Free CompTIA SY0-701 Practice Exams - Page 15 of 19

Question #141

An employee recently resigned from a company. The employee was responsible for managing and supporting weekly batch jobs over the past five years. A few weeks after the employee resigned. one of the batch jobs talked and caused a major disruption.

Which of the following would work best to prevent this type of incident from reoccurring?

A . Job rotation
B . Retention
C . Outsourcing
D . Separation of duties

Reveal Solution Hide Solution

Question #142

A company wants to reduce the time and expense associated with code deployment.

Which of the following technologies should the company utilize?

A . Serverless architecture
B . Thin clients
C . Private cloud
D . Virtual machines

Reveal Solution Hide Solution

Question #143

A company is currently utilizing usernames and passwords, and it wants to integrate an MFA method that is seamless, can Integrate easily into a user’s workflow, and can utilize employee-owned devices.

Which of the following will meet these requirements?

A . Push notifications
B . Phone call
C . Smart card
D . Offline backup codes

Reveal Solution Hide Solution

Question #144

Which of the following best practices gives administrators a set period to perform changes to an operational system to ensure availability and minimize business impacts?

A . Impact analysis
B . Scheduled downtime
C . Backout plan
D . Change management boards

Reveal Solution Hide Solution

Question #145

A security team created a document that details the order in which critical systems should be through back online after a major outage.

Which of the following documents did the team create?

A . Communication plan
B . Incident response plan
C . Data retention policy
D . Disaster recovery plan

Reveal Solution Hide Solution

Question #146

A company purchased cyber insurance to address items listed on the risk register.

Which of the following strategies does this represent?

A . Accept
B . Transfer
C . Mitigate
D . Avoid

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

Cyber insurance is a type of insurance that covers the financial losses and liabilities that result from cyberattacks, such as data breaches, ransomware, denial-of-service, phishing, or malware. Cyber insurance can help a company recover from the costs of restoring data, repairing systems, paying ransoms, compensating customers, or facing legal actions. Cyber insurance is one of the possible strategies that a company can use to address the items listed on the risk register. A risk register is a document that records the identified risks, their probability, impact, and mitigation strategies for a project or an organization. The four common risk mitigation strategies are:

Accept: The company acknowledges the risk and decides to accept the consequences without taking any action to reduce or eliminate the risk. This strategy is usually chosen when the risk is low or the cost of mitigation is too high.

Transfer: The company transfers the risk to a third party, such as an insurance company, a vendor, or a partner. This strategy is usually chosen when the risk is high or the company lacks the resources or expertise to handle the risk.

Mitigate: The company implements controls or measures to reduce the likelihood or impact of the risk. This strategy is usually chosen when the risk is moderate or the cost of mitigation is reasonable. Avoid: The company eliminates the risk by changing the scope, plan, or design of the project or the organization. This strategy is usually chosen when the risk is unacceptable or the cost of mitigation is too high.

By purchasing cyber insurance, the company is transferring the risk to the insurance company, which will cover the financial losses and liabilities in case of a cyberattack. Therefore, the correct answer is B. Transfer.

Reference: CompTIA Security+ Study Guide (SY0-701), Chapter 8: Governance, Risk, and Compliance, page 377. Professor Messer’s CompTIA SY0-701 Security+ Training Course, Section 8.1: Risk Management, video: Risk Mitigation Strategies (5:37).

Question #147

A security manager is implementing MFA and patch management.

Which of the following would best describe the control type and category? (Select two).

A . Physical
B . Managerial
C . Detective
D . Administrator
E . Preventative
F . Technical

Reveal Solution Hide Solution

Question #148

A company is planning a disaster recovery site and needs to ensure that a single natural disaster would not result in the complete loss of regulated backup data.

Which of the following should the company consider?

A . Geographic dispersion
B . Platform diversity
C . Hot site
D . Load balancing

Reveal Solution Hide Solution

Question #149

Which of the following is the final step of the modem response process?

A . Lessons learned
B . Eradication
C . Containment
D . Recovery

Reveal Solution Hide Solution

Question #150

An important patch for a critical application has just been released, and a systems administrator is identifying all of the systems requiring the patch.

Which of the following must be maintained in order to ensure that all systems requiring the patch are updated?

A . Asset inventory
B . Network enumeration
C . Data certification
D . Procurement process

Reveal Solution Hide Solution