A is the correct answer Susan is conducting passive monitoring by using a SPAN (Switched Port Analyzer) port to observe and analyze traffic to her production website. Passive monitoring involves capturing network traffic without altering it, which allows her to analyze real-time data on performance, latency, errors, and user activity without impacting live traffic flow. This approach provides insights into actual user interactions with her website.

For instance, if a specific risk event is estimated to happen once a year, the ARO would be 1/1/100 = 1 if a specific risk event is estimated to happen once every 10 years, the ARO would be 1/10/100 = 0.1

@Abde Ouhab thanks for your comment, but if you look again you will notice I wrote "For instance" for another scenario :)

C is the correct answer, OpenID Connect builds on OAuth 2.0 to handle authentication, allowing users to use their existing accounts (like Google) to log in to Susan’s website. Remember: OpenID Connect is an authentication protocol OAuth 2.0 is an Authorization protocol

C is the correct answer, Certificate Authority (CA) that issued the certificate must take action. Andrew should contact the issuing CA to report the suspected compromise. Once verified, the CA can then update the CRL to include the revoked certificate, making it publicly known as invalid. This prevents others from trusting the compromised certificate for secure communications.

"C" is the correct answer, Causes the server to reboot, protecting the operating system. The silicon root of trust (SRoT) works by validating the integrity of firmware and system-level processes from the hardware level. If it detects a tampering attempt or malicious code, it can initiate a reboot to return the server to a known good state and prevent unauthorized changes to critical systems. This response also aligns with how the silicon root of trust is designed to safeguard the boot process and secure the OS from low-level threats.