Various network outages have occurred recently due to unapproved changes to network and security
devices. All changes were made using various system credentials. The security analyst has been tasked to
update the security policy. Which of the following risk mitigation strategies would also need to be
implemented to reduce the number of network outages due to unauthorized changes?

After an audit, it was discovered that the security group memberships were not properly adjusted for
employees’ accounts when they moved from one role to another. Which of the following has the
organization failed to properly implement? (Select TWO).

The security administrator is currently unaware of an incident that occurred a week ago. Which of the
following will ensure the administrator is notified in a timely manner in the future?

The system administrator has deployed updated security controls for the network to limit risk of attack.
The security manager is concerned that controls continue to function as intended to maintain appropriate
security posture.
Which of the following risk mitigation strategies is MOST important to the security manager?

Which of the following security account management techniques should a security analyst implement to
prevent staff, who has switched company roles, from exceeding privileges?

Encryption of data at rest is important for sensitive information because of which of the following?

A company is trying to limit the risk associated with the use of unapproved USB devices to copy
documents. Which of the following would be the BEST technology control to use in this scenario?

Several employees have been printing files that include personally identifiable information of customers.
Auditors have raised concerns about the destruction of these hard copies after they are created, and
management has decided the best way to address this concern is by preventing these files from being
printed.
Which of the following would be the BEST control to implement?

Which of the following security strategies allows a company to limit damage to internal systems and
provides loss control?

Matt, a security analyst, needs to implement encryption for company data and also prevent theft of
company data. Where and how should Matt meet this requirement?