A Chief Information Security Officer is developing procedures to guide detective and corrective activities associated with common threats, including phishing, social engineering, and business email compromise. Which of the following documents would be most relevant to revise as part of this process?
Answer(s): B
An Incident Response Plan (IRP) is the most relevant document to revise when developing procedures for detective and corrective activities related to common threats such as phishing, social engineering, and business email compromise. The IRP outlines the steps to be taken when a security incident occurs, including detection, containment, eradication, and recovery. It ensures that the organization is prepared to respond to and mitigate the effects of these types of threats.
Which of the following testing techniques uses both defensive and offensive testing methodologies with developers to securely build key applications and software?
Yellow team testing is a security testing technique that combines both defensive and offensive methodologies with developers to ensure secure coding practices and the identification of vulnerabilities early in the development process. This collaborative approach helps developers understand both how to defend against attacks and how attackers might exploit weaknesses, leading to more secure applications.
An administrator wants to automate an account permissions update for a large number of accounts. Which of the following would best accomplish this task?
Answer(s): C
Which of the following is the fastest and most cost-effective way to confirm a third-party supplier's compliance with security obligations?
Answer(s): A
An attestation report is the fastest and most cost-effective way to confirm a third-party supplier's compliance with security obligations. An attestation report is a document provided by the third party (or a third-party auditor) that confirms their adherence to specific security frameworks, policies, or regulatory standards. This report is often based on industry standards such as SOC 2, ISO 27001, or similar certifications, and provides assurance without the need for an in-depth audit or testing process.
Various company stakeholders meet to discuss roles and responsibilities in the event of a security breach that would affect offshore offices. Which of the following is this an example of?
A tabletop exercise is a type of simulation where stakeholders discuss their roles, responsibilities, and procedures in response to a hypothetical situation, such as a security breach. The goal of this exercise is to test how well the team coordinates and responds to the incident without actually executing the actions in a real environment. It helps ensure that everyone understands their responsibilities and can react effectively when an actual breach occurs.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.