Which of the following is a compensating control for providing user access to a high-risk website?
Answer(s): A
Enabling threat prevention features on the firewall is a compensating control that adds a layer of security when accessing a high-risk website. This approach helps to detect and block malicious activities associated with the website by scanning for threats, malicious code, and suspicious traffic patterns, thereby mitigating potential risks without completely restricting access.
An organization is implementing a COPE mobile device management policy. Which of the following should the organization include in the COPE policy? (Choose two.)
Answer(s): A,B
In a Corporate-Owned, Personally-Enabled (COPE) mobile device management policy, the organization provides devices that employees can use for both work and personal purposes. Remote wiping ensures that the organization can remove sensitive data if the device is lost, stolen, or if the employee leaves the organization. Data encryption protects sensitive data on the device, ensuring security for both corporate and personal use. These controls are essential for securing organizational data on devices used in a COPE model.
A security administrator observed the following in a web server log while investigating an incident:"GET ../../../../etc/passwd"Which of the following attacks did the security administrator most likely see?
Answer(s): D
The log entry GET ../../../../etc/passwd indicates a directory traversal attack. Directory traversal is an attack technique that attempts to access files and directories outside the web server's root directory by using sequences like ../ to move up the directory tree. In this case, the attacker is attempting to reach the /etc/ passwd file, which typically contains user account information on Unix-based systems. This type of attack can allow unauthorized access to sensitive files on the server.
An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best describes this kind of penetration test?
A partially known environment penetration test, also known as a "gray box" test, is where the tester has limited information about the target, such as basic device details provided by the organization. This type of test simulates an attack by someone with some insider knowledge, allowing for a more realistic assessment of security vulnerabilities than an unknown environment test but with less detailed information than a fully known environment test.
Which of the following should a security team do first before a new web server goes live?
Before a new web server goes live, the first step should be to harden the virtual host. Hardening involves securing the server by disabling unnecessary services, configuring permissions, and applying best practices to minimize vulnerabilities. This foundational step reduces the attack surface and ensures the server is secure before additional security measures, such as WAF rules, intrusion detection, or patch management, are applied.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.