An organization is engaged in international business operations and is required to comply with various legal frameworks. In addition to changes in legal frameworks, which of the following is a primary purpose of a compliance management program?

• A. Responding to changes in regulatory requirements
• B. Following new requirements that result from contractual obligations
• C. Developing organizational policies that relate to hiring and termination procedures
• D. Answering requests from auditors that relate to e-discovery

A company's existing forward proxies support software-based TLS decryption, but are currently at 60% load just dealing with AV scanning and content analysis for HTTP traffic. More than 70% outbound web traffic is currently encrypted. The switching and routing network infrastructure precludes adding capacity, preventing the installation of a dedicated TLS decryption system. The network firewall infrastructure is currently at 30% load and has software decryption modules that can be activated by purchasing additional license keys. An existing project is rolling out agent updates to end-user desktops as part of an endpoint security refresh.
Which of the following is the BEST way to address these issues and mitigate risks to the organization?

• A. Purchase the SSL, decryption license for the firewalls and route traffic back to the proxies for end-user categorization and malware analysis.
• B. Accept the current risk and seek possible funding approval in the next budget cycle to replace the existing proxies with ones with more capacity.
• C. Use an EDP solution to address the malware issue and accept the diminishing role of the proxy for URL categorization in the short team.
• D. Roll out application whitelisting to end-user desktops and decommission the existing proxies, freeing up network ports.

Following a recent and very large corporate merger, the number of log files an SOC needs to review has approximately tripled. The Chief Information Security Officer (CISO) has not been allowed to hire any more staff for the SOC, but is looking for other ways to automate the log review process so the SOC receives less noise. Which of the following would BEST reduce log noise for the SOC?

• A. Outsourcing
• B. SIEM filtering
• C. Centralized IPS
• D. Machine learning

A new identity management program was recently initialed to reduce risk and improve the employee experience. The environment is complex it does not support rest APIs but has multiple identity stores Password resets are the help desk's top ticket item and it takes the organization weeks to manually create access for new employees. The applications in the scope of the program are the enterprise service bus SaaS web portals and internal web portal. The goals of the program include
* Reducing costs by centralizing authentication and authorization
* Streamlining business processes
* Enabling employees to have immediate access
* Reducing password reset tickets by 90%
To meet the above goals and the business case which of the following authentication and authorization capabilities does the security architect need to implement?

• A. OpenlD. SPML LOAP. and WAYF
• B. Kerberos XACML AD and SPML
• C. OAuth, SCIM AD and WS-Security
• D. SAML. XACML SCIM. and LDAP

An employee decides to log into an authorized system. The system does not prompt the employee for authentication prior to granting access to the console, and it cannot authenticate the network resources. Which of the following attack types can this lead to if it is not mitigated?

• A. Memory leak
• B. Race condition
• C. Resource exhaustion
• D. Smurf