A company's software will reach end-of-life status within the next six months. Which of the following best describes the reason the company should buy an upgraded version?
Answer(s): B
End-of-life software typically stops receiving vendor support, including security patches and bug fixes. Upgrading to a supported version ensures continued maintenance and reduces exposure to unpatched vulnerabilities.
Which of the following describes the most effective way to address OS vulnerabilities after they are identified?
Answer(s): D
Patching is the most effective way to address operating system vulnerabilities once they are identified. Patches are updates released by software vendors to fix known vulnerabilities, including security holes, bugs, or other issues that could be exploited by attackers. Applying patches promptly ensures that vulnerabilities are mitigated, reducing the risk of an attack.
Which of the following best describes the main difference between an MOU and an SOW?
Answer(s): A
An MOU generally outlines mutual understanding and intentions without being legally binding, whereas an SOW defines specific deliverables, scope, and obligations and is typically legally binding.
Which of the following steps should be taken before mitigating a vulnerability in a production server?
Before mitigating a vulnerability in a production server, it is important to refer to the change management policy. This policy outlines the necessary procedures for making changes to production systems, ensuring that changes are thoroughly reviewed, tested, and approved. Following this policy helps mitigate the risk of introducing additional issues or downtime when applying patches or updates to the server.
An attacker submits a request containing unexpected characters in an attempt to gain unauthorized access to information within the underlying systems. Which of the following best describes this attack?
SQL injection is an attack technique where an attacker includes unexpected characters or SQL code in a request to manipulate a database query, aiming to gain unauthorized access to data or execute additional database commands. This form of injection targets vulnerabilities in applications that don’t properly validate input, allowing attackers to interact with underlying database systems maliciously.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members: