General Security Concepts

An enterprise organization is transitioning from a legacy remote-access VPN infrastructure to a Zero Trust Architecture (ZTA). During the redesign, a security architect must define how access requests to sensitive corporate applications are evaluated by the Policy Engine and Policy Enforcement Point. Which of the following operational practices best aligns with the core Zero Trust principle of explicit validation and continuous verification?

A financial enterprise operates a microservices environment governed by Zero Trust Architecture (ZTA) principles. A remote system administrator successfully completes multi-factor authentication (MFA) from a corporate-managed endpoint. Ten minutes into the session, the endpoint's telemetry indicates that its local endpoint detection and response (EDR) agent has been disabled, and the connection origin dynamically shifts to an unknown unmanaged network. Which of the following actions best demonstrates the principle of continuous verification in this scenario?

A financial enterprise is upgrading its automated clearing house payment processing system. To prevent fraud, the system requires that submitted wire transfers include a cryptographic control. The lead security architect proposes requiring sender applications to sign transfer payloads using an asymmetric private key rather than generating a Hash-based Message Authentication Code (HMAC) with a pre-shared symmetric key. Which security objective is uniquely satisfied by transitioning to the asymmetric digital signature approach?

An enterprise cloud engineering team is establishing baseline security controls for a newly migrated production environment. Match each technical implementation on the left with the primary security pillar or objective it satisfies on the right.

A security analyst configures an automated reporting tool to sign all generated financial reports using an asymmetric private key. Which of the following core security objectives are directly provided by using digital signatures in this scenario? (Select TWO.)

A security analyst deploys an intentionally vulnerable decoy server on an isolated network segment. The server contains simulated sensitive files and fake credentials designed to attract threat actors, observe their tactics, and generate alerts upon any interaction. Which of the following deception technologies has the analyst implemented?

A healthcare provider is deploying a tele-radiology platform where remote radiologists submit diagnostic reports to hospital electronic health record (EHR) systems. Security policy dictates that the platform must guarantee two key objectives: (1) hospitals must be able to prove which specific radiologist authored a report such that the radiologist cannot later claim they did not send it, and (2) any alteration to report contents during transit or storage must be immediately detectable. Which of the following technical controls must be implemented to fulfill these security requirements? (Select TWO.)

A security architect is establishing control and data plane boundaries for a microsegmented enterprise network undergoing transition to a Zero Trust Architecture (ZTA). Match each logical Zero Trust component with its corresponding operational role during access evaluations.

A security analyst is reviewing access policies during an initiative to adopt a Zero Trust Architecture (ZTA). The analyst needs to ensure that access decisions are never granted solely based on a device's physical or network location. Which core Zero Trust principle directly addresses this requirement?

An enterprise security manager needs to ensure that high-priority system change requests sent via email cannot be denied by the author after submission. Which of the following security concepts specifically addresses this requirement?

Match each deception technology term on the left with its corresponding operational description on the right.

A security analyst is categorizing corporate IT procedures according to the core components of the AAA framework. Match each operational scenario to the AAA component it primarily demonstrates.

A system administrator is configuring access control for an enterprise network. Before a user is granted permissions to access sensitive network shares, the system must first verify who the user claims to be using a username and password. Which pillar of the Authentication, Authorization, and Accounting (AAA) framework is being performed during this initial identity verification step?

A security architect for a regional energy utility is reviewing security mechanisms implemented across the smart grid infrastructure. Match each technical security control scenario on the left with the primary CIA Triad pillar or Non-Repudiation objective it satisfies on the right.

A cloud operations team configures an automated logging mechanism to record high-privilege configuration changes across production servers. The system computes a Hash-based Message Authentication Code (HMAC) for each log entry using a single symmetric key shared among all system administrators. Following an unauthorized system modification, an administrator denies executing the change, claiming that any user with access to the shared key could have forged the log entry. Which of the following security goals failed to be established by this logging design?

An enterprise security architect is mapping operational security controls to primary security principles within a multi-tier datacenter deployment. Match each operational control on the left with the corresponding core CIA Triad or Non-Repudiation goal on the right.

An energy distribution company is upgrading its remote terminal unit (RTU) fleet across regional sub-stations. The security engineering team must implement a mechanism for over-the-air (OTA) control command execution. The system must guarantee that once a lead control engineer issues a high-voltage switching instruction, the engineer cannot later deny having authorized the command, and the RTUs can verify both origin authenticity and data integrity. Which of the following technical controls best satisfies this security requirement?

During a security audit of an enterprise infrastructure, a analyst discovers that network administrators authenticate via a central RADIUS server using multi-factor authentication (MFA). However, once authenticated, any administrator gains full privileged access across all routers and switches, and individual command executions are not recorded in audit logs. The CISO mandates an updated architecture that enforces granular, role-based command execution limits and records every individual command invoked during administrator sessions. Which protocol migration and AAA pillar focus directly fulfills the CISO's mandate?

A cloud compliance team is configuring an automated log aggregation vault to collect audit trails from independent third-party SaaS vendors. The organization mandates two primary security requirements for all ingested logs: first, the vault must be able to prove that a log file was not modified after creation; second, the log file must provide non-repudiation, ensuring that an untrusted vault administrator who possesses read access cannot forge a valid log entry on behalf of any vendor. Which of the following cryptographic techniques should each vendor apply to the log files prior to transmission to meet all audit requirements?

An IT security administrator is implementing the Authentication, Authorization, and Accounting (AAA) framework for remote access connections. Which of the following tasks directly represent the Accounting component of AAA? (Select TWO.)