1. A company that is hiring a penetration tester wants to exclude social engineering from the list of authorized activities. Which of the following documents shouldinclude these details?

A) Rules of engagement
B) Memorandum of understanding
C) Master service agreement
D) Acceptable use policy
E) Service level agreement


2. A reverse engineer was analyzing malware found on a retailers network and found code extracting track data in memory. Which of the following threats did theengineer MOST likely uncover?

A) POS malware
B) Key logger
C) Rootkit
D) Ransomware



3. A cybersecurity analyst has identified a new mission-essential function that utilizes a public cloud-based system. The analyst needs to classify the informationprocessed by the system with respect to CIA, Which of the following should provide the CIA classification for the information?

A) The cybersecurity analyst
B) The system administrator
C) The cloud provider
D) The data owner



4. A cybersecurity analyst has received a report that multiple systems are experiencing slowness as a result of a DDoS attack. Which of the following would be theBEST action for the cybersecurity analyst to perform?

A) Inform users regarding the affected systems.
B) Inform management of the incident.
C) Continue monitoring critical systems.
D) Shut down all server interfaces.



5. Law enforcement has contacted a corporations legal counsel because correlated data from a breach shows the organization as the common denominator from allindicators of compromise. An employee overhears the conversation between legal counsel and law enforcement, and then posts a comment about it on socialmedia. The media then starts contacting other employees about the breach. Which of the following steps should be taken to prevent further disclosure ofinformation about the breach?

A) Perform security awareness training about incident communication.
B) Temporarily disable employee access to social media
C) Have law enforcement meet with employees.
D) Request all employees verbally commit to an NDA about the breach.