Correct answer:

Pubilc relations team is correct. The public relations team understands the nuances involved with communicating with the news media and the public and is best suited for communicating the organization’s approved messages to those entities.

Incorrect answers:

Human resources team is incorrect. The human resources team may not have the expertise to communicate adequately with the media or the public.

Legal team is incorrect. The legal team should be involved in any communications or relationships with law enforcement or government regulatory agencies during an incident because they may be needed to provide advice and counsel on legal questions or issues. They should not be involved in direct communications with the media or the public; they may, however, advise the public relations department on which approved messages it should communicate to those entities.

Information technology team is incorrect. The information technology team may not have the expertise to communicate adequately with the media or the public during an incident.

Correct answer:

Client/server platform architecture is correct. The client/server architecture is a traditional platform architecture, which may be used in both traditional and mobile devices. In this architecture, different tiers (n-tiers) may be distributed across several different devices, networks, or applications.

Incorrect answers:

Distributed application architecture is incorrect. In a distributed application architecture, applications perform their functions across different connected platforms.

Mobile platform is incorrect. Mobile platforms are specific to mobile devices and are not architectures in themselves; however, mobile device platforms can also use a client/server architecture for applications.

Embedded platform is incorrect. Embedded platforms are specific to devices with embedded operating systems and normally do not use client/server architectures for applications.

Correct answer:

Security levels is correct. The Security Levels node has three settings (Disallowed, Basic User, and Unrestricted), which can be configured to prevent users from installing any software.

Incorrect answers:

Additional Rules is incorrect. The Additional Rules node restricts the modification of certain registry keys by users and software.

Enforcement is incorrect. The Enforcement node applies additional software installation restrictions.

Application Control Policies is incorrect. The Application Control Policies setting configures AppLocker, which imposes restrictions on executing software and actions it can perform.

Correct answer:

Encryption is correct. The data stored on the medium is encrypted using a strong key. To render the data unrecoverable, the system securely deletes the encryption key, which is many times faster than deleting the encrypted data. Recovering the data in this scenario is typically computationally infeasible.

Incorrect answers:

Partitioning is incorrect. Partitioning is an ineffective way to destroy data on the media because the data could conceivably be recovered by advanced partitioning or data recovery tools.

Formatting is incorrect. Formatting is an ineffective way to overwrite data on media because data could conceivably be recovered by advanced data recovery tools.

Overwriting is incorrect. Overwriting can be an effective way to completely destroy data on media, assuming the overwriting is performed using random or fixed patterns of 1’s and 0’s and is performed more than once; it is not necessarily better than encrypting data and destroying the recovery key, since overwriting may not be effective if performed improperly.

Correct answer:

DGA is correct. Domain generation algorithms (DGAs) are used to generate domains rapidly using seemingly random but predictable processes.

Incorrect answers:

Faulty firewall lrules is incorrect. While faulty firewall rules could enable malware to call back to its command-and-control server, once these known domains have been blocked, the only explanation would be for dynamically and randomly generated domain names that could not be blocked using an existing firewall rule.

DMARC is incorrect. Domain-based Message Authentication, Reporting, and Conformance (DMARC) ensures the authenticity of an e-mail.

SPF is incorrect. Sender Policy Framework (SPF) is a method ensuring the authenticity of an e-mail.

Correct answer:

OS fingerprinting is correct. OS fingerprinting is used by network scanners to identify the underlying operating system on a network host.

Incorrect answers:

Port scanning is incorrect. Port scanning is used by a network scanner to identify whether the ports on discovered hosts are open.

Service discovery is incorrect. Service discovery is used to determine running services on discovered hosts.

Vulnerability scanning is incorrect. Vulnerability scanning is used to determine what vulnerabilities are present on network hosts.

Correct answer:

Copyright data is correct. Copyright data pertains to works that an individual may create but is not specific to that individual, as any type of personal, health, or financial data may be.

Incorrect answers:

Identifying data is incorrect. Identifying data is considered privacy data.

Personal health data is incorrect. Personal health data is considered privacy data.

Financial data is incorrect. Financial data is considered privacy data.

Correct answer:

A virtual private cloud (VPC) is a private set of resources within a public cloud environment is correct. This describes a VPC, which is a private set of resources within a public cloud environment.

Incorrect answers:

A virtual private cloud (VPC) is achieved by creating large pools of logical storage, CPUs, memory, networking, and applications that reside on a common physical platform is incorrect. This describes system virtualization, which is achieved by creating large pools of logical storage, CPUs, memory, networking, and applications that reside on a common physical platform.

A virtual private cloud (VPC) provides a secure tunnel between two endpoints over some shared medium is incorrect. A virtual private network (VPN) provides a secure tunnel between two endpoints over some shared medium; a VPN is most commonly created on-demand between an endpoint and a network device (typically a router or VPN concentrator).

A virtual private cloud (VPC) separates the physical devices that the users are touching from the systems hosting the desktops, applications, and data is incorrect. This describes a virtual desktop infrastructure (VDI), which separates the physical devices that the users are touching from the systems hosting the desktops, applications, and data.

Correct answer:

OSINT is correct. Open-source intelligence (OSINT) is made up of publicly available information.

Incorrect answers:

All-source is incorrect. All-source information comes from a combination of any or all possible sources, including public (open) or closed (classified, proprietary, or otherwise restricted).

SIGINT is incorrect. SIGINT (signals intelligence) intelligence-gathering is done via intercepts of communications, electronic, and/or instrumentation transmissions. SIGINT assumes that these sources are by nature nonpublic sources.

MASINT is incorrect. Measurement and signature intelligence (MASINT) is derived intelligence from data other than imagery, and like SIGINT, it is typically not publicly available.

Correct answer:

Use of vendor passwords that are not changed when the device is installed is correct. One of the most common issues that hackers can exploit in modern IOT devices is default vendor passwords that are not changed when the device is installed.

Incorrect answers:

Lack of firewall rules preventing those devices from being attacked is incorrect. Lack of firewall rules is applicable to any device, not only IOT devices.

Lack of vendor security patches for the device is incorrect. Most modern IoT device vendors do publish regular firmware updates.

Use of older encryption schemes is incorrect. Most modern IoT devices use current encryption algorithms and mechanisms.