2026 Updated Verified Pass Cybersecurity-Architecture-and-Engineering Study Guides & Best Courses [Q55-Q79]

Rate this post

2026 Updated Verified Pass Cybersecurity-Architecture-and-Engineering Study Guides & Best Courses

Ultimate Guide to the Cybersecurity-Architecture-and-Engineering – Latest Edition Available Now

Q55. A healthcare organization would like to interoperate with another healthcare organization without needing to maintain individual accounts for members of the other organization.
Which technology concept should the company use?

Single Sign-On (SSO)

Federated Authentication

Multi-Factor Authentication (MFA)

Cloud Identity Provider

Q56. A security team is investigating multiple man-in-the-middle attacks that have taken place on the corporate network over the past few months. The team needs a solution that will ensure that data is not exposed if a man- in-the-middle attack occurs in the future.
What is the best solution?

Disabling Wi-Fi connections

Enforcing password history

Encrypting data

Ensuring all users have complex passwords

Q57. A company has recently implemented a hybrid cloud deployment. The security team has been notified about thousands of failed attempts to connect to routers and switches in the on-premises network. A solution must be implemented to block connections after three unsuccessful SSH attempts on any network device.

Firewall

Data Loss Prevention

Intrusion Prevention System (IPS)

Q58. During a vulnerability assessment, several end-of-life operating systems were discovered within the environment.
Which action should be taken to resolve the issue?

Shut down and remove the end-of-life machines

Disconnect the end-of-life machines

Block the end-of-life machines

Upgrade the remaining end-of-life machines

Q59. A financial institution conducted a cybersecurity assessment, which identified several vulnerabilities including outdated software and weak password policies. The company also needs to implement a new core banking system that can handle a large number of transactions while ensuring the security of customer data.
Which risk mitigation process is the most effective approach to address these vulnerabilities, and what is the best topology for the new core banking system?

Implementing security patches and updates on a regular basis and using hybrid cloud topology

Installing antivirus software on all endpoints and using on-premises topology

Creating strong password policies and enforcing multifactor authentication and using public cloud topology

Conducting regular security audits and penetration testing and using private cloud topology

Q60. What is a function of a proxy server?

It stores files that any user of the network may wish to access.

It acts as a giant cache of web pages that anyone in the organization has recently retrieved.

It responds to user queries to create, manipulate, and retrieve records from a database.

It responds to HTTP requests and can execute scripts to generate dynamic pages.

Q61. A company recently updated its disaster recovery plan (DRP) to ensure business continuity in the event of a disruptive incident.
Which step will ensure the effectiveness of the DRP?

Developing and implementing a testing plan for the DRP

Reviewing and updating the DRP regularly to ensure it remains relevant

Performing a risk assessment of the company’s information assets

Training employees on their roles and responsibilities during a disaster

Q62. Why is business continuity planning essential?

It ensures that the company will be profitable.

It ensures that the company will avoid asset loss.

It allows for succession planning.

It allows for the quickest return to business operations.

Q63. Which risk management strategy will secure an application from potential malware and advanced persistent threats?

Encryption of all sensitive data stored within the application

Configuration of the application to require strong, unique passwords for all user accounts

Installation of the latest antivirus software on all computers that will access the application

Implementation of a strict firewall policy to restrict access to the application’s server

Q64. A financial institution conducted a cybersecurity assessment, which identified several vulnerabilities, including outdated software and weak password policies. The company also needs to implement a new core banking system that can handle a large number of transactions while ensuring the security of customer data.
Which risk mitigation process is the most effective approach to address these vulnerabilities, and what is the best topology for the new core banking system?

Creating strong password policies and enforcing multifactor authentication and using public cloud topology

Implementing security patches and updates on a regular basis and using hybrid cloud topology

Installing antivirus software on all endpoints and using on-premise topology

Conducting regular security audits and penetration testing and using private cloud topology

Q65. A cloud hosting provider is concerned about the potential risks associated with attacks that target the confidentiality and integrity of sensitive data stored on its servers’ volatile memory. The provider has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this provider?

Implementing secure encrypted enclaves and AMD Secure Memory Encryption

Enforcing a strong password complexity policy for all user accounts

Implementing a next-generation antivirus system to detect and prevent malware attacks

Conducting regular security awareness training for all employees

Q66. What is the role of the compiler?

To take the most recent line of code, translate it, and execute the machine code

To create an executable program by translating all of the code at one time

To run scripting languages to test one line of code at a time

To create executable code that is compatible with different operating systems

Q67. A software development company has experienced a noticeable slowdown in its network performance, which suggests that some machines on the network may have been infected by a botnet. The company has decided to analyze the threats and vulnerabilities within the enterprise based on the indicators of compromise to mitigate the risk.
What should the company do to detect a botnet and other malware-based threats within the enterprise based on the indicators of compromise?

Use two-factor authentication for external users

Define strict firewall rules

Constantly scan for known signatures on every machine

Implement a configuration management solution

Q68. Which IT role is responsible for installing new hardware and troubleshooting existing hardware?

Web administrator

System administrator

Security administrator

Network administrator

Q69. An IT organization recently implemented a hybrid cloud deployment. The security team must be able to correlate event data combined from different sources in a central location.
What is the best solution?

File integrity monitoring (FIM)

Data loss prevention (DLP)

Intrusion detection system (IDS)

Security information and event management (SIEM)

Q70. How should a security analyst detect a potential structured query language (SQL) injection attack?

By looking for extra and unexpected symbols and characters in certain queries

By looking for database primary key changes on the production environment

By looking for repeated failed login attempts to the database server

By looking for administrative command attempts within database log files

Q71. A software development company uses file transfer protocol (FTP) to transfer software code between different teams.
Which security control is essential for protecting the integrity of software code that is transferred using FTP?

Calculating and comparing the hash values of the software code before and after transfer using FTP can help detect any changes and ensure the integrity of the code.

Implementing intrusion detection and prevention systems can help detect and prevent unauthorized access to the FTP server and software code.

Enforcing strict access controls can limit the number of users with access to the FTP server and prevent unauthorized access.

Regularly backing up the software code stored in the FTP server and having a disaster recovery plan can help ensure the integrity of the software code.

Q72. An e-learning company uses Amazon Simple Storage Service (Amazon S3) to store e-books and video files that are served to customers through a custom application. The company has realized that someone has been stealing its intellectual property.
Which threat actor is most likely in this scenario?

Advanced persistent threat

Novice hacker

Competitor

Hacktivist

Q73. A software development company is concerned about the potential risks associated with exploits that target vulnerabilities in the Linux operating system used by the company’s servers. Thecompany has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this company?

Enforcing strict access control policies for all users

Implementing a host-based intrusion detection and prevention system

Conducting regular security assessments and penetration testing

Implementing shell restrictions

Q74. An organization wants to ensure that its website is free of certain vulnerabilities before the final hand-off to the client.
What testing method should the organization use to inspect traffic to detect potential issues?

Bastion scanner

Port scanner

HTTP interceptor

Domain interceptor

Q75. An organization wants to implement a new encryption solution to protect sensitive data stored in a database.
The organization wants to ensure that the encryption solution provides strong protection for the data and is willing to sacrifice performance.
Which type of encryption meets the needs of the organization?

Stream ciphers

Asymmetric encryption

Hash functions

Block ciphers

Q76. While undergoing a security audit, it is determined that an organization has several backup repositories nested in the cloud without any level of protection. Which action should be taken to protect the backup repositories first?

Restrict access to the backups

Run a vulnerability scan

Disable the backup repositories

Audit access logs

Q77. A healthcare organization would like to work with another healthcare organization without needing to maintain identified accounts for members of the other organization.
Which technology concept should the company use?

Cloud identity provider

Single sign-on (SSO)

Multi-factor authentication (MFA)

Federated authentication

Q78. A company has recently completed its disaster recovery plan and is preparing to test it. The company’s IT team has identified the need to simulate a disaster scenario to evaluate the effectiveness of the plan. The team has considered a few options, including a full interruption test, a walk-through, tabletop exercises, and checklists. They want to choose a testing method that will allow them to evaluate the plan in a controlled environment while minimizing the impact on the company’s operations.
Which testing method will meet the needs of the company?

Walk-through

Tabletop exercises

Checklists

Full interruption test

Q79. What is the correct order of project phases?

1)Initiation
2)Executing
3)Planning
4)Monitoring and Controllings) Closing

1) Planning
2) Initiation
AMonitoring and Controlling
4) Executings) Closing

1) Executing
2) Monitoring and Controlling
3) Initiation
4) Planning
5) Closing

1) Initiation
2) Planning
3) Executing
4) Monitoring and Controllings) Closing