You save $69.98
Management implemented a response after this event: A network service uses anycast to reach a nearby node, but session data is only stored on the previous node. The response was: Design state continuity and session recovery independently from anycast routing. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A failed site redirects new traffic and retained business state remains consistent. Routing multiple sites under one destination IP does not replicate application session state.
Reachability without state continuity does not meet the business recovery objective.
A routing metric is not evidence of acceptable application failover.
Layer 3 response does not demonstrate durable session or business data.
A video conference has ample average bandwidth but audio quality deteriorates because packet delay varies wildly. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Real-time communications depend on packet timing, not aggregate throughput alone. QoS cannot create missing physical capacity and should be validated under congestion.
Cryptographic strength does not address jitter in real-time media delivery.
Capacity totals can mask latency variance that disrupts interactive audio.
Archival capacity cannot improve packet timing in a live call.
The organization implemented the response to this scenario: A video conference has ample average bandwidth but audio quality deteriorates because packet delay varies wildly. The approved response was: Measure and control jitter, loss and latency with appropriate QoS and traffic engineering. Which statement MOST accurately identifies a remaining risk or constraint?
Real-time communications depend on packet timing, not aggregate throughput alone. A congestion test demonstrates bounded jitter and acceptable interactive call quality.
Jitter, loss and latency can harm audio despite ample throughput.
Traffic prioritization cannot supply bandwidth absent from the transport.
Real-time buffering and varying arrival times can degrade conversation quality.
Management implemented a response after this event: A video conference has ample average bandwidth but audio quality deteriorates because packet delay varies wildly. The response was: Measure and control jitter, loss and latency with appropriate QoS and traffic engineering. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A congestion test demonstrates bounded jitter and acceptable interactive call quality. Real-time communications depend on packet timing, not aggregate throughput alone.
Aggregate bandwidth is not the relevant interactive-quality acceptance metric.
A successful SIP setup does not prove adequate RTP timing.
Bulk transfer speed cannot establish low-jitter real-time operation.
A security architect claims NAT makes an internal database unattackable by outsiders. Which correction is MOST accurate?
Translation may obscure addresses but is not a standalone access-control or input-validation policy.
Private addressing and NAT do not cryptographically authenticate clients or inspect application actions.
Routing and session setup do not establish resource-level permission.
Port allocation does not substitute for authenticated, authorized database access.
A NAT gateway is combined with correct firewall filtering. Which risk remains?
L3/L4 network controls cannot substitute for data-layer authorization and secure input handling.
Address translation is unaware of SQL semantics.
Many NAT deployments specifically enable outbound connectivity.
Filtering and translation routinely coexist in network designs.
Which test BEST proves database access policy rather than only NAT functioning?
The two negative tests separate routing/filter enforcement from data-layer authorization.
A changed source IP proves translation, not security authorization.
Traffic volume does not prove denial of prohibited access.
Administrative UI availability is unrelated to database authorization semantics.
Employees join a lookalike guest wireless network that captures passwords through a forged portal. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
A familiar SSID is not proof of access-point authenticity. Compromised client trust settings can defeat certificate validation, requiring endpoint governance.
An SSID is an unauthenticated label that a rogue device can copy.
A shared secret without proper server authentication can enable evil-twin credential harvesting.
A TLS page for a rogue domain is not proof it is the authorized enterprise access point.
The organization implemented the response to this scenario: Employees join a lookalike guest wireless network that captures passwords through a forged portal. The approved response was: Use enterprise mutual authentication with trusted server certificates and managed wireless profiles. Which statement MOST accurately identifies a remaining risk or constraint?
A familiar SSID is not proof of access-point authenticity. A rogue access point with an untrusted certificate is rejected automatically.
An attacker can broadcast the same SSID to impersonate the legitimate network.
Signal strength does not authenticate the access point or its authentication server.
An untrusted server can capture or relay credentials when validation is bypassed.
Management implemented a response after this event: Employees join a lookalike guest wireless network that captures passwords through a forged portal. The response was: Use enterprise mutual authentication with trusted server certificates and managed wireless profiles. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A rogue access point with an untrusted certificate is rejected automatically. A familiar SSID is not proof of access-point authenticity.
Automatic SSID matching is not proof of trusted wireless mutual authentication.
Successful login may be attacker credential collection rather than secure network entry.
Radio quality cannot demonstrate resistance to evil-twin impersonation.
Visitors can reach sensitive file servers from the guest Wi-Fi because both networks share a permissive bridge. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Authentication to guest Wi-Fi must not imply access to internal corporate assets. VLAN tagging alone is insufficient if upstream routing policies rejoin the networks.
VLAN separation alone does not enforce denial of sensitive internal access.
A portal does not create the needed layer 2 and layer 3 isolation.
Name resolution restrictions do not block unauthorized network paths.
or Guarantee your success by buying the full version which covers the full latest pool of questions. (484 Questions, Last Updated on Oct 31, 2026)
Please check your mailbox for a message from support@examlabs.com and follow the directions.
