Security+ 701 PBQ 11

You are a security analyst at a mid-sized corporation. Several employees have reported receiving suspicious emails that appear to be phishing attempts. Your task is to manage the phishing incident, educate the employees, and implement measures to prevent future attacks. Here is an example of a standard phishing email:

Tasks:

• Identify and Contain the Phishing Attack:
  • Determine the source and scope of the phishing emails.
  • Prevent further distribution of these emails.
• Educate Employees:
  • Provide training on recognizing phishing emails.
  • Implement a reporting mechanism for suspicious emails.
• Prevent Future Attacks:
  • Enhance email security measures.

Instructions: Based on the scenario, select the best actions to handle the phishing attack.

You are a security analyst at an online gaming company. The company’s servers are currently under a Denial-of-Service (DoS) attack, causing significant disruption to service. Your task is to mitigate the attack, restore normal operations, and strengthen defenses against future attacks.

Tasks:

• Mitigate the Attack:
  • Identify the source of the DoS attack.
  • Implement measures to absorb or block the attack.
• Restore Services:
  • Ensure normal operations resume as quickly as possible.
  • Communicate with customers about the service disruption.
• Enhance Defenses:
  • Implement measures to prevent future DoS attacks.

Instructions: Based on the scenario, select the best actions to handle the DoS attack.

You are a security analyst at a retail company. The security monitoring system has detected unauthorized access attempts on the company’s main database server. Your task is to investigate these attempts, secure the server, and improve access control measures.

Tasks:

• Investigate Unauthorized Access:
  • Identify how the unauthorized access was attempted.
  • Determine if any data was compromised.
• Secure the Server:
  • Implement measures to block further unauthorized access.
  • Enhance authentication and authorization mechanisms.
• Improve Access Control:
  • Regularly review access permissions.
  • Implement stricter access control policies.

Instructions: Based on the scenario, select the best actions to address the unauthorized access attempts.

You are a security analyst at a healthcare organization. A critical security vulnerability has been discovered in the software used across the organization. Your task is to manage the patching process, ensure minimal disruption to operations, and establish a better patch management process.

Tasks:

• Apply the Security Patch:
  • Determine which systems are affected.
  • Schedule and deploy the patch to all affected systems.
• Ensure Minimal Disruption:
  • Test the patch in a controlled environment before full deployment.
  • Communicate with departments about the patching schedule.
• Improve Patch Management:
  • Establish a regular patch management schedule.
  • Implement automated patch management tools.

Instructions: Based on the scenario, select the best actions to manage the security patch process.