A company is performing a risk assessment on new software the company plans to use. Which of the following should the company assess during this process?
Answer(s): A
When performing a risk assessment on new software, the company needs to evaluate the potential vulnerabilities within the software. Identifying software vulnerabilities helps assess the potential security risks, such as possible exploits or weaknesses that could be exploited by attackers. This is a critical part of the risk assessment process to ensure that the software does not introduce security threats to the company's environment.
A malicious actor is trying to access sensitive financial information from a company's database by intercepting and reusing log-in credentials. Which of the following attacks is the malicious actor attempting?
Answer(s): B
An "on-path" attack, previously known as a man-in-the-middle (MITM) attack, occurs when a malicious actor intercepts communication between two parties (such as a user and a server). In this scenario, the attacker is trying to access sensitive financial information by intercepting and reusing login credentials. The malicious actor can capture the credentials and then use them to gain unauthorized access to the system or data.
A new employee accessed an unauthorized website. An investigation found that the employee violated the company's rules. Which of the following did the employee violate?
An Acceptable Use Policy (AUP) is a set of rules that define what is acceptable behavior regarding the use of company resources, including the internet. If the employee accessed an unauthorized website, this action would likely violate the company's AUP, which outlines the proper and prohibited uses of the company's network, devices, and other resources.
A systems administrator is reviewing the VPN logs and notices that during non-working hours a user is accessing the company file server and information is being transferred to a suspicious IP address. Which of the following threats is most likely occurring?
Answer(s): C
Data exfiltration refers to the unauthorized transfer of sensitive data from a company's systems to an external location, often by a malicious actor. In this case, the VPN logs indicate that a user is accessing the company file server and transferring information to a suspicious IP address during non-working hours. This behavior strongly suggests that sensitive data is being stolen or transferred without authorization, which is the essence of data exfiltration.
HOTSPOT (Drag and Drop is not supported)A security architect is tasked with designing a highly resilient, business-critical application. The application SLA is 99.999%.INSTRUCTIONSSelect the network, power, and server components for the appropriate locations to achieve application resiliency.A component should be selected for each location, and components may be selected more than once.If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.Hot Area:
High availability: Redundant components should be used wherever possible. Network resilience: Redundant network paths and devices. Power resilience: Multiple UPS systems and power supplies. Application resilience: Load balancers, active-active configurations.Active-active routers Ensure network redundancy for the connection to the internet. Active-active routers allow for failover and load balancing.Active-active firewalls Protect against network attacks with no single point of failure. Active-active firewalls provide better performance and high availability.Load balancers Distribute traffic across servers to ensure even workload and redundancy.Power supply A Primary and secondary power supplies for Web Server A to ensure it remains operational.Power supply B Primary and secondary power supplies for Web Server A to provide redundancy.Power supply A Primary power supply for Web Server B.UPS A Primary uninterruptible power supply for the datacenter, ensuring continuous power in case of failure.UPS B Secondary uninterruptible power supply for redundancy.SONET ring High-speed fiber optic network that provides redundancy and prevents failure from a single point of connection.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.