A large industrial system's smart generator monitors the system status and sends alerts to third-party maintenance personnel when critical failures occur. While reviewing the network logs, the company's security manager notices the generator's IP is sending packets to an internal file server's IP. Which of the following mitigations would be BEST for the security manager to implement while maintaining alerting capabilities?

• A. Isolation
• B. Segmentation
• C. Firewall whitelisting
• D. Containment

A company is migrating systems from an on-premises facility to a third-party managed datacenter. For continuity of operations and business agility, remote access to all hardware platforms must be available at all times. Access controls need to be very robust and provide an audit trail. Which of the following security controls will meet the company's objectives? (Select two.)

• A. Access to hardware platforms is restricted to the systems administrator's IP address
• B. The IP addresses of server management interfaces are located within the company's extranet
• C. Access is captured in event logs that include source address, time stamp, and outcome
• D. Application logs are hashed cryptographically and sent to the SIEM
• E. Access is limited to interactive logins on the VDi
• F. Integrated platform management interfaces are configured to allow access only via SSH

A company is deploying a DIP solution and scanning workstations and network drives for documents that contain potential Pll and payment card dat a. The results of the first scan are as follows:

The security learn is unable to identify the data owners for the specific files in a timely manner and does not suspect malicious activity with any of the detected files. Which of the following would address the inherent risk until the data owners can be formally identified?

• A. Remove the access for the internal audit group from the accounts payable and payroll shares
• B. Configure the DLP tool to delete the files on the shared drives
• C. Search the metadata for each file to locate the file's creator and transfer the files to the personal drive of the listed creator.
• D. Move the files from the marketing share to a secured drive.

A newly hired systems administrator is trying to connect a new and fully updated, but very customized, Android device to access corporate resources. However, the MDM enrollment process continually fails. The administrator asks a security team member to look into the issue.
Which of the following is the MOST likely reason the MDM is not allowing enrollment?

• A. The OEM is prohibited
• B. The device does not support FDE
• C. The device is rooted
• D. The OS version is not compatible

A large, multinational company currently has two separate databases One is used for ERP while the second is used for CRM To consolidate services and infrastructure, it is proposed to combine the databases The company's compliance manager is asked to review the proposal and is concerned about this integration Which of the following would pose the MOST concern to the compliance manager?

• A. By consolidating services in this manner, there is an increased risk posed to the organization due to the number of resources required to manage the larger data pool.
• B. Auditing the combined database structure will require more short-term resources, as the new system will need to be learned by the auditing team to ensure all security controls are in
• C. There are specific regulatory requirements the company might be violating by combining these two types of services into one shared platform.
• D. The attack surface of the combined database is lower than the previous separate systems, so there likely are wasted resources on additional security controls that will not be needed