Which of the following are the best security controls for controlling on-premises access? (Select two.)

Phone authentication application

Which of the following is the best way to validate the integrity and availability of a disaster recovery site?

Periodically test the generators.

Develop requirements for database encryption.

Which of the following is a possible consequence of a VM escape?

An attacker can access the hypervisor and compromise other VMs.

Malicious instructions can be inserted into memory and give the attacker elevated permissions.

An attacker can access the hypervisor and compromise other VMs.

Unencrypted data can be read by a user in a separate environment.

Users can install software that is not on the manufacturer's approved list.

Which of the following is prevented by proper data sanitization?

Hackers' ability to obtain data from used hard drives

Devices reaching end-of-life and losing support

Disclosure of sensitive data through incorrect classification

Incorrect inventory data leading to a laptop shortage

Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate endpoints?

To track the status of patch installations

To find shadow IT cloud deployments

To continuously monitor hardware inventory

To hunt for active attackers in the network

An organization has a new regulatory requirement to implement corrective controls on a financial system. Which of the following is the most likely reason for the new requirement?

To prevent unauthorized changes to financial data

To defend against insider threats altering banking details

To ensure that errors are not passed to other systems

To allow for business insurance to be purchased

To prevent unauthorized changes to financial data

Which of the following is an example of a data protection strategy that uses tokenization?

Replacing sensitive data with surrogate values

Encrypting databases containing sensitive data

Replacing sensitive data with surrogate values

Removing sensitive data from production systems

Hashing sensitive data in critical systems

Which of the following activities should a systems administrator perform to quarantine a potentially infected system?

Move the device into an air-gapped environment.

Disable remote log-in through Group Policy.

Convert the device into a sandbox.

Remote wipe the device using the MDM platform.

Which of the following is a reason environmental variables are a concern when reviewing potential system vulnerabilities?

The contents of environmental variables could affect the scope and impact of an exploited vulnerability.

In-memory environmental variable values can be overwritten and used by attackers to insert malicious code.

Environmental variables define cryptographic standards for the system and could create vulnerabilities if deprecated algorithms are used.

Environmental variables will determine when updates are run and could mitigate the likelihood of vulnerability exploitation.

CompTIA SY0-701 Practice Test 10 - Free Online Exam Questions 361-400

Which of the following most accurately describes the order in which a security engineer should implement secure baselines?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-701 Practice Test 10

Question

CompTIA SY0-701 Practice Tests

Practice Tests