During a recent investigation, an auditor discovered that an engineer’s compromised workstation
was being used to connect to SCADA systems while the engineer was not logged in. The engineer
is responsible for administering the SCADA systems and cannot be blocked from connecting to
them. The SCADA systems cannot be modified without vendor approval which requires months of
testing.
Which of the following is MOST likely to protect the SCADA systems from misuse?

Which of the following are examples of network segmentation? (Select TWO).

When considering a vendor-specific vulnerability in critical industrial control systems which of the
following techniques supports availability?

Which of the following devices would be the MOST efficient way to filter external websites for staff
on an internal network?

A Human Resources user is issued a virtual desktop typically assigned to Accounting employees.
A system administrator wants to disable certain services and remove the local accounting groups
installed by default on this virtual machine. The system administrator is adhering to which of the
following security best practices?

A security administrator wants to implement a solution which will allow some applications to run
under the user’s home directory and only have access to files stored within the same user’s folder,
while other applications have access to shared folders. Which of the following BEST addresses
these requirements if the environment is concurrently shared by multiple users?

Which of the following should a company implement to BEST mitigate from zero-day malicious
code executing on employees’ computers?

Which of the following is a control that allows a mobile application to access and manipulate
information which should only be available by another application on the same mobile device (e.g.
a music application posting the name of the current song playing on the device on a social media
site)?

Joe, a technician, is tasked with finding a way to test operating system patches for a wide variety
of servers before deployment to the production environment while utilizing a limited amount of
hardware resources. Which of the following would provide the BEST environment for performing
this testing?

Establishing a method to erase or clear cluster tips is an example of securing which of the
following?