CompTIA Security+ (SY0-601) Certification Practice Test

These questions are part of the practice quiz. Start practicing

• Which of the following actions should a security engineer take to implement Active Directory authentication on Layer 2 switches and ensure local fallback?
• What is a significant characteristic of an evil twin attack?
• Which account policy would best prevent unauthorized access shown by logins from vastly different geographical locations?
• What is the best approach to securing environmental systems from unauthorized access through a compromised staff WiFi network?
• Which method would help identify potential vulnerabilities on hosted web servers running outdated software?
• A global pandemic is forcing a private organization to close some business units. What would be BEST to help executives determine the next course of action?
• After a data breach, what is the best practice to ensure users' credentials remain secure during a reset?
• What is the primary benefit of using automated threat intelligence tools in a security posture?
• What term refers to applications and systems used within an organization without consent or approval?
• For a small company looking to improve its security posture, what solution is the best option?
• What is a significant reason to use automated tools for code validation in the development process?
• What activity is being conducted when a cybersecurity manager holds meetings to discuss hypothetical responses to cyberattacks?
• Which risk management strategy involves using cybersecurity insurance?
• Which backup methodology allows for the fastest database restore time with limited storage available?
• After a ransomware attack, a forensics company needs to review a cryptocurrency transaction between the victim and the attacker. What will the company MOST likely review to trace this transaction?
• An attacker is exploiting a vulnerability that does not have a patch available. What is this type of vulnerability called?
• Which RAID level can handle two simultaneous disk failures and achieve parity?
• Which source would be the best to determine if personal information of a CEO is available for sale?
• To allow PII to be shared securely without compromising security, which action should be taken regarding DLP policies?
• Which action would MOST improve an incident response process that experienced delays in quarantining an infected host?
• To quickly check the validity of an SSL certificate, which method provides the fastest results?
• Which cloud model would BEST meet an organization's need to move from an on-premises email solution to a cloud-based one?
• Which technology should be used for non-disruptive and user-friendly MFA implementation?
• Why would a server administrator place a document named password.txt on their desktop?
• A security analyst captures 1GB of inbound network traffic for analysis. Which tool should the analyst use to review the pcap file?
• What is the primary goal of a penetration test?
• During an incident response, which type of attack is best described by a log entry indicating unauthorized script execution on a web page?
• Which of the following best describes a 'brute-force attack'?
• For an organization with low tolerance for user inconvenience, which solution is MOST acceptable to protect against data theft on laptop hard drives?
• A security analyst notices a high number of errors in a fingerprint scanner's access logs. What is the MOST likely cause of access issues?
• What is a key security implication of using a heterogeneous device approach in mobile device management (MDM)?
• Which logs would MOST likely indicate the original source of malware following an infection on a host system?
• Which two technologies are being utilized to allow users to access their desktop and information systems across thin clients with smart cards?
• What should a security administrator do upon discovering unknown devices connected to a company's wireless network?
• What is the likely cause of multiple end users downloading files with the .tar.gz extension without consent?
• Which type of attack is indicated by millions of half-open connections to port 443 from various source IPs?
• To prevent a Remote Access Trojan (RAT) from being reinstalled, which recommendation should be prioritized?
• Which measure is least effective against physical intrusions?
• Which of the following would be the BEST resource for a software developer who is looking to improve secure coding practices for web applications?
• Which tool would be BEST for identifying potential vulnerabilities on web servers?
• What is a common method to ensure the confidentiality of data within a secure lab environment that is not connected to external networks?
• What does a man-in-the-middle attack typically aim to accomplish?
• Which of the following targeted the organization involved in a sophisticated cyberattack?
• What steps should a network engineer take to troubleshoot intermittent connectivity issues with wireless devices in a warehouse?
• What is the most likely cause of malware alerts detected on employees' workstations after returning from a trade show?
• Which solution allows guests at a corporate headquarters to access the Internet while requiring acceptance of an acceptable use policy?
• What is one benefit of implementing containerization in a BYOD environment?
• What is the primary concern of the company when they clean whiteboards and clear desks before a tour?
• What is the primary purpose of a security policy?
• What is the most effective method for deploying application patches?
• What is the primary purpose of using a mantrap in physical security?
• Which method is used to ensure that data transmission over the network is secure?
• What is the primary purpose of an intrusion detection system (IDS)?
• A remote user recently took a two-week vacation abroad with a corporate-owned laptop. Upon returning, the user has been unable to connect the laptop to the VPN. What is the MOST likely reason for this inability?
• In a network security design where traffic is routed through a VPN, which element is the WEAKEST in ensuring data protection?
• To validate an incident response plan's thoroughness, which activity will the CSO MOST likely conduct?
• What is the best solution for a company looking to implement a BYOD policy to protect company information?
• What type of attack is likely responsible for multiple failed logins before a successful entry occurs?
• What type of impact is an organization experiencing when customers reduce their orders after a security incident?
• In which scenario would a DNS sinkhole be effective in preventing an attack?
• In the context of risk management, what does RPO stand for?
• An organization wants to implement a third factor to an existing multifactor authentication that already utilizes a smart card and password. Which of the following would meet the organization's needs for a third factor?
• Which type of attack is characterized by executing unauthorized scripts in the web browser of users?
• What represents a threat where professors place unauthorized servers on a university network?
• What is the BEST way for a security analyst to analyze a potentially malicious document without executing it?
• Based on the output received while investigating alerts from the SIEM, which attack is being executed?
• If an attacker is using a zero-day exploit, what does this imply?
• A security analyst is reviewing historical logs for specific activities outlined in a security advisory. What is the analyst doing?
• Which security measure isolates sensitive technology from external networks?
• Some laptops recently went missing from a locked storage area protected by RFID-enabled locks. The employee who unlocked the door was on vacation. What MOST likely occurred?
• To best prevent unauthorized access to a wireless network, which security method should be implemented?
• What combination of approaches provides the most secure form of two-factor authentication?
• When addressing the presence of unapproved devices on a wireless network, which action should be taken in addition to enabling MAC filtering?
• What forensic technique should be used to ensure the admissibility of evidence when authorities are collecting evidence for fraud?
• Who is responsible for applying encryption to a data set on a hard disk?
• What is the most likely cause when an analyst cannot open an encrypted email?
• Which of the following attacks is likely associated with changes made to a vendor’s IP address during an investigation?
• What is the most effective solution for providing security and visibility into multiple SaaS and IaaS platforms?
• What should a company do to best protect itself from data exfiltration via removable media?
• What type of intelligence source should a security analyst review to understand potential attacks on executives?
• What is the best method to implement secure authentication to third-party websites without using users' passwords?
• A network administrator notices web pages are experiencing long load times. After confirming it's not a routing issue, which condition is the router MOST likely experiencing?
• What service would BEST meet the requirement for securely transferring files while authenticating both the IP header and the payload?
• Which type of disaster recovery test requires the least amount of time from the disaster recovery team?
• Which of the following is an example of a common method of establishing secure communication over a network?
• What is the role of a risk assessment in an organization's security posture?
• What is the BEST method to prevent the exploitation of the SMB network protocol?
• What is the most likely type of attack that occurred when a user entered their credentials into a forged recruiting application website?
• In response to a data breach, what immediate action should be taken?
• An administrator needs to capture an exact copy of an employee's hard disk who is suspected of emailing proprietary information. What should the administrator use?
• What should the Chief Security Officer implement to enhance resilience against ransomware attacks?
• What type of authentication does an administrator provide when they combine a password with a gesture on a touchscreen?
• What is a crucial step to take when hardening a smart switch installed in a hospital?
• If a company’s username and password database was posted publicly in plain text, which action would best help mitigate future data exfiltration risks?
• Which MFA factors are used when a user enters a password and then an authentication code?
• Which of the following, when used at the design stage, improves the efficiency, accuracy, and speed of a database?
• A security administrator checks a network switch's table. Which of the following attacks is happening to this switch?
• Which technology is best for centralizing logs to create a security baseline?
• What does the term 'data breach' refer to in cybersecurity?
• During which stage of the incident response process is it appropriate to detail how a security incident occurred and the steps taken for recovery?
• To generate a server certificate for secure RDP connections, what is the FIRST step the analyst should perform?
• What is the most recommended action to prepare for the eradication of compromised accounts and computers?
• To comply with a corporate mobile device policy, what two controls should be implemented for mobile users?
• When implementing centralized event-log management, what is the most significant benefit?
• What type of malicious email usually attempts to steal personal information by claiming the recipient has won a prize?
• During a security audit, an analyst notices repeated failed attempts to access user accounts. What type of attack would this likely represent?
• Which type of security tool is known for analyzing network traffic and highlighting anomalies?
• Which type of authentication method is considered the most secure?
• Which training activity would be most suitable for enhancing the skill levels of a company's developers?
• What type of penetration testing involves testers only having access to customer documentation?
• Which solution would BEST communicate to the leadership team the levels of the organization's vulnerabilities?
• A network technician is installing a guest wireless network at a coffee shop, providing the password on the customer's receipt. What will provide the highest level of security with the least overhead?
• What is the best solution for ensuring always-available connectivity for an online business during outages?
• Which administrative control would most effectively reduce malware execution occurrences?
• What is the best method for mitigating the risk of employees working from high-risk countries while maintaining work flexibility?
• An organization wants to improve its security posture by installing an IDS. What type of control is an IDS categorized as?
• What action should a security engineer take to prevent data exfiltration through cracked passwords in the future?
• What can a security analyst conclude if a SIEM alert indicates a login to a test account used for early attack detection?
• Which incident response step involves actions to protect critical systems while maintaining business operations?
• Which command should a security analyst use to securely forward public keys to remote systems?
• What is the MOST effective measure to mitigate vulnerabilities in an outdated process control terminal?
• Which organizational policies are MOST likely to help in detecting fraud conducted by existing employees?
• Which component of network security is responsible for ongoing data protection and management?
• Which technology best balances BYOD culture while protecting company data?
• What is a common characteristic of data bias in machine learning?
• Which of the following BEST describes a method to ensure ongoing assessments of security program effectiveness?
• What is the best approach to manage security and customer privacy when a sales department uses mobile devices?
• Which type of server is most likely to assist in recovering logs that were deleted by a privileged user?
• What is the most likely cause of wireless connectivity issues occurring near the parking lot of a building?
• When selecting a technical solution for identity management, changing from in-house to a third-party SaaS provider exemplifies which risk management strategy?
• Which two elements are essential for maintaining optimal environmental temperature in a data center layout?
• Upon reviewing log files, what indicates that a directory-traversal attack has occurred?
• What physical security measure is best to prevent unauthorized entry?
• Which of the following is an example of a reconnaissance attack?
• Which ISO standard is certified specifically for privacy?
• What biometrics are MOST likely to be used for authentication at country borders without the need for enrollment?
• An attacker has exfiltrated password hashes. Which type of password attack is this?
• What is the greatest risk to intellectual property that led to the implementation of conductive metal lockboxes for personal devices?
• What type of protection can prevent unauthorized information disclosure through encryption?
• What type of controls should be applied to mitigate risk when an encryption standard cannot be upgraded in a web application?
• What preventative measure could have MOST likely stopped a data breach caused by an executive charging a phone in a public area?
• What is the most likely cause of a forensic examiner receiving an error while attempting to dump passwords from physical memory?
• Which of the following is a preventive measure against data breaches?
• Which measure should be implemented to reduce risks for remote users accessing company resources from unauthorized locations?
• What kind of code testing involves executing the code and evaluating its behavior?
• What action should a security team take to prevent hackers from invoking command-line interpreters using native administrative tools?
• What recommendation would BEST mitigate the impact of a worm infection across the network in the future?
• What must be less than 12 hours to maintain a positive total cost of ownership for manufacturing equipment?
• Which of the following BEST describes the type of attack indicated by the given logs?
• What is the MOST likely root cause for stolen corporate credit cards reported by a bank?
• Which team is dedicated to testing the effectiveness of organizational security programs by emulating attackers' techniques?
• Which of the following is a primary goal of threat containment during an incident response?
• An organization in a flood zone is likely to document IT restoration concerns in which plan?
• What does the term 'phishing' specifically refer to in cybersecurity?
• Which technical control is best suited for detecting and preventing buffer overflows?
• When negotiating with a new vendor, what should be included to address response times to major incidents?
• Which method would most likely help a company find the cause of sensitive data being shared publicly?
• What is the most likely source containing data on applications and files open before a user's computer was forcibly shut down?
• What method can organizations use to ensure that software updates do not introduce vulnerabilities?
• What is the MOST likely goal of an attacker installing malware on a popular website?
• Which type of malware is specifically designed to remain undetected on a system?
• Which of the following describes the ability of code to target a hypervisor from inside?
• What is an important function of a security control matrix?
• Which method is the best way to store credit card numbers for easy reordering on an e-commerce website?
• A network administrator is setting up wireless access points in all the conference rooms and wants to authenticate devices using PKI. Which of the following should the administrator configure?
• What scan type produces the BEST vulnerability scan report for periodic assessments of production systems?
• Which solutions would best allow control over company emails on BYOD devices and limit data exfiltration?
• Which type of attack involves redirecting users to a fraudulent website?
• Which technology is crucial for protecting credit card information during online transactions?
• What is the primary responsibility of a data owner compared to a data custodian?
• What protocol should be implemented to authenticate the entire packet in a VPN configuration?
• What solution would meet the requirements for managing administrator/root credentials and service accounts effectively?
• A company experiences frequent data breaches. Which strategy focuses on proactive identification of vulnerabilities?
• Which of the following is a recommended practice for ensuring secure password storage?
• A user reported being prompted for a name and password after connecting to the corporate wireless SSID and is now facing unauthorized transactions. What attack vector was MOST likely used?
• What is the primary purpose of a risk register?
• What approach should be taken to ensure secure remote work for employees?
• To prevent other devices on the network from accessing a laptop using public WiFi, which two solutions would be most effective?
• During a forensic investigation, which type of data would likely be discovered in the metadata of images taken by a cellular phone?
• What technology allows for the separation of different network segments to improve security?
• A company moving its operations to the cloud wants to prevent users from downloading company applications for personal use and has visibility into which applications are being used. What solution will BEST meet these requirements?
• Which form of attack involves exploiting vulnerabilities in a user's trust in a trusted source?
• A Chief Security Officer (CSO) is concerned about the amount of PII stored locally on salespersons' laptops. Which recommendation would BEST address the CSO's concern?
• A CCTV camera that is not monitored falls into which category of security controls?
• What factors are MOST critical for the live acquisition of data during forensic analysis?
• What would be an effective measure against man-in-the-middle attacks on network communications?
• What solution can help ensure availability of point-of-sale systems during peak sales periods?
• Which solution should a security administrator implement to reduce time spent on common security tasks without increasing staff?
• What control is likely recommended for restricting access to certain network segments using data-link layer security?
• What is the primary goal of an incident response plan?
• Which method would BEST detect the presence of a rootkit in future incidents?
• What is the primary goal of a business continuity plan regarding equipment downtime?
• What is the best way to enhance security on a Linux server after purchasing a new PAM solution?
• Which of the following will MOST likely cause machine learning and AI-enabled systems to operate with unintended consequences?
• Which activity involves identifying and examining unusual network patterns potentially indicating an attack?
• Which of the following is a fundamental concept of network segmentation?
• What type of attack is described by creating a fake website to exploit users?
• What is the purpose of network usage rules in a BYOD policy?
• Which security standard must a company comply with to accept credit card payments on its e-commerce platform?
• Which of the following provides the BEST protection for sensitive information stored in cloud-based services while allowing data functionality?
• What is the purpose of including a CVSS score in a vulnerability assessment report?
• Which method would MOST likely support the integrity of a voting machine?
• Which of the following scenarios BEST describes a risk reduction technique?
• Which protective measure should be implemented to guard against malware that spreads unnoticed through network shares?
• What technique explains the addition of randomly generated data to passwords for secure storage?
• What MDM configuration must an engineer consider when traveling with a corporate-owned mobile device that prohibits personal data?
• What type of agreement is BEST for organizations that want to cooperate without creating binding contractual obligations?
• In monitoring an industrial system, which mitigation strategy is BEST for alerts while ensuring operational security?
• Which job role sponsors data quality and ensures regulatory requirements are met?
• Which method allows for the use of functional test data in new systems while protecting sensitive information?
• A security analyst notices a particular account attempting to transfer large amounts of money on a web server. Which of the following types of attack is MOST likely being conducted?
• During an investigation, what should a technician do to maintain the chain of custody for a mobile device?
• What type of control is a turnstile classified as?
• What is the BEST document to establish responsibilities and monetary penalties for managing third-party risk?
• Which resource is MOST likely consulted to validate affected platforms during a vulnerability assessment?
• What is the primary reason an appliance may remain vulnerable despite previous assessments?
• What is the most likely cause of a user experiencing pop-ups and spam after receiving digital promotional materials?
• A user receives an SMS that asks for bank details. Which social-engineering technique was used?
• Which of the following BEST describes the security concerns when hosting web applications in the cloud?
• What should a security administrator implement to prevent unauthorized program installations by users with administrative access?
• Which of the following is MOST likely to outline the roles and responsibilities of data controllers and data processors?
• What type of attack is most likely causing a wireless network performance issue at a public location, as inferred from Wireshark output?
• What security feature allows organizations to provide single sign-on access while ensuring user password security?
• For a company that handles sensitive data, which access control model is BEST to implement for data protection?
• During an unauthorized payment investigation, what does the presence of unusual log entries indicating users clicked an unsubscribe link suggest?
• What would most likely help mitigate phishing and spear-phishing attacks within a company?
• What can security administrators use to assess system configurations against compliance baselines?
• What solution should be recommended to monitor data in transit to prevent potential issues in a cloud environment?
• A manager decides to acquire cybersecurity insurance for the company. Which of the following risk management strategies is the manager adopting?
• A manufacturer creates designs for very high security products required to be protected by government regulations. These designs are not accessible by corporate networks or the Internet. What is the BEST solution to protect these designs?
• A security engineer enhances MFA access with a key card and fingerprint scan. What would add another factor of authentication?
• What is the BEST mitigation strategy to prevent an attack detected in web logs?
• What is an effective method to prevent data leakage in a company using cloud services?
• Which biometric technology might be used for identifying passengers without any prior enrollment at border checkpoints?
• If a possible breach occurred, what should the network security manager review first?
• Which security practice would have addressed unauthorized access to accounts after an executive departure?
• The process of passively gathering information prior to launching a cyberattack is called?
• What aspect of security does a VPN primarily enhance?
• What type of analysis helps determine the root cause of security incidents?
• Which process is BEST described as bringing all code changes from multiple team members into the same development project through automation?
• Which RAID configuration is best suited for high read speeds and fault tolerance, with low risk of multiple drive failures?
• What solution should a network administrator implement to improve network security by blocking malicious traffic and stopping network-based attacks?
• Which cloud service model provides clients with servers, storage, and networks only?
• To defend against potential API attacks, what is the best strategy for an organization?
• What is the primary goal of a disaster recovery plan?
• In a forensics investigation, which type of file is most useful for understanding what was in the memory of a compromised server?
• Which method is BEST for creating a detailed diagram of wireless access points and hot-spots?
• What is the most likely cause of a computer sending an email address and number to an external IP address?
• Which of the following algorithms has the smallest key size?
• What type of plan is an organization likely developing in response to a total loss of critical systems and data?
• Which environment is most suitable for assessing the impacts of database migrations using the final version of code?
• An administrator must gesture on a touch screen after entering a username and password. What type of authentication is being demonstrated?
• What do we call a security exploit with no vendor patch readily available?
• In reviewing logs, what type of attack could a security analyst be observing if there are indications of repeated failed authentication attempts?
• Which control sets should be included in a well-written Business Continuity Plan (BCP)?
• Which application attack is being tested if the URL shows a session ID after clicking a link?
• What component forwards logs to a central source for analysis in a security strategy?
• What risk does a company face by allowing users to select mobile devices from multiple vendors?
• Which access control scheme allows an object's access policy to be determined by its owner?
• What is a common practice to ensure the integrity of data during application development?
• Under GDPR, who is MOST responsible for the protection of users' privacy and rights on a website?
• What type of social-engineering attack is conducted by creating a fake website to trick users into providing personal information?
• During what phase of incident response would an organization conduct a full recovery after a threat?
• Which solution is best for providing security and manageability in a multi-cloud environment?
• What security principle focuses on limiting a user’s access to only what is necessary to perform their job?
• What did the security assessment identify with the use of DES and 3DES on production servers?
• A security engineer is reviewing log files after discovering usernames and passwords for the organization’s accounts. Which type of attack is MOST likely indicated by an IP address change lasting eight hours?
• Which technique uses a fake website to lure users into providing sensitive information?
• Which protocol should a network administrator use to ensure integrity encryption and authentication for a site-to-site VPN utilizing IPSec?
• Which cloud service model offers software applications over the Internet without direct management by the user?
• What social-engineering technique is being used if a CFO receives a fraudulent email requesting a money transfer?
• Which configuration provides the greatest security benefit for devices used internationally by staff who travel extensively?
• To comply with PCI DSS, what should a security manager primarily focus on?
• Which two strategies would best enhance resiliency and uptime in a new datacenter?
• Which native tool can a security analyst use to map services running on a server to the server's listening ports?
• When configuring a vulnerability scanner for a global organization, what is the BEST way to mitigate the risk of unauthorized access to service accounts?
• After a security issue with website access, what attack most likely occurred on the original DNS server?
• In risk management, what does the strategy 'risk transference' involve?
• Which policy would help identify and mitigate single points of failure in IT operations?
• What does segmentation help achieve in network security?
• A commercial cyber-threat intelligence organization observes IoCs across a variety of customers. What is the organization MOST likely obligated to do before releasing specific threat intelligence?
• Which resource would be the best for determining the priority order for upgrading the wireless infrastructure in an office?
• In which scenario would steganography most likely be employed?
• What is the most likely cause of a data breach on a registration page requiring personal information?
• What is the primary function of Network Intrusion Prevention Systems (NIPS)?
• A security auditor is reviewing vulnerability scan data. Which of the following BEST indicates that valid credentials were used during the scan?
• What command would be BEST to use if iptables is dropping all connections and needs to remove existing rules?
• What is the purpose of employing compensatory controls for less secure devices in a heterogeneous MDM strategy?
• Which network attack is the researcher MOST likely experiencing if they receive a connection issue while using SSH?
• An organization’s RPO is two hours with critical system usage from 9:00 am to 5:00 pm. What is the best backup implementation to meet this requirement?
• What type of attack involves exploiting a user’s web browser by manipulating existing session tokens?
• A university experiences recurring Internet connectivity outages. This situation is characterized by which types of attacks?
• Which approach can be used to enforce security policies on employees’ personal devices accessing corporate networks?
• Which service should a cybersecurity administrator utilize to efficiently manage an on-premises network with a reduced team?
• Which type of attack is MOST likely being detected by an Event Viewer message stating, "Special privileges assigned to new login"?
• Which framework is typically used to assess security controls in an organization?
• A company wants to rely on another platform for authorization. What is the best approach to implement this?
• Which tactic would an attacker MOST likely use when company engineers participate in a public Internet forum?
• What method best describes how an attacker compromised a laptop according to SIEM logs?
• Which security framework evaluates risks based on the likelihood of threats targeting vulnerabilities?
• What should be performed to securely store a duplicate copy of a CEO's hard drive for forensic processes?
• Which RAID level should a cybersecurity administrator select to achieve two-drive redundancy for fault tolerance?
• Which approach is recommended to educate employees about security threats?
• What should a CISO read and understand to create a data privacy policy?
• In a network assessment, which is a common indicator of a successful brute-force attack?
• In which situation is it BEST to use a detective control type for mitigation?
• What does the 60-minute expectation for system availability indicate?
• In a cloud environment, what type of technology helps in managing and mitigating data loss across diverse platforms?
• What type of testing should be performed to ensure a web application can handle unexpected input without crashing?
• What should an IT administrator do FIRST after recovering from a ransomware attack to prevent future incidents?
• Which of the following solutions helps ensure secure transmission of sensitive information online?
• What was the most likely cause of a data compromise after a laptop theft in a cloud-based environment?
• What action would best ensure an application is ready for release to production?
• Which practice in software development ensures that code changes can be merged reliably?
• From which source did an alert about PII being sent via email MOST likely originate?
• How can organizations minimize the risk of insider threats effectively?
• What does the process of code-execution testing, black-box testing, and non-functional testing BEST describe?
• What is the BEST source an analyst could review to understand how an incident occurred due to a lack of patching?
• What principal risk does application whitelisting mitigate in an organization?
• To monitor who is accessing files on a Windows server, what command should an analyst use?
• Which of the following vulnerabilities is MOST likely to adversely impact unpatched programmable-logic controllers and OT systems accessible over the Internet?
• A nuclear plant was attacked, and all networks were air gapped. A subsequent investigation revealed a worm as the source of the issue. What is the most likely explanation?
• Which type of certificate would be best for a company that wants to secure multiple subdomains?