When trying to access an internal website, an employee reports that a prompt displays, stating that the site is insecure. Which of the following certificate types is the site most likely using?
Answer(s): D
A self-signed certificate is not issued by a trusted certificate authority, which often causes browsers to flag it as insecure. When accessing a site with a self-signed certificate, users typically receive a warning about the site’s security since the certificate cannot be automatically trusted, making it likely that the internal website is using a self-signed certificate.
Which of the following would most likely be deployed to obtain and analyze attacker activity and techniques?
Answer(s): C
A honeypot is a decoy system or network resource designed to attract attackers and observe their activity. It is intentionally left vulnerable to capture and analyze attacker behavior, techniques, and tools, providing valuable insights into potential threats without risking actual production systems. This makes it the ideal choice for studying attacker tactics and patterns.
Which of the following objectives is best achieved by a tabletop exercise?
Answer(s): A
A tabletop exercise is a discussion-based exercise where participants walk through different scenarios to better understand and familiarize themselves with the incident response process. This type of exercise allows teams to review roles, procedures, and potential responses to various incidents in a low-stress environment, enhancing preparedness and coordination.
The private key for a website was stolen, and a new certificate has been issued. Which of the following needs to be updated next?
Answer(s): B
The Certificate Revocation List (CRL) should be updated when a private key is compromised. The CRL is a list of certificates that have been revoked by the issuing Certificate Authority (CA) and are no longer trusted. Updating the CRL ensures that clients and systems know the previous certificate is no longer valid, preventing it from being trusted even if the key has been compromised.
Which of the following organizational documents is most often used to establish and communicate expectations associated with integrity and ethical behavior within an organization?
An Acceptable Use Policy (AUP) is commonly used to establish and communicate the organization’s expectations regarding acceptable behavior, integrity, and ethical conduct. It outlines guidelines for appropriate use of company resources and sets standards for employees to follow, promoting a secure and ethical work environment.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.