Free CompTIA SY0-701 Practice Exams - Page 16 of 19

Question #151

A systems administrator is changing the password policy within an enterprise environment and wants this update implemented on all systems as quickly as possible.

Which of the following operating system security measures will the administrator most likely use?

A . Deploying PowerShell scripts
B . Pushing GPO update
C . Enabling PAP
D . Updating EDR profiles

Reveal Solution Hide Solution

Question #152

Which of the following can be used to identify potential attacker activities without affecting production servers?

A . Honey pot
B . Video surveillance
C . Zero Trust
D . Geofencing

Reveal Solution Hide Solution

Question #153

A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format.

Which of the following should the administrator apply to the site recovery resource group?

A . RBAC
B . ACL
C . SAML
D . GPO

Reveal Solution Hide Solution

Question #154

Which of the following best describes the concept of information being stored outside of its country of origin while still being subject to the laws and requirements of the country of origin?

A . Data sovereignty
B . Geolocation
C . Intellectual property
D . Geographic restrictions

Reveal Solution Hide Solution

Question #155

Which of the following is a type of vulnerability that refers to the unauthorized installation of applications on a device through means other than the official application store?

A . Cross-site scripting
B . Buffer overflow
C . Jailbreaking
D . Side loading

Reveal Solution Hide Solution

Question #156

An employee receives a text message from an unknown number claiming to be the company’s Chief Executive Officer and asking the employee to purchase several gift cards.

Which of the following types of attacks does this describe?

A . Vishing
B . Smishing
C . Pretexting
D . Phishing

Reveal Solution Hide Solution

Question #157

A company wants to get alerts when others are researching and doing reconnaissance on the company One approach would be to host a part of the Infrastructure online with known vulnerabilities that would appear to be company assets.

Which of the following describes this approach?

A . Watering hole
B . Bug bounty
C . DNS sinkhole
D . Honeypot

Reveal Solution Hide Solution

Question #158

A security practitioner completes a vulnerability assessment on a company’s network and finds several vulnerabilities, which the operations team remediates.

Which of the following should be done next?

A . Conduct an audit.
B . Initiate a penetration test.
C . Rescan the network.
D . Submit a report.

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

After completing a vulnerability assessment and remediating the identified vulnerabilities, the next step is to rescan the network to verify that the vulnerabilities have been successfully fixed and no new vulnerabilities have been introduced. A vulnerability assessment is a process of identifying and evaluating the weaknesses and exposures in a network, system, or application that could be exploited by attackers. A vulnerability assessment typically involves using automated tools, such as scanners, to scan the network and generate a report of the findings. The report may include information such as the severity, impact, and remediation of the vulnerabilities. The operations team is responsible for applying the appropriate patches, updates, or configurations to address the vulnerabilities and reduce the risk to the network. A rescan is necessary to confirm that the remediation actions have been effective and that the network is secure.

Conducting an audit, initiating a penetration test, or submitting a report are not the next steps after completing a vulnerability assessment and remediating the vulnerabilities. An audit is a process of reviewing and verifying the compliance of the network with the established policies, standards, and regulations. An audit may be performed by internal or external auditors, and it may use the results of the vulnerability assessment as part of the evidence. However, an audit is not a mandatory step after a vulnerability assessment, and it does not validate the effectiveness of the remediation actions.

A penetration test is a process of simulating a real-world attack on the network to test the security defenses and identify any gaps or weaknesses. A penetration test may use the results of the vulnerability assessment as a starting point, but it goes beyond scanning and involves exploiting the vulnerabilities to gain access or cause damage. A penetration test may be performed after a vulnerability assessment, but only with the proper authorization, scope, and rules of engagement. A penetration test is not a substitute for a rescan, as it does not verify that the vulnerabilities have been fixed.

Submitting a report is a step that is done after the vulnerability assessment, but before the remediation. The report is a document that summarizes the findings and recommendations of the vulnerability assessment, and it is used to communicate the results to the stakeholders and the operations team. The report may also include a follow-up plan and a timeline for the remediation actions. However, submitting a report is not the final step after the remediation, as it does not confirm that the network is secure.

Reference: CompTIA Security+ SY0-701 Certification Study Guide, page 372-375; Professor Messer’s CompTIA SY0-701 Security+ Training Course, video 4.1 – Vulnerability Scanning, 0:00 – 8:00.

Question #159

After a company was compromised, customers initiated a lawsuit. The company’s attorneys have requested that the security team initiate a legal hold in response to the lawsuit.

Which of the following describes the action the security team will most likely be required to take?

A . Retain the emails between the security team and affected customers for 30 days.
B . Retain any communications related to the security breach until further notice.
C . Retain any communications between security members during the breach response.
D . Retain all emails from the company to affected customers for an indefinite period of time.

Reveal Solution Hide Solution

Question #160

Which of the following actions could a security engineer take to ensure workstations and servers are properly monitored for unauthorized changes and software?

A . Configure all systems to log scheduled tasks.
B . Collect and monitor all traffic exiting the network.
C . Block traffic based on known malicious signatures.
D . Install endpoint management software on all systems.

Reveal Solution Hide Solution