SY0-701 Free Certification Exam Easy to Download PDF Format 2024 [Q80-Q102]

NEW QUESTION 80
A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis Which of the following types of controls is the company setting up?

Corrective

Preventive

Detective

Deterrent

NEW QUESTION 81
Visitors to a secured facility are required to check in with a photo ID and enter the facility through an access control vestibule Which of the following but describes this form of security control?

Physical

Managerial

Technical

Operational

NEW QUESTION 82
Which of the following is used to add extra complexity before using a one-way data transformation algorithm?

Key stretching

Data masking

Steganography

Salting

NEW QUESTION 83
Which of the following is required for an organization to properly manage its restore process in the event of system failure?

IRP

DRP

RPO

SDLC

NEW QUESTION 84
Which of the following alert types is the most likely to be ignored over time?

True positive

True negative

False positive

False negative

NEW QUESTION 85
Which of the following best practices gives administrators a set period to perform changes to an operational system to ensure availability and minimize business impacts?

Impact analysis

Scheduled downtime

Backout plan

Change management boards

NEW QUESTION 86
A security analyst reviews domain activity logs and notices the following:

Which of the following is the best explanation for what the security analyst has discovered?

The user jsmith’s account has been locked out.

A keylogger is installed on jsmith’s workstation

An attacker is attempting to brute force jsmith’s account.

Ransomware has been deployed in the domain.

NEW QUESTION 87
Which of the following best describes configuring devices to log to an off-site location for possible future reference?

Log aggregation

DLP

Archiving

SCAP

NEW QUESTION 88
A company hired a consultant to perform an offensive security assessment covering penetration testing and social engineering.
Which of the following teams will conduct this assessment activity?

White

Purple

Blue

Red

NEW QUESTION 89
A company purchased cyber insurance to address items listed on the risk register. Which of the following strategies does this represent?

Accept

Transfer

Mitigate

Avoid

Cyber insurance is a type of insurance that covers the financial losses and liabilities that result from cyberattacks, such as data breaches, ransomware, denial-of-service, phishing, or malware. Cyber insurance can help a company recover from the costs of restoring data, repairing systems, paying ransoms, compensating customers, or facing legal actions. Cyber insurance is one of the possible strategies that a company can use to address the items listed on the risk register. A risk register is a document that records the identified risks, their probability, impact, and mitigation strategies for a project or an organization. The four common risk mitigation strategies are:
Accept: The company acknowledges the risk and decides to accept the consequences without taking any action to reduce or eliminate the risk. This strategy is usually chosen when the risk is low or the cost of mitigation is too high.
Transfer: The company transfers the risk to a third party, such as an insurance company, a vendor, or a partner. This strategy is usually chosen when the risk is high or the company lacks the resources or expertise to handle the risk.
Mitigate: The company implements controls or measures to reduce the likelihood or impact of the risk.
This strategy is usually chosen when the risk is moderate or the cost of mitigation is reasonable.
Avoid: The company eliminates the risk by changing the scope, plan, or design of the project or the organization. This strategy is usually chosen when the risk is unacceptable or the cost of mitigation is too high.
By purchasing cyber insurance, the company is transferring the risk to the insurance company, which will cover the financial losses and liabilities in case of a cyberattack. Therefore, the correct answer is B.
Transfer. References = CompTIA Security+ StudyGuide (SY0-701), Chapter 8: Governance, Risk, and Compliance, page 377. Professor Messer’s CompTIA SY0-701 Security+ Training Course, Section 8.1: Risk Management, video: Risk Mitigation Strategies (5:37).

NEW QUESTION 90
After conducting a vulnerability scan, a systems administrator notices that one of the identified vulnerabilities is not present on the systems that were scanned. Which of the following describes this example?

False positive

False negative

True positive

True negative

NEW QUESTION 91
Which of the following incident response activities ensures evidence is properly handied?

E-discovery

Chain of custody

Legal hold

Preservation

NEW QUESTION 92
A security analyst locates a potentially malicious video file on a server and needs to identify both the creation date and the file’s creator. Which of the following actions would most likely give the security analyst the information required?

Obtain the file’s SHA-256 hash.

Use hexdump on the file’s contents.

Check endpoint logs.

Query the file’s metadata.

NEW QUESTION 93
A security analyst and the management team are reviewing the organizational performance of a recent phishing campaign. The user click-through rate exceeded the acceptable risk threshold, and the management team wants to reduce the impact when a user clicks on a link in a phishing message. Which of the following should the analyst do?

Place posters around the office to raise awareness of common phishing activities.

Implement email security filters to prevent phishing emails from being delivered

Update the EDR policies to block automatic execution of downloaded programs.

Create additional training for users to recognize the signs of phishing attempts.

NEW QUESTION 94
Which of the following risk management strategies should an enterprise adopt first if a legacy application is critical to business operations and there are preventative controls that are not yet implemented?

Mitigate

Accept

Transfer

Avoid

NEW QUESTION 95
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

NEW QUESTION 96
A security team is reviewing the findings in a report that was delivered after a third party performed a penetration test. One of the findings indicated that a web application form field is vulnerable to cross-site scripting. Which of the following application security techniques should the security analyst recommend the developer implement to prevent this vulnerability?

Secure cookies

Version control

Input validation

Code signing

NEW QUESTION 97
A security engineer is implementing FDE for all laptops in an organization. Which of the following are the most important for the engineer to consider as part of the planning process? (Select two).

Key escrow

TPM presence

Digital signatures

Data tokenization

Public key management

Certificate authority linking

NEW QUESTION 98
A security analyst locates a potentially malicious video file on a server and needs to identify both the creation date and the file’s creator. Which of the following actions would most likely give the security analyst the information required?

Obtain the file’s SHA-256 hash.

Use hexdump on the file’s contents.

Check endpoint logs.

Query the file’s metadata.

NEW QUESTION 99
A security analyst is investigating an alert that was produced by endpoint protection software. The analyst determines this event was a false positive triggered by an employee who attempted to download a file. Which of the following is the most likely reason the download was blocked?

A misconfiguration in the endpoint protection software

A zero-day vulnerability in the file

A supply chain attack on the endpoint protection vendor

Incorrect file permissions

NEW QUESTION 100
Which of the following enables the use of an input field to run commands that can view or manipulate data?

Cross-site scripting

Side loading

Buffer overflow

SQL injection

NEW QUESTION 101
Which of the following describes the category of data that is most impacted when it is lost?

Confidential

Public

Private

Critical

NEW QUESTION 102
After a recent ransomware attack on a company’s system, an administrator reviewed the log files. Which of the following control types did the administrator use?

Compensating

Detective

Preventive

Corrective

Exam Dumps VCE

SY0-701 Free Certification Exam Easy to Download PDF Format 2024 [Q80-Q102]

Leave a Reply Cancel reply