SY0-701 Revolutionary Guide To Exam CompTIA Dumps [Q253-Q273]

5/5 - (1 vote)

SY0-701 Revolutionary Guide To Exam CompTIA Dumps

SY0-701 Free Study Guide! with New Update 711 Exam Questions

CompTIA SY0-701 Exam Syllabus Topics:

Topic	Details
Topic 1	General Security Concepts: This topic covers various types of security controls, fundamental security concepts, the importance of change management processes in security, and the significance of using suitable cryptographic solutions.
Topic 2	Security Operations: This topic delves into applying common security techniques to computing resources, addressing security implications of proper hardware, software, and data asset management, managing vulnerabilities effectively, and explaining security alerting and monitoring concepts. It also discusses enhancing enterprise capabilities for security, implementing identity and access management, and utilizing automation and orchestration for secure operations.
Topic 3	Security Architecture: Here, you’ll learn about security implications across different architecture models, applying security principles to secure enterprise infrastructure in scenarios, and comparing data protection concepts and strategies. The topic also delves into the importance of resilience and recovery in security architecture.
Topic 4	Security Program Management and Oversight: Finally, this topic discusses elements of effective security governance, the risk management process, third-party risk assessment, and management processes. Additionally, the topic focuses on security compliance requirements, types and purposes of audits and assessments, and implementing security awareness practices in various scenarios.
Topic 5	Threats, Vulnerabilities, and Mitigations: In this topic, you’ll find discussions comparing threat actors and motivations, explaining common threat vectors and attack surfaces, and outlining different types of vulnerabilities. Moreover, the topic focuses on analyzing indicators of malicious activity in scenarios and exploring mitigation techniques used to secure enterprises against threats.

NO.253 A security analyst discovers that a large number of employee credentials had been stolen and were being sold on the dark web. The analyst investigates and discovers that some hourly employee credentials were compromised, but salaried employee credentials were not affected.
Most employees clocked in and out while they were Inside the building using one of the kiosks connected to the network. However, some clocked out and recorded their time after leaving to go home. Only those who clocked in and out while Inside the building had credentials stolen. Each of the kiosks are on different floors, and there are multiple routers, since the business segments environments for certain business functions.
Hourly employees are required to use a website called acmetimekeeping.com to clock in and out. This website is accessible from the internet. Which of the following Is the most likely reason for this compromise?

A brute-force attack was used against the time-keeping website to scan for common passwords.

A malicious actor compromised the time-keeping website with malicious code using an unpatched vulnerability on the site, stealing the credentials.

The internal DNS servers were poisoned and were redirecting acmetimkeeping.com to malicious domain that intercepted the credentials and then passed them through to the real site

ARP poisoning affected the machines in the building and caused the kiosks lo send a copy of all the submitted credentials to a machine.machine.

NO.254 Which of the following environments utilizes a subset of customer data and is most likely to be used to assess the impacts of major system upgrades and demonstrate system features?

Development

Test

Production

Staging

NO.255 A bank insists all of its vendors must prevent data loss on stolen laptops. Which of the following strategies is the bank requiring?

Encryption at rest

Masking

Data classification

Permission restrictions

NO.256 Which of the following is a reason why a forensic specialist would create a plan to preserve data after an modem and prioritize the sequence for performing forensic analysis?

Chain of custody

Preservation of event logs

Compliance with legal hold

Order of volatility

NO.257 A security administrator needs to create firewall rules for the following protocols: RTP, SIP,
H.323. and SRTP. Which of the following does this rule set support?

RTOS

VoIP

SoC

HVAC

NO.258 A network manager wants to protect the company’s VPN by implementing multifactor authentication that uses:
. Something you know
. Something you have
. Something you are
Which of the following would accomplish the manager’s goal?

Domain name, PKI, GeolP lookup

VPN IP address, company ID, facial structure

Password, authentication token, thumbprint

Company URL, TLS certificate, home address

NO.259 Which of the following is the most likely to be used to document risks, responsible parties, and thresholds?

Risk tolerance

Risk transfer

Risk register

Risk analysis

NO.260 A security analyst is reviewing the following logs:

Which of the following attacks is most likely occurring?

Password spraying

Account forgery

Pass-t he-hash

Brute-force

Password spraying is a type of brute force attack that tries common passwords across several accounts to find a match. It is a mass trial-and-error approach that can bypass account lockout protocols. It can give hackers access to personal or business accounts and information. It is not a targeted attack, but a high-volume attack tactic that uses a dictionary or a list of popular or weak passwords12.
The logs show that the attacker is using the same password (“password123”) to attempt to log in to different accounts (“admin”, “user1”, “user2”, etc.) on the same web server. This is a typical pattern of password spraying, as the attacker is hoping that at least one of the accounts has a weak password that matches the one they are trying. The attacker is also using a tool called Hydra, which is one of the most popular brute force tools, often used in cracking passwords for network authentication3.
Account forgery is not the correct answer, because it involves creating fake accounts or credentials to impersonate legitimate users or entities. There is no evidence of account forgery in the logs, as the attacker is not creating any new accounts or using forged credentials.
Pass-the-hash is not the correct answer, because it involves stealing a hashed user credential and using it to create a new authenticated session on the same network. Pass-the-hash does not require the attacker to know or crack the password, as they use the stored version of the password to initiate a new session4. The logs show that the attacker is using plain text passwords, not hashes, to try to log in to the web server.
Brute-force is not the correct answer, because it is a broader term that encompasses different types of attacks that involve trying different variations of symbols or words until the correct password is found. Password spraying is a specific type of brute force attack that uses a single common password against multiple accounts5. The logs show that the attacker is using password spraying, not brute force in general, to try to gain access to the web server. References = 1: Password spraying: An overview of password spraying attacks
… – Norton, 2: Security: Credential Stuffing vs. Password Spraying – Baeldung, 3: Brute ForceAttack: A definition + 6 types to know | Norton, 4: What is a Pass-the-Hash Attack? – CrowdStrike, 5: What is a Brute Force Attack? | Definition, Types & How It Works – Fortinet

NO.261 You are security administrator investigating a potential infection on a network.
Click on each host and firewall. Review all logs to determine which host originated the Infecton and then deny each remaining hosts clean or infected.

NO.262 To improve the security at a data center, a security administrator implements a CCTV system and posts several signs about the possibility of being filmed. Which of the following best describe these types of controls? (Select two).

Preventive

Deterrent

Corrective

Directive

Compensating

Detective

NO.263 A user needs to complete training at https://comptiatraining.com. After manually entering the URL, the user sees that the accessed website is noticeably different from the standard company website. Which of the following is the most likely explanation for the difference?

Cross-site scripting

Pretexting

Typosquatting

Vishing

NO.264 Which of the following is the most likely to be used to document risks, responsible parties, and thresholds?

Risk tolerance

Risk transfer

Risk register

Risk analysis

NO.265 A security administrator observed the following in a web server log while investigating an incident:

Which of the following attacks did the security administrator most likely see?

Privilege escalation

Credential replay

Brute force

Directory traversal

NO.266 A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the following provides the best solution to increase mobile data security on all employees’ company mobile devices?

Application management

Full disk encryption

Remote wipe

Containerization

NO.267 Which of the following should a systems administrator use to ensure an easy deployment of resources within the cloud provider?

Software as a service

Infrastructure as code

Internet of Things

Software-defined networking

NO.268 Which of the following can assist in recovering data if the decryption key is lost?

CSR

Salting

Root of trust

Escrow

NO.269 Which of the following addresses individual rights such as the right to be informed, the right of access, and the right to be forgotten?

GDPR

PCI DSS

NIST

ISO

NO.270 A security administrator recently reset local passwords and the following values were recorded in the system:

Which of the following in the security administrator most likely protecting against?

Account sharing

Weak password complexity

Pass-the-hash attacks

Password compromise

NO.271 An organization is building a new backup data center with cost-benefit as the primary requirement and RTO and RPO values around two days. Which of the following types of sites is the best for this scenario?

Real-time recovery

Hot

Cold

Warm

NO.272 An organization would like to calculate the time needed to resolve a hardware issue with a server. Which of the following risk management processes describes this example?

Recovery point objective

Mean time between failures

Recovery time objective

Mean time to repair

NO.273 Which of the following provides the details about the terms of a test with a third-party penetration tester?

Rules of engagement

Supply chain analysis

Right to audit clause

Due diligence

Explanation
Rules of engagement are the detailed guidelines and constraints regarding the execution of information security testing, such as penetration testing. They define the scope, objectives, methods, and boundaries of the test, as well as the roles and responsibilities of the testers and the clients. Rules of engagement help to ensure that the test is conducted in a legal, ethical, and professional manner, and that the results are accurate and reliable. Rules of engagement typically include the following elements:
The type and scope of the test, such as black box, white box, or gray box, and the target systems, networks, applications, or data.
The client contact details and the communication channels for reporting issues, incidents, or emergencies during the test.
The testing team credentials and the authorized tools and techniques that they can use.
The sensitive data handling and encryption requirements, such as how to store, transmit, or dispose of any data obtained during the test.
The status meeting and report schedules, formats, and recipients, as well as the confidentiality and non-disclosure agreements for the test results.
The timeline and duration of the test, and the hours of operation and testing windows.
The professional and ethical behavior expectations for the testers, such as avoiding unnecessary damage, disruption, or disclosure of information.
Supply chain analysis, right to audit clause, and due diligence are not related to the terms of a test with a third-party penetration tester. Supply chain analysis is the process of evaluating the security and risk posture of the suppliers and partners in a business network. Right to audit clause is a provision in a contract that gives one party the right to audit another party to verify their compliance with the contract terms and conditions.
Due diligence is the process of identifying and addressing the cyber risks that a potential vendor or partner brings to an organization.
References =
https://www.yeahhub.com/every-penetration-tester-you-should-know-about-this-rules-of-engagement/
https://bing.com/search?q=rules+of+engagement+penetration+testing