple systems?

A. Ignore the issue unless it immediately interrupts business operations. B. Share credentials or sensitive data with any requester who claims urgency. C. Security information and event management (SIEM). D. Disable all security controls until the issue is resolved.

8

During a security assessment, consider: A company needs to verify the integrity of a downloaded file. What should it compare?

A. Ignore the issue unless it immediately interrupts business operations. B. Share credentials or sensitive data with any requester who claims urgency. C. A cryptographic hash calculated for the file against a trusted reference hash. D. Disable all security controls until the issue is resolved.

9

During a security assessment, consider: A public-facing service must remain available during a denial-of-service attack. Which service can help absorb malicious traffic?

A. Disable all security controls until the issue is resolved. B. gnore the issue unless it immediately interrupts business operations. C. Share credentials or sensitive data with any requester who claims urgency. D. A DDoS protection service with traffic filtering and rate controls.

10

During a security assessment, consider: A developer places API keys directly in source code. What is the best corrective action?

A. Remove the exposed secrets, rotate them, and store future secrets in an approved secrets manager. B. Disable all security controls until the issue is resolved. C. Ignore the issue unless it immediately interrupts business operations. D. Share credentials or sensitive data with any requester who claims urgency.

Security+

Overview

Course Description

Course Questions