The Chief Information Officer (CIO) asked a vendor to provide documentation detailing the specific objectives within the compliance framework that the vendor's services meet. The vendor provided a report and a signed letter stating that the services meet 17 of the 21 objectives. Which of the following did the vendor provide to the CIO?
Answer(s): C
An attestation of compliance is a statement or document, often signed by a third party or the vendor themselves, confirming that specific objectives within a compliance framework are being met. In this case, the vendor provided a report and a signed letter stating that their services meet 17 of the 21 objectives, which aligns with an attestation of compliance. This document typically summarizes the vendor's compliance status and is used to assure customers that the vendor adheres to certain standards or regulations.
Which of the following describes the most effective way to address OS vulnerabilities after they are identified?
Answer(s): D
Patching is the most effective way to address operating system vulnerabilities once they are identified. Patches are updates released by software vendors to fix known vulnerabilities, including security holes, bugs, or other issues that could be exploited by attackers. Applying patches promptly ensures that vulnerabilities are mitigated, reducing the risk of an attack.
The management team reports that employees are missing features on company-provided tablets, which is causing productivity issues. The management team directs the IT team to resolve the issue within 48 hours. Which of the following would be the best solution for the IT team to leverage in this scenario?
MDM (Mobile Device Management) is the best solution in this scenario. MDM allows IT teams to manage, configure, and secure mobile devices remotely. It can be used to ensure that company-provided tablets are properly configured, with all necessary features and updates, and to resolve issues such as missing features or software inconsistencies. Additionally, MDM can help enforce company policies, deploy apps, and track device compliance, making it an efficient way to address the problem within the 48-hour time frame.
A company is implementing a policy to allow employees to use their personal equipment for work. However, the company wants to ensure that only company-approved applications can be installed. Which of the following addresses this concern?
Answer(s): A
MDM (Mobile Device Management) is the most appropriate solution for this scenario. MDM allows companies to manage and secure mobile devices, including personal devices used for work (BYOD - Bring Your Own Device). With MDM, the company can enforce policies such as restricting the installation of unauthorized applications and ensuring that only company-approved applications are installed on the devices. MDM also allows remote management, configuration, and monitoring of devices to ensure compliance with company policies.
An alert references attacks associated with a zero-day exploit. An analyst places a bastion host in the network to reduce the risk of the exploit. Which of the following types of controls is the analyst implementing?
A compensating control is a security measure implemented to mitigate risks when the primary control (e.g., patching the vulnerability) is not immediately feasible. In this case, placing a bastion host in the network to reduce the risk of a zero-day exploit is a compensating control. It provides an additional layer of security, helping to protect the network from exploitation until the vulnerability can be properly addressed (e.g., through a patch or fix).
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.