A security engineer at a large company needs to enhance IAM in order to ensure that employees can only access corporate systems during their shifts. Which of the following access controls should the security engineer implement?
Answer(s): B
Time-of-day restrictions are the most appropriate access control for ensuring that employees can only access corporate systems during their shifts. By setting specific time windows during which access is allowed (e.g., only during working hours or assigned shifts), the security engineer can limit when users are able to log in and access corporate resources.
A company wants to ensure employees are allowed to copy files from a virtual desktop during the workday but are restricted during non-working hours. Which of the following security measures should the company set up?
Answer(s): C
Time-based access control is the most suitable measure for restricting employees from copying files during non-working hours. It allows access to resources based on the time of day, ensuring that employees can copy files during the workday, but are restricted from doing so outside of those hours. This ensures that the company's policy is enforced based on time-specific criteria.
Employees sign an agreement that restricts specific activities when leaving the company. Violating the agreement can result in legal consequences. Which of the following agreements does this best describe?
An NDA (Non-Disclosure Agreement) is a legal document that restricts individuals from sharing proprietary or confidential information they have access to during their employment. Employees sign this agreement to prevent the disclosure of sensitive company information after leaving the organization. Violation of an NDA can result in legal consequences, including lawsuits.
A systems administrator just purchased multiple network devices. Which of the following should the systems administrator perform to prevent attackers from accessing the devices by using publicly available information?
Changing default passwords is a critical step in securing network devices. Default credentials are often publicly available and widely known by attackers, making devices vulnerable to unauthorized access. By replacing these defaults with strong, unique passwords, the systems administrator can significantly reduce the risk of compromise.
A CVE in a key back-end component of an application has been disclosed. The systems administrator is identifying all of the systems in the environment that are susceptible to this risk. Which of the following should the systems administrator perform?
A vulnerability scan is used to identify systems and components in an environment that are susceptible to known vulnerabilities, such as those disclosed through CVEs (Common Vulnerabilities and Exposures). This process involves scanning systems for software versions and configurations to determine if they match the affected criteria of the disclosed vulnerability. This allows the systems administrator to take corrective actions, such as patching or mitigating the vulnerability.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.