A security engineer is working to address the growing risks that shadow IT services are introducing to the organization. The organization has taken a cloud-first approach end does not have an on-premises IT infrastructure. Which of the following would best secure the organization?

Deploying an appropriate in-line CASB solution

Upgrading to a next-generation firewall

Deploying an appropriate in-line CASB solution

Conducting user training on software policies

Configuring double key encryption in SaaS platforms

A cybersecurity incident response team at a large company receives notification that malware is present on several corporate desktops No known Indicators of compromise have been found on the network. Which of the following should the team do first to secure the environment?

Add the malware to the application blocklist.

Segment the core database server.

Implement firewall rules to block outbound beaconing

Various stakeholders are meeting to discuss their hypothetical roles and responsibilities in a specific situation, such as a security incident or major disaster. Which of the following best describes this meeting?

Continuity of operations planning

Which of the following best describe why a process would require a two-person integrity security control?

To reduce the risk that the procedures are performed incorrectly or by an unauthorized user

To Increase the chance that the activity will be completed in half of the time the process would take only one user to complete

To permit two users from another department to observe the activity that is being performed by an authorized user

To reduce the risk that the procedures are performed incorrectly or by an unauthorized user

To allow one person to perform the activity while being recorded on the CCTV camera

A company recently decided to allow employees to work remotely. The company wants to protect us data without using a VPN. Which of the following technologies should the company Implement?

Virtual private cloud end point

A security analyst needs to propose a remediation plan 'or each item in a risk register. The item with the highest priority requires employees to have separate logins for SaaS solutions and different password complexity requirements for each solution. Which of the following implementation plans will most likely resolve this security issue?

Integrating each SaaS solution with the Identity provider

Creating a unified password complexity standard

Integrating each SaaS solution with the Identity provider

Securing access to each SaaS by using a single wildcard certificate

Configuring geofencing on each SaaS solution

A security analyst finds a rogue device during a monthly audit of current endpoint assets that are connected to the network. The corporate network utilizes 002.1X for access control. To be allowed on the network, a device must have a Known hardware address, and a valid user name and password must be entered in a captive portal. The following is the audit report: Which of the following is the most likely way a rogue device was allowed to connect?

A user performed a MAC cloning attack with a personal device.

A DMCP failure caused an incorrect IP address to be distributed

An administrator bypassed the security controls for testing.

DNS hijacking let an attacker intercept the captive portal traffic.

Which of the following topics would most likely be included within an organization's SDLC?

Penetration testing methodology

An administrator at a small business notices an increase in support calls from employees who receive a blocked page message after trying to navigate to a spoofed website. Which of the following should the administrator do?

Implement security awareness training.

Deploy multifactor authentication.

Decrease the level of the web filter settings

Implement security awareness training.

Update the acceptable use policy

A security team is setting up a new environment for hosting the organization's on-premises software application as a cloud-based service. Which of the following should the team ensure is in place in order for the organization to follow security best practices?

Visualization and isolation of resources

A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes the benefits of ensuring other team members understand how the script works?

To prevent a single point of failure

A systems administrator notices that one of the systems critical for processing customer transactions is running an end-of-life operating system. Which of the following techniques would increase enterprise security?

Placing the system in an isolated VLAN

Encrypting the system's hard drive

Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate endpoints?

To track the status of patching installations

To find shadow IT cloud deployments

To continuously the monitor hardware inventory

To hunt for active attackers in the network

Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?

Default network device credentials

Impersonation of business units through typosquatting

CompTIA SY0-701 Practice Test 8 - Free Online Exam Questions 281-320

A website user is locked out of an account after clicking an email link and visiting a different website Web server logs show the user's password was changed, even though the user did not change the password. Which of the following is the most likely cause?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-701 Practice Test 8

Question

CompTIA SY0-701 Practice Tests

Practice Tests