An auditor notices that, before logging into the firewall, an employee opens a document in a shared folder that contains administrative credentials. Which of the following should the auditor recommend implementing?
Answer(s): C
Password management solutions securely store and manage credentials, preventing risky practices like keeping administrative credentials in shared folders, which can lead to unauthorized access.
Which of the following attacks uses a website to collectively target a group of developers within an organization?
Answer(s): B
A watering hole attack compromises a website commonly visited by a specific group, such as developers, so when they visit the site, they are collectively targeted and potentially infected.
Which of the following is the best reason to complete an audit in a banking environment?
Answer(s): A
Completing audits in a banking environment is primarily driven by regulatory requirements to ensure compliance with laws and financial regulations.
Which of the following is the most likely benefit of conducting an internal audit?
The most likely benefit of conducting an internal audit is the identification of control gaps, allowing the organization to remediate weaknesses before they can be exploited.
A security analyst identifies an employee who added an unauthorized wireless router to an office branch. After an investigation, the router is removed, and the employee is given mandatory retraining. Which of the following best describes this incident?
Answer(s): D
Shadow IT refers to the use of unauthorized devices, software, or systems, such as an employee adding a wireless router without approval, outside of official IT processes.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.