1. A medical organization recently started accepting payments over the phone. The manager is concerned about the impact of the storage of different types of data.Which of the following types of data incurs the highest regulatory constraints?

A) PCI
B) PHI
C) PII
D) IP



2. An executive tasked a security analyst to aggregate past logs, traffic, and alerts on a particular attack vector. The analyst was then tasked with analyzing the dataand making predictions on future complications regarding this attack vector. Which of the following types of analysis is the security analyst MOST likely conducting?

A) Behavior analysis
B) Availability analysis
C) Business analysis
D) Trend analysis



3. A network administrator is attempting to troubleshoot an issue regarding certificates on a secure website.During the troubleshooting process, the network administrator notices that the web gateway proxy on the local network has signed all of the certificates on the localmachine.Which of the following describes the type of attack the proxy has been legitimately programmed to perform?

A) Man-in-the-middle
B) Replay
C) Spoofing
D) Transitive access



4. Which of the following describes why it is important to include scope within the rules of engagement of a penetration test?

A) To ensure servers are not impacted and service is not degraded
B) To ensure all systems being scanned are owned by the company
C) To ensure sensitive hosts are not scanned
D) To ensure the network segment being tested has been properly secured



5. An incident response report indicates a virus was introduced through a remote host that was connected to corporate resources. A cybersecurity analyst has beenasked for a recommendation to solve this issue. Which of the following should be applied?

A) TAP
B) MAC
C) ACL
D) NAC