An accounting clerk sent money to an attacker's bank account after receiving fraudulent instructions over the phone to use a new account. Which of the following would most likely prevent this activity in the future?

Updating processes for sending wire transfers

Standardizing security incident reporting

Executing regular phishing campaigns

Implementing insider threat detection measures

Updating processes for sending wire transfers

Which of the following is the first step to secure a newly deployed server?

Close unnecessary service ports.

Update the current version of the software.

Which of the following actions must an organization take to comply with a person's request for the right to be forgotten?

Remove all of the person's data.

Purge all personally identifiable attributes.

Remove all of the person's data.

Obfuscate all of the person's data.

Which of the following best explains a concern with OS-based vulnerabilities?

An exploit would give an attacker access to system functions that span multiple applications.

The OS vendor's patch cycle is not frequent enough to mitigate the large number of threats.

Most users trust the core operating system features and may not notice if the system has been compromised.

Exploitation of an operating system vulnerability is typically easier than any other vulnerability.

As part of new compliance audit requirements, multiple servers need to be segmented on different networks and should be reachable only from authorized internal systems. Which of the following would meet the requirements?

Configure firewall rules to block external access to Internal resources.

Set up a WAP to allow internal access from public networks.

Implement a new IPSec tunnel from internal resources.

Deploy an Internal Jump server to access resources.

A Chief Information Security Officer (CISO) has developed information security policies that relate to the software development methodology. Which of the following would the CISO most likely include in the organization's documentation?

Secrets management configurations

A security report shows that during a two-week test period. 80% of employees unwittingly disclosed their SSO credentials when accessing an external website. The organization purposely created the website to simulate a cost-free password complexity test. Which of the following would best help reduce the number of visits to similar websites in the future?

Introduce a campaign to recognize phishing attempts.

Block all outbound traffic from the intranet.

Introduce a campaign to recognize phishing attempts.

Restrict internet access for the employees who disclosed credentials.

Implement a deny list of websites.

A company evaluates several options that would allow employees to have remote access to the network. The security team wants to ensure the solution includes AAA to comply with internal security policies. Which of the following should the security team recommend?

Web proxy for all remote traffic

Which of the following best describe the benefits of a microservices architecture when compared to a monolithic architecture? (Select two).

Improved scalability of the system

Increased compartmentalization of the system

Reduced cost of ownership of the system

Improved scalability of the system

Increased compartmentalization of the system

Stronger authentication of the system

Reduced complexity of the system

After a series of account compromises and credential misuse, a company hires a security manager to develop a security program. Which of the following steps should the security manager take first to increase security awareness?

Update policies and handbooks to ensure all employees are informed of the new procedures.

Evaluate tools that identify risky behavior and distribute reports on the findings.

Send quarterly newsletters that explain the importance of password management.

Develop phishing campaigns and notify the management team of any successes.

Update policies and handbooks to ensure all employees are informed of the new procedures.

Which of the following activities uses OSINT?

Collecting evidence of malicious activity

Producing IOC for malicious artifacts

An organization's web servers host an online ordering system. The organization discovers that the servers are vulnerable to a malicious JavaScript injection, which could allow attackers to access customer payment information. Which of the following mitigation strategies would be most effective for preventing an attack on the organization's web servers? (Select two).

Regularly updating server software and patches

Utilizing a web-application firewall

Regularly updating server software and patches

Implementing strong password policies

Encrypting sensitive data at rest and in transit

Utilizing a web-application firewall

Performing regular vulnerability scans

Removing payment information from the servers

CompTIA SY0-701 Practice Test 14 - Free Online Exam Prep & Questions

During a recent log review, an analyst found evidence of successful injection attacks. Which of the following will best address this issue?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-701 Practice Test 14

Question

CompTIA SY0-701 Practice Tests

Practice Tests