Which of the following would a service provider supply as an assurance for a disposal service as part of a disposal process?
Answer(s): B
As part of secure disposal, a service provider issues a certificate of destruction (a form of certification) to formally attest that media or documents were disposed of in accordance with agreed procedures and compliance requirements.
The security department is remediating vulnerabilities that were found during an audit of newly deployed systems. Which of the following must be done to ensure compliance?
Answer(s): C
After applying fixes, rescanning is essential to verify that the remediated systems no longer exhibit the previously detected vulnerabilities, ensuring true compliance with the audit findings.
A company with a high-availability website is looking to harden its controls at any cost. The company wants to ensure that the site is secure by finding any possible issues. Which of the following would most likely achieve this goal?
A bug bounty program leverages a large, diverse community of security researchers who use a wide range of testing methods to uncover vulnerabilities. This crowd-sourced approach maximizes the chances of finding any possible issue, far beyond what a single scan or internal team could achieve.
A human resources (HR) employee working from home leaves their company laptop open on the kitchen table. A family member walking through the kitchen reads an email from the Chief Financial Officer addressed to the HR department. The email contains information referencing company layoffs. The family member posts the content of the email to social media. Which of the following policies will the HR employee most likely need to review after this incident?
Operational security (OPSEC) governs how employees protect sensitive information in their day-to-day activities, such as ensuring screens are locked and confidential emails aren’t left exposed in shared spaces. Reviewing OPSEC best practices would help the HR employee prevent accidental disclosure in a home environment.
A government worker secretly copies classified files that contain defense tactics information to an external drive. The government worker then gives the external drive to a corrupt organization. Which of the following best describes the motivation of the worker?
Answer(s): A
When an insider steals classified defense information and passes it to a hostile organization, their primary motivation is intelligence gathering on behalf of that organization - classic espionage.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.