A company experienced a data leak through its website. A security engineer, who is investigating the issue, runs a vulnerability scan against the website and receives the following output:Which of the following is the most likely cause of this leak?
Answer(s): D
From the Nmap scan report, port 21 (FTP) is open. FTP (File Transfer Protocol) is an insecure protocol because it transmits data, including usernames and passwords, in plain text without encryption. Attackers can intercept and steal sensitive data using techniques like packet sniffing.To mitigate this issue, the company should:-Disable FTP or replace it with SFTP (Secure File Transfer Protocol) or FTPS (FTP Secure), which encrypts data during transmission.-Use firewall rules to restrict FTP access only to authorized IPs.-Implement multi-factor authentication (MFA) to enhance security.-
A cloud developer receives a security vulnerability scan report and needs to analyze and record the true positives. Which of the following vulnerability management steps is this an example of?
Answer(s): A
The assessment phase in vulnerability management involves analyzing the scan results to determine true positives (actual vulnerabilities) and false positives (incorrectly flagged issues). This step ensures that valid security risks are documented and prioritized for remediation while avoiding unnecessary actions on false alerts.
A company recently experienced a ransomware attack. The recovery process was slow because the on-site backups were compromised and off-site backups were required. Which of the following features would enable a faster recovery if a ransomware attack would happen again?
Answer(s): C
Immutability ensures that backup data cannot be modified, deleted, or encrypted by ransomware or malicious actors. If an attack occurs, the company can quickly restore clean, unaltered backups, significantly speeding up the recovery process. Implementing immutable backups prevents ransomware from compromising backup copies, reducing downtime and data loss.
A SaaS provider introduced new software functionality for customers as part of quarterly production enhancements. After an update is implemented, users cannot locate certain transactions from an inbound integration. During the investigation, the application owner finds the following error in the logs:Error: REST API - Deprecated call is no longer supported in this release.Which of the following is the best action for the application owner to take to resolve the issue?
The error message indicates that the application update removed a previously used API function. To resolve the issue, the custom integration must be updated to use a new, supported API function. This ensures continued compatibility with the latest release and prevents disruptions in transaction processing.
A developer is building a tool on the cloud that needs to allow other developers to programmatically read and write to the web application resources. Which of the following should the developer do to meet these requirements with the least complexity?
A REST API (Representational State Transfer Application Programming Interface) is the simplest and most effective way to allow other developers to programmatically read and write to web application resources. REST APIs use standard HTTP methods (GET, POST, PUT, DELETE) and provide scalability, flexibility, and ease of integration with various programming languages and cloud services.
Post your Comments and Discuss CompTIA CV0-004 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CV0-004 content, but please register or login to continue.