A company discovers suspicious transactions that were entered into the company's database and attached to a user account that was created as a trap for malicious activity. Which of the following is the user account an example of?
Answer(s): A
A honeytoken is a piece of data or a user account intentionally created to act as a trap for malicious activity. It is designed to attract and detect unauthorized access or suspicious transactions, as in this scenario where suspicious transactions were linked to a user account set up as a trap. When an attacker interacts with the honeytoken, it can alert administrators to potential malicious activity.
A network engineer is increasing the overall security of network devices and needs to harden the devices. Which of the following will best accomplish this task?
Answer(s): C
Replacing Telnet with SSH (Secure Shell) is one of the best practices for hardening network devices. Telnet sends data, including passwords, in plaintext, making it vulnerable to interception. SSH, on the other hand,encrypts the communication between devices, providing a more secure way to manage network devices remotely.
A company's accounting department receives an urgent payment message from the company's bank domain with instructions to wire transfer funds. The sender requests that the transfer be completed as soon as possible. Which of the following attacks is described?
Business email compromise (BEC) is a type of attack in which a hacker impersonates an executive, business partner, or trusted entity within the company (often via email) to trick employees into performing unauthorized financial transactions, such as wire transfers. In this case, the attacker uses a fraudulent message from what appears to be the company's bank, urgently requesting a wire transfer, which is a hallmark of a BEC attack.
A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential information. Which of the following is the most likely reason the company filed the complaint?
Answer(s): D
A Non-Disclosure Agreement (NDA) is a legally binding contract that ensures confidential information shared between two parties is not disclosed to unauthorized third parties. In this case, the company likely filed a complaint because the external audit team, which was part of the service provider, had access to the company's confidential information without the proper NDA in place, potentially violating confidentiality agreements.
Which of the following aspects of the data management life cycle is most directly impacted by local and international regulations?
Data retention refers to the period of time that data must be kept by an organization. Local and international regulations (such as GDPR, HIPAA, or other data protection laws) often define how long specific types of data must be retained for legal, regulatory, or business purposes. These regulations can directly impact how long data should be stored and when it must be deleted or anonymized.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.