CompTIA SY0-601 Practice Test - Questions Answers, Page 57

The log files show that the attacker was able to access files and directories that were not intended to be accessible by web users, such as "/etc/passwd" and "/var/log". This indicates that the attacker was able to exploit a vulnerability in the web server or application that allowed them to manipulate the file path and access arbitrary files on the server. This is a type of attack known as directory traversal, which can lead to information disclosure, privilege escalation, or remote code execution3.

The ability of code to target a hypervisor from inside a guest OS is known as VM escape. This is a serious security threat that can compromise the entire virtualized environment and allow an attacker to access other guest OSes or the host OS. VM escape can be achieved by exploiting vulnerabilities in the hypervisor software, the guest OS, or the virtual hardware devices4.

A threat actor who used a sophisticated attack to breach a well-known ride-sharing company and posted on social media that this action was in response to the company's treatment of its drivers is most likely a hacktivist. A hacktivist is a person who uses hacking skills to promote a social or political cause, such as human rights, environmentalism, or anti-corporatism5.

A program that allows individuals to security test the company's internet-facing application and compensates researchers based on the vulnerabilities discovered is best described as a bug bounty program. A bug bounty program is an incentive-based program that rewards ethical hackers for finding and reporting security flaws in software or systems6.

Utilizing split tunneling so only traffic for corporate resources is encrypted would best maintain high-quality videoconferencing while minimizing latency when connected to the VPN. Split tunneling is a technique that allows a VPN user to access both the public internet and the private network simultaneously, without routing all traffic through the VPN. This can improve the performance and quality of videoconferencing applications that rely on low latency and high bandwidth, as well as reduce the load on the VPN server.

The GPS location would be part of the images if all the metadata is still intact. Metadata is data that describes other data, such as file name, size, date, author, etc. Some metadata can also contain information about the device, software, or location that created or modified the data. For example, some digital cameras and smartphones can embed GPS coordinates into the metadata of photos, which can reveal the location where the photos were taken. This can be useful for forensic analysis, but also pose privacy risks.

The concept of connecting a user account across the systems of multiple enterprises is best known as federation. Federation is a process that allows users to authenticate once and access multiple resources or services across different domains or organizations. For example, a user can use their Google account to sign in to various websites or applications that support federation, without creating separate accounts or passwords for each one. Federation can improve user convenience and security, as well as reduce administrative overhead.

An employee receiving a gift card request in an email that has an executive's name in the display field to the email describes a possible business email compromise attack. Business email compromise (BEC) is a type of phishing attack that targets employees who have access to financial or sensitive information, such as accounting, human resources, or executive staff. The attacker impersonates a trusted person, such as a manager, vendor, or client, and requests a fraudulent payment, wire transfer, gift card purchase, or personal information. The attacker may spoof the email address or display name, use a look-alike domain, or compromise a legitimate email account to make the request seem authentic.

Submitting the application to QA before releasing it would best help the team ensure the application is ready to be released to production. QA stands for quality assurance, which is a process of testing and verifying that a software product meets the specified requirements and standards. QA can help identify and fix any bugs, errors, vulnerabilities, or performance issues before the software is deployed to the end users. QA can also ensure that the software meets the security objectives and complies with the best practices and regulations.