A Security Analyst Receives an Email from a Peer That

question 264

Multiple Choice

A security analyst receives an email from a peer that includes a sample of code from a piece of malware found in an application running in the organization's staging environment. During the incident response process, it is determined the code was introduced into the environment as a result of a compromised laptop being used to harvest credentials and access the organization's code repository. While the laptop itself was not used to access the code repository, an attacker was able to leverage the harvested credentials from another system in the development environment to bypass the ACLs limiting access to the repositories. Which of the following controls MOST likely would have interrupted the kill chain in this attack?

• A) IP whitelisting on the perimeter firewall
• B) MFA for developer access
• C) Dynamic analysis scans in the production environment
• D) Blue team engagement in peer-review activities
• E) Time-based restrictions on developer access to code repositories

Understand the criteria for viability and implementation hurdles for gain-sharing plans.

Comprehend the contexts in which profit-sharing is most typically applied.

Differentiate between goal-sharing and gain-sharing plans in terms of design, popularity, and levels of attainment.

Gain insights into the design considerations necessary for effective profit-sharing plans.

---

Definitions:

Irrational Emotions

Feelings that do not have a logical or reasonable basis, often disproportionate to the situation at hand.

Cognitive-Behavioural Therapy

A therapy approach that addresses dysfunctional emotions, behaviors, and cognitions through a goal-oriented, systematic procedure.

Behavioural Experiments

A technique in cognitive-behavioral therapy where patients test the reality of their beliefs through homework assignments.