A company is outsourcing to an MSSP that performs managed detection and response
services. The MSSP requires a server to be placed inside the network as a log aggregate
and allows remote access to MSSP analyst. Critical devices send logs to the log
aggregator, where data is stored for 12 months locally before being archived to a
multitenant cloud. The data is then sent from the log aggregate to a public IP address in the
MSSP datacenter for analysis.

A security engineer is concerned about the security of the solution and notes the following.
* The critical devise send cleartext logs to the aggregator.
* The log aggregator utilize full disk encryption.
* The log aggregator sends to the analysis server via port 80.
* MSSP analysis utilize an SSL VPN with MFA to access the log aggregator remotely.
* The data is compressed and encrypted prior to being achieved in the cloud.
Which of the following should be the engineer’s GREATEST concern?

A company is implementing SSL inspection. During the next six months, multiple web
applications that will be separated out with subdomains will be deployed.
Which of the following will allow the inspection of the data without multiple certificate
deployments?

A Chief Information Officer is considering migrating all company data to the cloud to save
money on expensive SAN storage.
Which of the following is a security concern that will MOST likely need to be addressed
during migration?

A security engineer thinks the development team has been hard-coding sensitive
environment variables in its code.
Which of the following would BEST secure the company’s CI/CD pipeline?

A company is preparing to deploy a global service.
Which of the following must the company do to ensure GDPR compliance? (Choose two.)

Which of the following protocols is a low power, low data rate that allows for the creation of
PAN networks?

A security analyst is reviewing network connectivity on a Linux workstation and examining the active TCP connections using the command line.Which of the following commands would be the BEST to run to view only active Internet
connections?

A security engineer is hardening a company’s multihomed SFTP server. When scanning a
public-facing network interface, the engineer finds the following ports are open:
22
25
110
137
138
139
445
Internal Windows clients are used to transferring files to the server to stage them for
customer download as part of the company’s distribution process.
Which of the following would be the BEST solution to harden the system?