A financial institution has several that currently employ the following controls:
- The severs follow a monthly patching cycle.
- All changes must go through a change management process.
- Developers and systems administrators must log into a jumpbox to
access the servers hosting the data using two-factor authentication.
- The servers are on an isolated VLAN and cannot be directly accessed
from the internal production network.
An outage recently occurred and lasted several days due to an upgrade that circumvented the approval process. Once the security team discovered an unauthorized patch was installed, they were able to resume operations within an hour. Which of the following should the security administrator recommend to reduce the time to resolution if a similar incident occurs in the future?

A security engineer thinks the development team has been hard-coding sensitive environment variables in its code.
Which of the following would BEST secure the company's CI/CD pipeline?

A security manager is creating a standard configuration across all endpoints that handle sensitive data. Which of the following techniques should be included in the standard configuration to ensure the endpoints are hardened?

An HVAC contractor requested network connectivity permission to remotely support/troubleshoot equipment issues at a company location.
Currently, the company does not have a process that allows vendors remote access to the corporate network.
Which of the following solutions represents the BEST course of action to allow the contractor access?

A company's Chief Information Security Officer wants to prevent the company from being the target of ransomware. The company's IT assets need to be protected. Which of the following are the MOST secure options to address these concerns? (Choose three.)