A penetration test has demonstrated that domain administrator accounts were vulnerable to pass-the-hash attacks. Which of the following would have been the best strategy to prevent the threat actor from using domain administrator accounts?
Answer(s): B
A privileged access management (PAM) solution is the best strategy to prevent the threat actor from using domain administrator accounts in a pass-the-hash attack. PAM solutions are designed to secure, control, and monitor the access to critical accounts (like domain administrator accounts) by enforcing least privilege access, ensuring strong authentication methods, and reducing the exposure of credentials. These solutions often include features such as vaulting and rotating privileged credentials, which mitigate the risk of pass-the-hash attacks.
Which of the following is an example of memory injection?
Answer(s): C
Memory injection is a type of attack where malicious code is injected into the memory space of an already running process. This allows the attacker to control or manipulate the process's behavior by executing the injected code. This technique is commonly used in exploits such as code injection attacks, where the attacker injects malicious code into a process's memory, causing it to execute and perform malicious actions.
A security administrator is implementing encryption on all hard drives in an organization. Which of the following security concepts is the administrator applying?
Answer(s): D
When the security administrator implements encryption on all hard drives, the primary goal is to protect the confidentiality of the data. Encryption ensures that only authorized users can access the data, as it is transformed into an unreadable format without the proper decryption key. This protects sensitive information from unauthorized access, even if the physical hard drive is lost or stolen.
An administrator has configured a quarantine subnet for all guest devices that connect to the network. Which of the following would be best for the security team to perform before allowing access to corporate resources?
Before allowing guest devices to access corporate resources, the security team should perform compliance attestation. This involves ensuring that the guest devices meet specific security and configuration requirements, such as up-to-date antivirus software, the latest security patches, and proper configurations. Compliance attestation helps verify that the devices are safe to connect to the corporate network and reduces the risk of introducing vulnerabilities.
A customer has a contract with a CSP and wants to identify which controls should be implemented in the IaaS enclave. Which of the following is most likely to contain this information?
A responsibility matrix (also known as a RACI matrix) is the most likely document to contain information about which security controls should be implemented in the IaaS (Infrastructure as a Service) enclave. It outlines the specific responsibilities of the customer and the cloud service provider (CSP) regarding security and compliance, helping to clarify which party is responsible for various controls and tasks within the environment.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.