ExamGecko
Search Search Login
Home Home / CompTIA / SY0-701
Question list
Search
Search

List of questions

Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?
Which of the following is used to add extra complexity before using a one-way data transformation algorithm?
An organization is building a new backup data center with cost-benefit as the primary requirement and RTO and RPO values around two days. Which of the following types of sites is the best for this scenario?
A Chief Information Security Officer wants to monitor the company's servers for SQLi attacks and allow for comprehensive investigations if an attack occurs. The company uses SSL decryption to allow traffic monitoring. Which of the following strategies would best accomplish this goal?
Which of the following has been implemented when a host-based firewall on a legacy Linux system allows connections from only specific internal IP addresses?
A technician is opening ports on a firewall for a new system being deployed and supported by a SaaS provider. Which of the following is a risk in the new system?
A newly identified network access vulnerability has been found in the OS of legacy loT devices. Which of the following would best mitigate this vulnerability quickly?
Which of the following involves an attempt to take advantage of database misconfigurations?
An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being attempted? (Choose two.)
Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?

Question 8 - SY0-701 discussion

Report
Export

A technician is opening ports on a firewall for a new system being deployed and supported by a SaaS provider. Which of the following is a risk in the new system?

A.
Default credentials
Most voted
Answers (2)
Most voted
A.
Default credentials
B.
Non-segmented network
Answers
B.
Non-segmented network
C.
Supply chain vendor
Answers
C.
Supply chain vendor
D.
Vulnerable software
Answers
D.
Vulnerable software
Suggested answer: C

Explanation:

A supply chain vendor is a third-party entity that provides goods or services to an organization, such as a SaaS provider. A supply chain vendor can pose a risk to the new system if the vendor has poor security practices, breaches, or compromises that could affect the confidentiality, integrity, or availability of the system or its data. The organization should perform due diligence and establish a service level agreement with the vendor to mitigate this risk. The other options are not specific to the scenario of using a SaaS provider, but rather general risks that could apply to any system.

Show Answer
asked 02/10/2024
Hayat Hassan
44 questions
PreviousPreviousNextNext
User
Your answer:
4 comments
Sorted by
Up
0
Down
User
stephanie bagcal

Edited 8 days ago

Voted C

answer c

Reply
Reply
Report
Up
0
Down
User
Dewi Fitriyani

Edited 19 days ago

Voted A

A correct. Default credentials pose a significant security risk because if they are not changed, they can be easily exploited by attackers to gain unauthorized access to the system. Ensuring that default passwords are updated to strong, unique passwords is a critical step in securing a new system.

Reply
Reply
Report
Up
0
Down
User
Aaaa ddsdss

Edited 19 days ago

Voted C

I choose C. Since the new system is supported by a SaaS (Software as a Service) provider, the organization is reliant on an external vendor for this systems maintenance, security, and reliability. T

Reply
Reply
Report
Up
0
Down
User
Andrew Vogel

Edited 19 days ago

Voted A

A. Default credentials Using default credentials can pose a significant security risk, as these are often well-known and can be exploited by attackers if not changed. Its crucial for technicians to ensure that default usernames and passwords are updated to stronger, unique credentials.

Reply
Reply
Report
ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms