An analyst is reviewing job postings to ensure sensitive company information is not being shared with the general public. Which of the following is the analyst most likely looking for?
Answer(s): B
When reviewing job postings, an analyst would be most concerned with software versions being shared, as this can potentially expose vulnerabilities in the company's systems. If the version of software being used by the company is disclosed, attackers could target known vulnerabilities in those specific versions. Therefore, job postings should not contain such sensitive details.
An engineer has ensured that the switches are using the latest OS, the servers have the latest patches, and the endpoints' definitions are up to date. Which of the following will these actions most effectively prevent?
Answer(s): D
By ensuring that switches are using the latest OS, servers have the latest patches, and endpoints' definitions are up to date, the engineer is most effectively protecting against known exploits. Exploits are typically vulnerabilities in software or systems that attackers use to gain unauthorized access or control. Patching systems and updating definitions helps close these known vulnerabilities, making it more difficult for attackers to exploit them.
Which of the following is most likely a security concern when installing and using low-cost IoT devices in infrastructure environments?
Storage of data is a significant security concern when installing and using low-cost IoT (Internet of Things) devices in infrastructure environments. Many low-cost IoT devices may not have robust security measures in place to protect the data they collect or transmit. This data could be sensitive, such as operational metrics or user data, and if not properly secured, it could be vulnerable to theft, unauthorized access, or misuse.
A company captures log-in details and reviews them each week to identify conditions such as excessive log-in attempts and frequent lockouts. Which of the following should a security analyst recommend to improve security compliance monitoring?
Automated alerting when anomalies occur is a crucial recommendation for improving security compliance monitoring. This approach ensures that suspicious activities, such as excessive login attempts and frequent lockouts, are immediately detected and flagged for further investigation, reducing the risk of undetected security threats. Automated alerts improve response times and reduce the need for manual monitoring, enhancing overall security posture.
A security team is in the process of hardening the network against externally crafted malicious packets. Which of the following is the most secure method to protect the internal network?
Answer(s): C
An Intrusion Prevention System (IPS) is the most secure method for protecting the internal network against externally crafted malicious packets. IPS can monitor network traffic in real-time, detect, and block malicious packets or suspicious activity, which is critical for defending against external threats. An IPS actively analyzes traffic and can take action (such as blocking traffic or alerting administrators) to prevent attacks, making it highly effective in hardening the network against malicious packets.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.