Exam Bundle

A credential-proxy test cannot complete authentication without the bound authenticator. This would be relevant evidence for a different failure: Remote staff enter passwords on a phishing proxy that can relay basic MFA tokens, usually addressed by Move sensitive applications to phishing-resistant FIDO2/WebAuthn authentication. It does not demonstrate that the current problem at Newbridge Charity was resolved. The specific required evidence is: An employee submission is analyzed, correlated, and blocked before further clicks.

A simulated impostor fails reset verification and an authorized request is audited. This would be relevant evidence for a different failure: A help desk resets privileged passwords after callers recite publicly known employee details, usually addressed by Enforce strong identity proofing and verified callback procedures for high-risk resets. It does not demonstrate that the current problem at Newbridge Charity was resolved. The specific required evidence is: An employee submission is analyzed, correlated, and blocked before further clicks.

Spoofed messages are quarantined or visibly flagged without disrupting legitimate executive mail. This would be relevant evidence for a different failure: A company allows external display names that impersonate executives on email messages, usually addressed by Apply anti-spoofing mail authentication, banner cues, and sender verification workflows. It does not demonstrate that the current problem at Newbridge Charity was resolved. The specific required evidence is: An employee submission is analyzed, correlated, and blocked before further clicks.

Require number matching or phishing-resistant authenticators and flag repeated unexpected prompts. That action fits another problem: Employees repeatedly approve unexpected authentication push prompts after fatigue-inducing request floods. It does not directly remediate the current finding at Cedar City Utilities: Users have no controlled way to report suspicious QR-code messages delivered through collaboration tools. The relevant corrective control for this case is: Provide a simple reporting channel and rapid triage to block malicious destinations.

Enforce strong identity proofing and verified callback procedures for high-risk resets. That action fits another problem: A help desk resets privileged passwords after callers recite publicly known employee details. It does not directly remediate the current finding at Cedar City Utilities: Users have no controlled way to report suspicious QR-code messages delivered through collaboration tools. The relevant corrective control for this case is: Provide a simple reporting channel and rapid triage to block malicious destinations.

Require independent out-of-band callback to a verified contact and dual approval for payment changes. That action fits another problem: A financial-services employee is induced by a voice impersonator to change payment instructions. It does not directly remediate the current finding at Cedar City Utilities: Users have no controlled way to report suspicious QR-code messages delivered through collaboration tools. The relevant corrective control for this case is: Provide a simple reporting channel and rapid triage to block malicious destinations.

The fraudulent request fails verification while a legitimately approved change remains traceable. This would be relevant evidence for a different failure: A financial-services employee is induced by a voice impersonator to change payment instructions, usually addressed by Require independent out-of-band callback to a verified contact and dual approval for payment changes. It does not demonstrate that the current problem at Cedar City Utilities was resolved. The specific required evidence is: An employee submission is analyzed, correlated, and blocked before further clicks.

A simulated impostor fails reset verification and an authorized request is audited. This would be relevant evidence for a different failure: A help desk resets privileged passwords after callers recite publicly known employee details, usually addressed by Enforce strong identity proofing and verified callback procedures for high-risk resets. It does not demonstrate that the current problem at Cedar City Utilities was resolved. The specific required evidence is: An employee submission is analyzed, correlated, and blocked before further clicks.

Repeated unsolicited pushes cannot grant access and trigger an identity security alert. This would be relevant evidence for a different failure: Employees repeatedly approve unexpected authentication push prompts after fatigue-inducing request floods, usually addressed by Require number matching or phishing-resistant authenticators and flag repeated unexpected prompts. It does not demonstrate that the current problem at Cedar City Utilities was resolved. The specific required evidence is: An employee submission is analyzed, correlated, and blocked before further clicks.

Provide a simple reporting channel and rapid triage to block malicious destinations. That action fits another problem: Users have no controlled way to report suspicious QR-code messages delivered through collaboration tools. It does not directly remediate the current finding at Clearbrook University: A help desk resets privileged passwords after callers recite publicly known employee details. The relevant corrective control for this case is: Enforce strong identity proofing and verified callback procedures for high-risk resets.

Move sensitive applications to phishing-resistant FIDO2/WebAuthn authentication. That action fits another problem: Remote staff enter passwords on a phishing proxy that can relay basic MFA tokens. It does not directly remediate the current finding at Clearbrook University: A help desk resets privileged passwords after callers recite publicly known employee details. The relevant corrective control for this case is: Enforce strong identity proofing and verified callback procedures for high-risk resets.

Require number matching or phishing-resistant authenticators and flag repeated unexpected prompts. That action fits another problem: Employees repeatedly approve unexpected authentication push prompts after fatigue-inducing request floods. It does not directly remediate the current finding at Clearbrook University: A help desk resets privileged passwords after callers recite publicly known employee details. The relevant corrective control for this case is: Enforce strong identity proofing and verified callback procedures for high-risk resets.

A credential-proxy test cannot complete authentication without the bound authenticator. This would be relevant evidence for a different failure: Remote staff enter passwords on a phishing proxy that can relay basic MFA tokens, usually addressed by Move sensitive applications to phishing-resistant FIDO2/WebAuthn authentication. It does not demonstrate that the current problem at Clearbrook University was resolved. The specific required evidence is: A simulated impostor fails reset verification and an authorized request is audited.

Repeated unsolicited pushes cannot grant access and trigger an identity security alert. This would be relevant evidence for a different failure: Employees repeatedly approve unexpected authentication push prompts after fatigue-inducing request floods, usually addressed by Require number matching or phishing-resistant authenticators and flag repeated unexpected prompts. It does not demonstrate that the current problem at Clearbrook University was resolved. The specific required evidence is: A simulated impostor fails reset verification and an authorized request is audited.

An employee submission is analyzed, correlated, and blocked before further clicks. This would be relevant evidence for a different failure: Users have no controlled way to report suspicious QR-code messages delivered through collaboration tools, usually addressed by Provide a simple reporting channel and rapid triage to block malicious destinations. It does not demonstrate that the current problem at Clearbrook University was resolved. The specific required evidence is: A simulated impostor fails reset verification and an authorized request is audited.

Require independent out-of-band callback to a verified contact and dual approval for payment changes. That action fits another problem: A financial-services employee is induced by a voice impersonator to change payment instructions. It does not directly remediate the current finding at Northbridge University: A help desk resets privileged passwords after callers recite publicly known employee details. The relevant corrective control for this case is: Enforce strong identity proofing and verified callback procedures for high-risk resets.

Apply anti-spoofing mail authentication, banner cues, and sender verification workflows. That action fits another problem: A company allows external display names that impersonate executives on email messages. It does not directly remediate the current finding at Northbridge University: A help desk resets privileged passwords after callers recite publicly known employee details. The relevant corrective control for this case is: Enforce strong identity proofing and verified callback procedures for high-risk resets.

Require number matching or phishing-resistant authenticators and flag repeated unexpected prompts. That action fits another problem: Employees repeatedly approve unexpected authentication push prompts after fatigue-inducing request floods. It does not directly remediate the current finding at Northbridge University: A help desk resets privileged passwords after callers recite publicly known employee details. The relevant corrective control for this case is: Enforce strong identity proofing and verified callback procedures for high-risk resets.

Repeated unsolicited pushes cannot grant access and trigger an identity security alert. This would be relevant evidence for a different failure: Employees repeatedly approve unexpected authentication push prompts after fatigue-inducing request floods, usually addressed by Require number matching or phishing-resistant authenticators and flag repeated unexpected prompts. It does not demonstrate that the current problem at Northbridge University was resolved. The specific required evidence is: A simulated impostor fails reset verification and an authorized request is audited.

Spoofed messages are quarantined or visibly flagged without disrupting legitimate executive mail. This would be relevant evidence for a different failure: A company allows external display names that impersonate executives on email messages, usually addressed by Apply anti-spoofing mail authentication, banner cues, and sender verification workflows. It does not demonstrate that the current problem at Northbridge University was resolved. The specific required evidence is: A simulated impostor fails reset verification and an authorized request is audited.

The fraudulent request fails verification while a legitimately approved change remains traceable. This would be relevant evidence for a different failure: A financial-services employee is induced by a voice impersonator to change payment instructions, usually addressed by Require independent out-of-band callback to a verified contact and dual approval for payment changes. It does not demonstrate that the current problem at Northbridge University was resolved. The specific required evidence is: A simulated impostor fails reset verification and an authorized request is audited.

Configure standards-based IPsec using appropriate IKE authentication and encryption proposals. That action fits another problem: Two remote offices require confidentiality and authenticated integrity for traffic traversing the public Internet. It does not directly remediate the current finding at Bluewater Technology: A file integrity workflow uses reversible encryption as its only proof that a downloaded update was unmodified. The relevant corrective control for this case is: Use a cryptographic digest and verified digital signature for integrity and publisher authenticity.

Inventory vulnerable algorithms and plan interoperable standards-based post-quantum or hybrid migration. That action fits another problem: A long-lived cryptographic system has no plan for migration to quantum-resistant key establishment. It does not directly remediate the current finding at Bluewater Technology: A file integrity workflow uses reversible encryption as its only proof that a downloaded update was unmodified. The relevant corrective control for this case is: Use a cryptographic digest and verified digital signature for integrity and publisher authenticity.

Deploy a valid certificate chain for the service name and enforce normal certificate validation. That action fits another problem: A site serves TLS with a certificate from an untrusted issuer and clients bypass warnings. It does not directly remediate the current finding at Bluewater Technology: A file integrity workflow uses reversible encryption as its only proof that a downloaded update was unmodified. The relevant corrective control for this case is: Use a cryptographic digest and verified digital signature for integrity and publisher authenticity.

The negotiated security associations protect bidirectional traffic and are visible in VPN status. This would be relevant evidence for a different failure: Two remote offices require confidentiality and authenticated integrity for traffic traversing the public Internet, usually addressed by Configure standards-based IPsec using appropriate IKE authentication and encryption proposals. It does not demonstrate that the current problem at Bluewater Technology was resolved. The specific required evidence is: A tampered update fails signature validation while the authentic package validates.

A controlled pilot negotiates supported algorithms and documents rollback and interoperability. This would be relevant evidence for a different failure: A long-lived cryptographic system has no plan for migration to quantum-resistant key establishment, usually addressed by Inventory vulnerable algorithms and plan interoperable standards-based post-quantum or hybrid migration. It does not demonstrate that the current problem at Bluewater Technology was resolved. The specific required evidence is: A tampered update fails signature validation while the authentic package validates.

Clients reject an untrusted chain while the correct service certificate succeeds. This would be relevant evidence for a different failure: A site serves TLS with a certificate from an untrusted issuer and clients bypass warnings, usually addressed by Deploy a valid certificate chain for the service name and enforce normal certificate validation. It does not demonstrate that the current problem at Bluewater Technology was resolved. The specific required evidence is: A tampered update fails signature validation while the authentic package validates.

Use an adaptive password-hashing function with unique salts and suitable work factors. That action fits another problem: A security team assumes a fast general-purpose hash can safely protect stored user passwords by itself. It does not directly remediate the current finding at Atlas Scientific: A file integrity workflow uses reversible encryption as its only proof that a downloaded update was unmodified. The relevant corrective control for this case is: Use a cryptographic digest and verified digital signature for integrity and publisher authenticity.

Use supported IPsec NAT traversal with UDP encapsulation and matching peer configuration. That action fits another problem: A NAT gateway changes IPsec peer addresses and native ESP traffic fails through the path. It does not directly remediate the current finding at Atlas Scientific: A file integrity workflow uses reversible encryption as its only proof that a downloaded update was unmodified. The relevant corrective control for this case is: Use a cryptographic digest and verified digital signature for integrity and publisher authenticity.

Configure standards-based IPsec using appropriate IKE authentication and encryption proposals. That action fits another problem: Two remote offices require confidentiality and authenticated integrity for traffic traversing the public Internet. It does not directly remediate the current finding at Atlas Scientific: A file integrity workflow uses reversible encryption as its only proof that a downloaded update was unmodified. The relevant corrective control for this case is: Use a cryptographic digest and verified digital signature for integrity and publisher authenticity.

Credential storage contains salted adaptive hashes rather than plaintext or fast unsalted digests. This would be relevant evidence for a different failure: A security team assumes a fast general-purpose hash can safely protect stored user passwords by itself, usually addressed by Use an adaptive password-hashing function with unique salts and suitable work factors. It does not demonstrate that the current problem at Atlas Scientific was resolved. The specific required evidence is: A tampered update fails signature validation while the authentic package validates.

A tunnel behind NAT establishes and carries protected traffic without ESP being dropped. This would be relevant evidence for a different failure: A NAT gateway changes IPsec peer addresses and native ESP traffic fails through the path, usually addressed by Use supported IPsec NAT traversal with UDP encapsulation and matching peer configuration. It does not demonstrate that the current problem at Atlas Scientific was resolved. The specific required evidence is: A tampered update fails signature validation while the authentic package validates.

The negotiated security associations protect bidirectional traffic and are visible in VPN status. This would be relevant evidence for a different failure: Two remote offices require confidentiality and authenticated integrity for traffic traversing the public Internet, usually addressed by Configure standards-based IPsec using appropriate IKE authentication and encryption proposals. It does not demonstrate that the current problem at Atlas Scientific was resolved. The specific required evidence is: A tampered update fails signature validation while the authentic package validates.