An administrator needs to deploy a new SSL wildcard certificate to three different web servers. Which of the following MUST be taken into consideration? (Select
TWO).

An analyst is documenting the user interaction process associated with the login prompts in an application structure, the user enters a username and a one-time
password, which was previously emailed to the user. Next, the user enters a PIN and is then allowed into the dashboard of the application to modify account details.
In this scenario, which of the following steps immediately precedes the authorization process?

Which of the following social engineering attacks would describe a situation where an attacker calls an employee while impersonating a corporate executive?

An attacker would like to target a company and redirect their legitimate traffic to other sites. Which of the following attacks would be used to cause this malicious
URL redirection?

When performing a risk analysis, which of the following is considered a threat?

A recent security audit revealed the company is lacking deterrent security controls. Which of the following could be implemented to address this finding?

A research user needs to transfer multiple terabytes of data across a network. The data is not confidential, so for performance reasons, does not need to be
encrypted. However, the authentication process must be confidential. Which of the following is the BEST solution to satisfy these requirements?

Which of the following is a contract with a service provider that typically includes performance parameters like MTBF and MTTR?

One of the driving factors towards moving an application to a cloud infrastructure is increased application availability. In the case where a company creates a private
cloud, the risk of application downtime is being:

A company uses digital signatures to sign contracts. The company requires external entities to create an account with a third-party digital signature provider and to
sign an agreement stating that they will protect the account from unauthorized access. Which of the following security goals is the company trying to address in the
given scenario?