Which of the following examples would be best mitigated by input sanitization?

Email message: 'Click this link to get your free gift card.'

Browser message: 'Your connection is not private.'

In which of the following scenarios is tokenization the best privacy technique 10 use?

Enabling established customers to safely store credit card Information

Providing pseudo-anonymization tor social media user accounts

Serving as a second factor for authentication requests

Enabling established customers to safely store credit card Information

Masking personal information inside databases by segmenting data

While investigating a possible incident, a security analyst discovers the following log entries:67.118.34.157 ----- [28/Jul/2022:10:26:59 -0300] 'GET /query.php?q-wireless%20headphones / HTTP/1.0' 200 12737132.18.222.103 ----[28/Jul/2022:10:27:10 -0300] 'GET /query.php?q=123 INSERT INTO users VALUES('temp', 'pass123')# / HTTP/1.0' 200 93512.45.101.121 ----- [28/Jul/2022:10:27:22 -0300] 'GET /query.php?q=mp3%20players I HTTP/1.0' 200 14650Which of the following should the analyst do first?

Check the users table for new accounts

Block brute-force attempts on temporary users

Check the users table for new accounts

Which of the following strategies should an organization use to efficiently manage and analyze multiple types of logs?

Create custom scripts to aggregate and analyze logs

Install a unified threat management appliance

An organization is developing a security program that conveys the responsibilities associated with the general operation of systems and software within the organization. Which of the following documents would most likely communicate these expectations?

Software development life cycle policy

A company wants to track modifications to the code used to build new virtual servers. Which of the following will the company most likely deploy?

Change management ticketing system

A penetration test has demonstrated that domain administrator accounts were vulnerable to pass-the-hash attacks. Which of the following would have been the best strategy to prevent the threat actor from using domain administrator accounts?

Implement a privileged access management solution.

Audit each domain administrator account weekly for password compliance.

Implement a privileged access management solution.

Create IDS policies to monitor domain controller access.

Use Group Policy to enforce password expiration.

An organization needs to monitor its users' activities to prevent insider threats. Which of the following solutions would help the organization achieve this goal?

Network intrusion detection system

CompTIA SY0-701 Practice Test 9 - Free Online Exam Prep & Questions

An IT manager is increasing the security capabilities of an organization after a data classification initiative determined that sensitive data could be exfiltrated from the environment. Which of the following solutions would mitigate the risk?

Become a Premium Member for full access

Unlock Premium Member

CompTIA SY0-701 Practice Test 9

Question

CompTIA SY0-701 Practice Tests

Practice Tests