A red-team provider tailgates into an organization's facility. Which of the following has occurred?
Answer(s): C
Tailgating into a facility during a red-team exercise is a form of physical penetration testing, where security is evaluated by attempting to bypass physical access controls.
Which of the following actions must an organization take to comply with a person's request for the right to be forgotten?
The “right to be forgotten” (right of erasure) requires that organizations delete or permanently remove all personal data related to the individual from their systems and backups, not merely obfuscate or encrypt it.
A penetration tester visits a client's website and downloads the site's content. Which of the following actions is the penetration tester performing?
Answer(s): D
Downloading publicly available website content without exploiting vulnerabilities or interacting with private systems is passive reconnaissance - collecting information from external sources without direct intrusion.
An administrator must authenticate users to systems using credentials already authenticated by a business partner's LDAP system. Which of the following should the administrator deploy to enable this functionality?
Federation allows users authenticated by an external identity provider (such as a partner’s LDAP directory) to access your systems without reentering credentials, by trusting and exchanging authentication assertions between domains.
To which of the following security categories does an EDR solution belong?
An EDR (Endpoint Detection and Response) solution is a technical security control that focuses on monitoring, detecting, and responding to threats on endpoint devices such as desktops, laptops, and servers. It provides real-time visibility, threat detection, and automated responses to mitigate security incidents, making it a part of the technical security category.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members: