Which of the following types of identification methods can be performed on a deployed application during runtime?
Answer(s): A
Dynamic analysis involves evaluating an application while it is running (during runtime) to identify potential vulnerabilities, performance issues, or other security risks. This type of analysis allows security professionals to observe the application's behavior in real-world conditions and to identify issues that may not be apparent from static code inspection alone.
The IT team in a company wants to make sure that login requests for all remote employees are stored for compliance purposes. Which of the following concepts is the IT team implementing?
Answer(s): D
Accounting records and tracks user activities, such as login attempts, session details, and access events. Storing remote employee login requests for compliance and auditing purposes is an example of accounting within the AAA security framework.
Which of the following attacks primarily targets insecure networks?
An evil twin attack sets up a rogue wireless access point that mimics a legitimate one, targeting insecure or poorly secured networks to capture user data.
Which of the following describes a commitment to maintain service availability at or above a negotiated level to avoid penalties?
A service-level agreement is a formal commitment between a provider and customer that defines expected service availability, performance targets, and penalties or remedies if the negotiated level is not met.
A user's workstation becomes unresponsive and displays a ransom note demanding payment to decrypt files. Before the attack, the user opened a resume they received in a message, browsed the company's website, and installed OS updates. Which of the following is the most likely vector of this attack?
The most likely vector of this attack is a spear-phishing attachment. The user opened a resume received in a message, which is a common method used in spear-phishing attacks. These attacks often involve sending a specifically crafted attachment (like a resume) to the targeted user. Once the attachment is opened, it could trigger malware, such as ransomware, which encrypts files on the system and displays a ransom note. This attack vector aligns with the described symptoms, as the user interacted with the malicious attachment before experiencing the ransomware infection.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members: