Which of the following explains how organizations benefit from SCAP?
Answer(s): C
SCAP standardizes how vulnerability and configuration data is formatted and shared, allowing different security tools to interoperate and exchange information consistently across vendors.
Which of the following can assist in recovering data if the decryption key is lost?
Answer(s): D
Escrow refers to a trusted third party securely holding a copy of the decryption key, allowing recovery of encrypted data if the original key is lost.
Which of the following strategies should an organization use to efficiently manage and analyze multiple types of logs?
Answer(s): A
A Security Information and Event Management (SIEM) solution centralizes log collection, aggregation, and analysis from various sources. SIEMs provide real-time monitoring, correlation, and alerting on security events, enabling organizations to efficiently manage and analyze logs from diverse systems in a single platform. This approach is highly effective for identifying security incidents and ensuring compliance.
The Chief Information Security Officer (CISO) of a medium-sized business plans to modernize the existing security infrastructure and address issues with legacy software and assets. Which of the following should the CISO use to determine the scope of the legacy infrastructure and develop a risk-based approach to modernization?
CIS benchmarks provide industry-recognized configuration and security best practices for operating systems, applications, and network devices. By comparing existing systems against these benchmarks, an organization can identify outdated or insecure configurations associated with legacy infrastructure. This assessment helps determine the scope of modernization efforts and supports a risk-based approach by highlighting areas that require remediation or upgrades.
A security analyst reviews logs and finds a large number of malicious requests that have caused performance issues on the company's site. Which of the following would have most likely prevented this attack?
A web application firewall (WAF) filters and blocks malicious HTTP/HTTPS requests before they reach the web application. It can detect and mitigate application-layer attacks that generate large volumes of harmful requests and cause website performance problems.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members: