An accounting clerk sent money to an attacker's bank account after receiving fraudulent instructions over the phone to use a new account. Which of the following would most likely prevent this activity in the future?

Updating processes for sending wire transfers

Standardizing security incident reporting

Executing regular phishing campaigns

Implementing insider threat detection measures

Updating processes for sending wire transfers

Which of the following is the first step to secure a newly deployed server?

Close unnecessary service ports.

Update the current version of the software.

Which of the following actions must an organization take to comply with a person's request for the right to be forgotten?

Remove all of the person's data.

Purge all personally identifiable attributes.

Remove all of the person's data.

Obfuscate all of the person's data.

Which of the following best explains a concern with OS-based vulnerabilities?

An exploit would give an attacker access to system functions that span multiple applications.

The OS vendor's patch cycle is not frequent enough to mitigate the large number of threats.

Most users trust the core operating system features and may not notice if the system has been compromised.

Exploitation of an operating system vulnerability is typically easier than any other vulnerability.

As part of new compliance audit requirements, multiple servers need to be segmented on different networks and should be reachable only from authorized internal systems. Which of the following would meet the requirements?

Configure firewall rules to block external access to Internal resources.

Set up a WAP to allow internal access from public networks.

Implement a new IPSec tunnel from internal resources.

Deploy an Internal Jump server to access resources.

A Chief Information Security Officer (CISO) has developed information security policies that relate to the software development methodology. Which of the following would the CISO most likely include in the organization's documentation?

Secrets management configurations

A security report shows that during a two-week test period. 80% of employees unwittingly disclosed their SSO credentials when accessing an external website. The organization purposely created the website to simulate a cost-free password complexity test. Which of the following would best help reduce the number of visits to similar websites in the future?

Introduce a campaign to recognize phishing attempts.

Block all outbound traffic from the intranet.

Introduce a campaign to recognize phishing attempts.

Restrict internet access for the employees who disclosed credentials.

Implement a deny list of websites.

A company evaluates several options that would allow employees to have remote access to the network. The security team wants to ensure the solution includes AAA to comply with internal security policies. Which of the following should the security team recommend?

Web proxy for all remote traffic

Which of the following best describe the benefits of a microservices architecture when compared to a monolithic architecture? (Select two).

Improved scalability of the system

Increased compartmentalization of the system

Reduced cost of ownership of the system

Improved scalability of the system

Increased compartmentalization of the system

Stronger authentication of the system

Reduced complexity of the system

After a series of account compromises and credential misuse, a company hires a security manager to develop a security program. Which of the following steps should the security manager take first to increase security awareness?

Update policies and handbooks to ensure all employees are informed of the new procedures.

Evaluate tools that identify risky behavior and distribute reports on the findings.

Send quarterly newsletters that explain the importance of password management.

Develop phishing campaigns and notify the management team of any successes.

Update policies and handbooks to ensure all employees are informed of the new procedures.

Which of the following activities uses OSINT?

Collecting evidence of malicious activity

Producing IOC for malicious artifacts

An organization's web servers host an online ordering system. The organization discovers that the servers are vulnerable to a malicious JavaScript injection, which could allow attackers to access customer payment information. Which of the following mitigation strategies would be most effective for preventing an attack on the organization's web servers? (Select two).

Regularly updating server software and patches

Utilizing a web-application firewall

Regularly updating server software and patches

Implementing strong password policies

Encrypting sensitive data at rest and in transit

Utilizing a web-application firewall

Performing regular vulnerability scans

Removing payment information from the servers

A security analyst receives an alert that there was an attempt to download known malware. Which of the following actions would allow the best chance to analyze the malware?

Obtain and execute the malware in a sandbox environment and perform packet captures.

Review the IPS logs and determine which command-and-control IPs were blocked.

Analyze application logs to see how the malware attempted to maintain persistence.

Run vulnerability scans to check for systems and applications that are vulnerable to the malware.

Obtain and execute the malware in a sandbox environment and perform packet captures.

A program manager wants to ensure contract employees can only use the company's computers Monday through Friday from 9 a.m. to 5 p.m. Which of the following would best enforce this access control?

Creating a GPO for all contract employees and setting time-of-day log-in restrictions

Creating a discretionary access policy and setting rule-based access for contract employees

Implementing an OAuth server and then setting least privilege for contract employees

Implementing SAML with federation to the contract employees' authentication server

Which of the following makes Infrastructure as Code (IaC) a preferred security architecture over traditional infrastructure models?

Configuration can be better managed and replicated.

Common attacks are less likely to be effective.

Configuration can be better managed and replicated.

Outsourcing to a third party with more expertise in network defense is possible.

Optimization can occur across a number of computing instances.

An attorney prints confidential documents to a copier in an office space near multiple workstations and a reception desk. When the attorney goes to the copier to retrieve the documents, the documents are missing. Which of the following would best prevent this from reoccurring?

Set up LDAP authentication on the printer.

Place the copier in the legal department.

Configure DLP on the attorney's workstation.

Set up LDAP authentication on the printer.

Conduct a physical penetration test.

CompTIA SY0-701 Practice Test 14 - Free Online Exam Questions 521-560

During a recent log review, an analyst found evidence of successful injection attacks. Which of the following will best address this issue?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-701 Practice Test 14

Question

Drag and Drop

Hot Area

CompTIA SY0-701 Practice Tests

Practice Tests