[2025] Use Valid Cybersecurity-Architecture-and-Engineering Exam – Actual Exam Question & Answer [Q122-Q144]

Q122. Management has asked its networking team to recommend a solution for direct communication between multiple virtual networks in the cloud. The solution must utilize the least amount of administrative effort.

Q123. A financial services company is concerned about the potential risks associated with sensitive customer data stored on employee laptops. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this company?

Q124. Which encryption technique can be used to enable a third-party provider to perform calculations on encrypted data without decrypting the data?

Q125. Which operation converts raw data into information?

Q126. A large healthcare provider is acquiring a small clinic and has identified a full understanding of the clinic’s organizational risks. The large provider has several tools it can implement to reduce the clinic’s identified risks.
Which type of risk response should the healthcare provider use?

Q127. A healthcare provider is required to comply with the Health Insurance Portability and Accountability Act (HIPAA), which sets requirements for the protection of patient health information. The provider uses various software applications to manage and store patient health information, which must be coded to protect its confidentiality and integrity.
Which protocol will meet the needs of this provider?

Q128. What is the correct order of project phases?

Q129. A retail company wants to establish the frequency at which it needs to backup its critical data to ensure it can be restored in case of a disruption with the least amount of acceptable loss in recovery.
What is the term used to describe this metric?

Q130. The security team manages a set of legacy firewalls that have been in production for nearly ten years. The organization recently issued a mandate requiring that all firewalls be configured with intrusion detection controls that alert the team in real time based on inbound threats.
Which solution meets these requirements?

Q131. An organization sends customers e-mail messages based on their purchase patterns.
Which characteristic of quality data does this represent?

Q132. How should a security analyst detect a potential structured query language (SQL) injection attack?

Q133. An organization wants to ensure that its website is free of certain vulnerabilities before the final handoff to the client. What testing method should the organization use to inspect traffic and detect potential issues?

Q134. What is the role of the compiler?

Q135. Which protocol can be used to provide secure email communication and ensure the confidentiality, integrity, and authenticity of email messages?

Q136. A security team is investigating multiple man-in-the-middle attacks that have taken place on the corporate network over the past few months. The team needs a solution that will ensure that data is not exposed if a man- in-the-middle attack occurs in the future.
What is the best solution?

Q137. A large technology company has discovered a known vulnerability in its network infrastructure. The infrastructure contains a number of retired assets that are no longer receiving security updates, which can potentially be exploited by attackers to compromise the network. The company has decided to implement hardening techniques and endpoint security controls to mitigate the risk.
Which hardening technique will meet the needs of this company?

Q138. What is one purpose of an End User License Agreement?

Q139. A company recently updated its disaster recovery plan (DRP) to ensure business continuity in the event of a disruptive incident.
Which step will ensure the effectiveness of the DRP?

Q140. What is the purpose of the feature that allows only one user to modify a document at a time in collaboration software?

Q141. Match the legislative purpose with the corresponding legislation.
Answer options may be used more than once or not at all.

Q142. What is the typical organizing principle of a database?

Q143. Which two options allow an application to access a database?
Choose 2 answers

Q144. An e-learning company uses Amazon Simple Storage Service (Amazon S3) to store e-books and video files that are served to customers through a custom application. The company has realized that someone has been stealing its intellectual property.
Which threat actor is most likely in this scenario?