Which two components reduce the attack surface on an endpoint? (Choose two.)

1. A. secure boot
2. B. load balancing
3. C. increased audit log levels
4. D. restricting USB ports
5. E. full packet captures at the endpoint

Correct Answer: AD

Which event is a vishing attack?

1. A. obtaining disposed documents from an organization
2. B. using a vulnerability scanner on a corporate network
3. C. setting up a rogue access point near a public hotspot
4. D. impersonating a tech support agent during a phone call

Correct Answer: D

An engineer is analyzing a recent breach where confidential documents were altered and stolen by the receptionist Further analysis shows that the threat actor connected an externa USB device to bypass security restrictions and steal data The engineer could not find an external USB device Which piece of information must an engineer use for attribution in an investigation?

1. A. list of security restrictions and privileges boundaries bypassed
2. B. external USB device
3. C. receptionist and the actions performed
4. D. stolen data and its criticality assessment

Correct Answer: C