CompTIA SY0-701 Practice Test - Questions Answers, Page 40

Which of the following would a security administrator use to comply with a secure baseline during a patch update?

A certificate authority needs to post information about expired certificates. Which of the following would accomplish this task?

During a SQL update of a database, a temporary field used as part of the update sequence was modified by an attacker before the update completed in order to allow access to the system. Which of the following best describes this type of vulnerability?

An unexpected and out-of-character email message from a Chief Executive Officer's corporate account asked an employee to provide financial information and to change the recipient's contact number. Which of the following attack vectors is most likely being used?

Which of the following is a reason environmental variables are a concern when reviewing potential system vulnerabilities?

Which of the following documents details how to accomplish a technical security task?

A user needs to complete training at https://comptiatraining.com. After manually entering the URL, the user sees that the accessed website is noticeably different from the standard company website. Which of the following is the most likely explanation for the difference?

Which of the following steps in the risk management process involves establishing the scope and potential risks involved with a project?

A security analyst needs to improve the company's authentication policy following a password audit. Which of the following should be included in the policy? (Select two).