During a penetration test in a hypervisor, the security engineer is able to use a script to inject a malicious payload and access the host filesystem. Which of the following best describes this vulnerability?
Answer(s): A
VM escape occurs when an attacker exploits a vulnerability in the hypervisor, allowing them to break out of the virtual machine and access the underlying host system’s resources.
Which of the following security controls are a company implementing by deploying HIPS? (Choose two.)
Answer(s): B,F
HIPS (Host-based Intrusion Prevention System) is a preventive control because it actively blocks or prevents malicious activities on a host.It is also a detective control, as it monitors and detects suspicious activities or policy violations on the host system.
Which of the following describes effective change management procedures?
Answer(s): B
Effective change management includes having a backout plan, so that if a patch or change fails, systems can be restored to their previous, stable state.
A company is experiencing a high number of users who are clicking on email-based attacks even though those users have completed annual training. The company's Chief Security Officer wants to identify and reduce which users are phished the most often. Which of the following will best achieve this result?
Deploying a simulated phishing product allows the company to directly measure which users are susceptible to phishing attacks by tracking who clicks on simulated malicious links, enabling targeted awareness and training efforts.
Which of the following mitigation techniques would a security analyst most likely use to avoid bloatware on devices?
An application allow list ensures that only approved applications can be installed or run on a device, effectively preventing the installation of unwanted bloatware.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.