A university uses two different cloud solutions for storing student data. Which of the following does this represent?
Answer(s): C
By employing multiple cloud providers for the same workloads, the university reduces reliance on a single vendor and mitigates risks like outages or vendor-specific vulnerabilities.
An organization wants to implement a secure solution for remote users. The users handle sensitive PHI on a regular basis and need to access an internally developed corporate application. Which of the following best meet the organization's security requirements? (Choose two.)
Answer(s): E,F
Multi-factor authentication (MFA) and a virtual private network (VPN) best meet the organization's security requirements for remote access to sensitive information like protected health information (PHI).MFA adds a layer of security by requiring multiple forms of verification before granting access, which helps protect against unauthorized access.VPN provides a secure encrypted connection for remote users, ensuring that data transmitted over the network remains confidential and secure.Together, these controls help secure remote access to the corporate application handling sensitive data.
An attacker floods an organization's VoIP phone system with thousands of requests. This causes legitimate calls to drop or fail to connect. Analysis shows the attacker faked internal extensions to trick users into answering calls and sharing sensitive information. Which of the following types of attacks has the attacker used in this incident? (Choose two.)
Answer(s): A,D,E
The attacker used SIP spoofing by faking internal VoIP extensions, vishing by tricking users over phone calls into sharing sensitive information, and a denial-of-service attack by flooding the VoIP system with requests that caused legitimate calls to fail.
Which of the following concepts protects sensitive information from unauthorized disclosure?
Answer(s): D
Confidentiality ensures that sensitive information is accessible only to authorized individuals and is protected from unauthorized disclosure.
An analyst wants to move data from production to the UAT server to test the latest release. Which of the following strategies to protect data should the analyst use?
Answer(s): A
Data masking protects sensitive production data when moving it into non-production environments by replacing sensitive fields with realistic but fictitious values, allowing safe testing without exposing real data.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members: