A security analyst discovers that a large number of employee credentials had been stolen and were being sold on the dark web. The analyst investigates and discovers that some hourly employee credentials were compromised, but salaried employee credentials were not affected.Most employees clocked in and out while they were Inside the building using one of the kiosks connected to the network. However, some clocked out and recorded their time after leaving to go home. Only those who clocked in and out while Inside the building had credentials stolen. Each of the kiosks are on different floors, and there are multiple routers, since the business segments environments for certain business functions.Hourly employees are required to use a website called acmetimekeeping.com to clock in and out. This website is accessible from the internet. Which of the following Is the most likely reason for this compromise?

A malicious actor compromised the time-keeping website with malicious code using an unpatched vulnerability on the site, stealing the credentials.

A brute-force attack was used against the time-keeping website to scan for common passwords.

A malicious actor compromised the time-keeping website with malicious code using an unpatched vulnerability on the site, stealing the credentials.

The internal DNS servers were poisoned and were redirecting acmetimkeeping.com to malicious domain that intercepted the credentials and then passed them through to the real site

ARP poisoning affected the machines in the building and caused the kiosks lo send a copy of all the submitted credentials to a machine. machine.

A business uses Wi-Fi with content filleting enabled. An employee noticed a coworker accessed a blocked sue from a work computer and repotted the issue. While Investigating the issue, a security administrator found another device providing internet access to certain employees. Which of the following best describes the security risk?

A rogue access point Is allowing users to bypass controls.

The host-based security agent Is not running on all computers.

A rogue access point Is allowing users to bypass controls.

Employees who have certain credentials are using a hidden SSID.

A valid access point is being jammed to limit availability.

Two companies are in the process of merging. The companies need to decide how to standardize their information security programs. Which of the following would best align the security programs?

Both companies following the same CSF

Shared deployment of CIS baselines

Joint cybersecurity best practices

Both companies following the same CSF

Assessment of controls in a vulnerability report

A spoofed identity was detected for a digital certificate. Which of the following are the type of unidentified key and the certificate mat could be in use on the company domain?

Private key and self-signed certificate

Private key and root certificate

Public key and expired certificate

Private key and self-signed certificate

Public key and wildcard certificate

The Cruel Information Security Officer (CISO) asks a security analyst to install an OS update to a production VM that has a 99% uptime SL

Confirm that the backup service is running.

The CISO tells me analyst the installation must be done as quickly as possible. Which of the following courses of action should the security analyst take first?

Log in to the server and perform a health check on the VM.

Confirm that the backup service is running.

Cadets speaking a foreign language are using company phone numbers to make unsolicited phone calls lo a partner organization. A security analyst validates through phone system logs that the calls are occurring and the numbers are not being spoofed. Which of the following is the most likely explanation?

The company's SIP server security settings are weak.

The executive team is traveling internationally and trying to avoid roaming charges

The company's SIP server security settings are weak.

Disgruntled employees are making calls to the partner organization.

The service provider has assigned multiple companies the same numbers

An IT security team is concerned about the confidentiality of documents left unattended in MFPs. Which of the following should the security team do to mitigate the situation?

Deploy an authentication factor that requires ln-person action before printing.

Educate users about the importance of paper shredder devices.

Deploy an authentication factor that requires ln-person action before printing.

Install a software client m every computer authorized to use the MFPs.

Update the management software to utilize encryption.

A security audit of an organization revealed that most of the IT staff members have domain administrator credentials and do not change the passwords regularly. Which of the following solutions should the security learn propose to resolve the findings in the most complete way?

Securing domain administrator credentials in a PAM vault and controlling access with role-based access control

Creating group policies to enforce password rotation on domain administrator credentials

Reviewing the domain administrator group, removing all unnecessary administrators, and rotating all passwords

Integrating the domain administrator's group with an IdP and requiring SSO with MFA for all access

Securing domain administrator credentials in a PAM vault and controlling access with role-based access control

Which of the following best describes why me SMS DIP authentication method is more risky to implement than the TOTP method?

The SMS OTP is more likely to be intercepted and lead to unauthorized disclosure of the code than the TOTP method.

The SMS OTP method requires an end user to have an active mobile telephone service and SIM card.

Generally. SMS OTP codes are valid for up to 15 minutes while the TOTP time frame is 30 to 60 seconds

The SMS OTP is more likely to be intercepted and lead to unauthorized disclosure of the code than the TOTP method.

The algorithm used to generate on SMS OTP code is weaker than the one used to generate a TOTP code

CompTIA SY0-701 Practice Test 7 - Free Online Exam Questions 241-280

A company is implementing a vendor's security tool in the cloud. The security director does not want to manage users and passwords specific to this tool but would rather utilize the company's standard user directory. Which of the following should the company implement?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-701 Practice Test 7

Question

CompTIA SY0-701 Practice Tests

Practice Tests