You save $69.98
Management implemented a response after this event: The core network has two routers but both draw power from the same failing distribution unit. The response was: Remove shared power and control-plane single points of failure before claiming resilient routing. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A power-feed loss leaves one routing path operational without unauthorized bypass. Duplicate devices do not provide redundancy when they share a critical dependency.
Device count is not common-mode failure resistance.
Naming diversity cannot establish electrical independence.
A steady routing table does not demonstrate failover readiness.
An office treats a fiber backbone as intrinsically confidential and sends regulated data without encryption. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Fiber can be tapped; physical media characteristics alone do not guarantee data secrecy. Encryption may require endpoint key custody and monitoring against MITM attempts.
Fiber can be tapped, so the data still needs authenticated confidentiality protection.
Physical complexity does not guarantee secrecy against capable tapping.
Plain checksums do not protect confidential content or prevent manipulation.
The organization implemented the response to this scenario: An office treats a fiber backbone as intrinsically confidential and sends regulated data without encryption. The approved response was: Use end-to-end authenticated encryption and protected physical cable routes where needed. Which statement MOST accurately identifies a remaining risk or constraint?
Fiber can be tapped; physical media characteristics alone do not guarantee data secrecy. A controlled optical interception yields no readable regulated payload.
Optical signals can be intercepted and their contents reconstructed in suitable conditions.
Encryption still relies on endpoint and key custody security.
Physical access precautions do not eliminate insider or maintenance-path interception.
Management implemented a response after this event: An office treats a fiber backbone as intrinsically confidential and sends regulated data without encryption. The response was: Use end-to-end authenticated encryption and protected physical cable routes where needed. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
A controlled optical interception yields no readable regulated payload. Fiber can be tapped; physical media characteristics alone do not guarantee data secrecy.
The observed plaintext directly contradicts the confidentiality objective.
Link performance cannot demonstrate cryptographic secrecy.
A physical appearance inspection is not end-to-end confidential transport evidence.
Remote contractors administer network devices using exposed Telnet over a shared broadband connection. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Telnet exposes credentials and management commands to network observers. A VPN alone does not replace device authorization or command accountability.
Telnet exposes credentials and commands before the network observer needs to guess them.
A port change cannot provide encryption or per-command accountability.
A tunnel protects transit but does not enforce per-person least privilege.
The organization implemented the response to this scenario: Remote contractors administer network devices using exposed Telnet over a shared broadband connection. The approved response was: Use protected remote access and authenticated encrypted management protocols with least privilege. Which statement MOST accurately identifies a remaining risk or constraint?
Telnet exposes credentials and management commands to network observers. Packets show no plaintext management passwords, and unauthorized commands are denied.
Transport access must be combined with device-level command authorization and attribution.
Password strength does not encrypt plaintext network transmission.
Port obfuscation provides no cryptographic protection.
Management implemented a response after this event: Remote contractors administer network devices using exposed Telnet over a shared broadband connection. The response was: Use protected remote access and authenticated encrypted management protocols with least privilege. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
Packets show no plaintext management passwords, and unauthorized commands are denied. Telnet exposes credentials and management commands to network observers.
Successful access is not secure encrypted administration.
An organization-level tunnel is not user-specific command accountability.
Authentication complexity does not demonstrate least-privilege authorization.
A hardware vendor requests permanent unrestricted VPN access to troubleshoot one storage array. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Vendor remote connectivity should be proportional to purpose, identity and maintenance window. Logs must distinguish vendor personnel; one shared vendor account weakens accountability.
Long-lived broad access exceeds the narrow purpose and exposes unrelated systems.
Shared identities and absent recording undermine accountability for privileged work.
Visibility is especially important when external privileged access is temporarily authorized.
The organization implemented the response to this scenario: A hardware vendor requests permanent unrestricted VPN access to troubleshoot one storage array. The approved response was: Grant time-bounded, monitored just-in-time access limited to the affected management service. Which statement MOST accurately identifies a remaining risk or constraint?
Vendor remote connectivity should be proportional to purpose, identity and maintenance window. Access is available only during the authorized session and cannot reach unrelated assets.
Individual user attribution is necessary for reconstructing vendor actions.
Encryption does not enforce the resource scope of granted privileges.
External business sponsorship and authorization must expire with the permitted purpose.
Management implemented a response after this event: A hardware vendor requests permanent unrestricted VPN access to troubleshoot one storage array. The response was: Grant time-bounded, monitored just-in-time access limited to the affected management service. Which observed outcome BEST verifies that the intended security protection operates, rather than merely appearing in a plan?
Access is available only during the authorized session and cannot reach unrelated assets. Vendor remote connectivity should be proportional to purpose, identity and maintenance window.
Task completion cannot prove scoped and expiring access.
Account revocation alone is insufficient for session accountability.
Transport protection does not demonstrate resource restriction.
An internal voice system encrypts audio but unauthenticated signaling lets attackers redirect calls and impersonate extensions. As the accountable security practitioner, which response BEST addresses the specific weakness without introducing a different untested control?
Media encryption cannot prevent signaling-level hijacking or fraudulent call setup. Emergency calling and availability requirements must be tested after strengthening controls.
Protected audio does not stop signaling spoofing, rerouting or impersonation.
Improved sound quality cannot address signaling-level identity fraud.
Presentation changes do not enforce trusted signaling integrity.
or Guarantee your success by buying the full version which covers the full latest pool of questions. (484 Questions, Last Updated on Oct 31, 2026)
Please check your mailbox for a message from support@examlabs.com and follow the directions.
