CompTIA Security+ SY0-701 - Domains 3 4 5 Architecture Operations Program Management

An organization's risk assessment identifies a potential data breach with an annual probability of 10% and a single occurrence loss of $500,000. What is the ALE (Annual Loss Expectancy)?

A security engineer is configuring email security. They want to prevent email spoofing by verifying that emails come from authorized mail servers for a domain. Which protocol/mechanism accomplishes this?

A security operations center (SOC) analyst receives an alert for a known malware signature detected on a workstation. The workstation is confirmed to be running a licensed PDF reader with no recent changes. Investigation reveals the "malware" signature matches a legitimate PDF library function. What type of alert is this?

A company's security policy requires that privileged administrative access to servers be performed through a dedicated workstation in a secured room, never directly. What is this dedicated workstation called?

A security analyst is reviewing an endpoint detection and response (EDR) alert. A process called "explorer.exe" is making outbound connections to a suspicious IP on port 4444. What is the MOST likely interpretation?