Which of the following is the primary reason why false negatives on a vulnerability scan should be a concern?
Answer(s): A
False negatives in vulnerability scanning occur when the scan fails to detect existing vulnerabilities. This is a concern because it means that the system has vulnerabilities, but they are not being identified and addressed, leaving the system potentially exposed to exploitation. Unlike false positives, which result in wasted time on vulnerabilities that aren't actually present, false negatives directly impact security by failing to identify real risks.
Which of the following is most likely a security concern when installing and using low-cost IoT devices in infrastructure environments?
Answer(s): D
Storage of data is a significant security concern when installing and using low-cost IoT (Internet of Things) devices in infrastructure environments. Many low-cost IoT devices may not have robust security measures in place to protect the data they collect or transmit. This data could be sensitive, such as operational metrics or user data, and if not properly secured, it could be vulnerable to theft, unauthorized access, or misuse.
Which of the following is the best way to remove personal data from a social media account that is no longer being used?
Exercising the right to be forgotten compels the provider to erase your stored personal data from its systems; simply deleting the app, resetting a device, or even closing the account may leave data retained in backups or archives.
A systems administrator needs to encrypt all data on employee laptops. Which of the following encryption levels should be implemented?
Answer(s): C
Full disk encryption (FDE) encrypts the entire disk, including the operating system, applications, and user data. This ensures that all data on the laptop is encrypted, providing strong security against data theft or unauthorized access if the laptop is lost or stolen. It's the most comprehensive method for securing all information stored on the device.
Which of the following best explains how tokenization helps protect sensitive data?
Answer(s): B
Tokenization replaces sensitive data with nonsensitive reference values called tokens. These tokens have no exploitable meaning on their own. The original data is typically stored in a secured token vault, reducing its exposure in systems that use the tokens.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members: