Which of the following activities uses OSINT?
Answer(s): A
OSINT (Open-Source Intelligence) refers to the collection and analysis of publicly available information from various sources, such as social media, websites, and public records. In social engineering testing, OSINT is used to gather information about a target, such as employee names, roles, and behaviors, which can then be exploited during the test to assess the organization's vulnerability to social engineering attacks.
Which of the following are the best security controls for controlling on-premises access? (Choose two.)
Answer(s): A,D
Swipe Card: Swipe cards are a common physical security measure that allows controlled access to specific areas. They are assigned to authorized individuals and can be tracked or deactivated if lost or stolen.Biometric Scanner: Biometric scanners, such as fingerprint or iris scanners, provide robust security by verifying unique physical characteristics of a person. They are highly effective in preventing unauthorized access as biometric data is difficult to replicate.
A company is considering an expansion of access controls for an application that contractors and internal employees use to reduce costs. Which of the following risk elements should the implementation team understand before granting access to the application?
Answer(s): B
Risk appetite refers to the level of risk an organization is willing to accept in pursuit of its objectives. When granting access to an application, especially to both contractors and internal employees, the implementation team needs to assess how much risk the organization is willing to tolerate regarding potential unauthorized access, data breaches, or misuse of the application. Understanding the company's risk appetite helps in designing access controls that align with its risk management strategy.
Which of the following is the act of proving to a customer that software developers are trained on secure coding?
Answer(s): D
Attestation is the act of formally declaring or providing evidence that certain conditions or requirements have been met. In this context, it involves proving to a customer that software developers are trained on secure coding practices. This can be achieved through documentation, certifications, or other official declarations demonstrating compliance with secure coding standards.
An administrator is creating a secure method for a contractor to access a test environment. Which of the following would provide the contractor with the best access to the test environment?
A jump server (also known as a jump box) is a secure system designed to serve as a controlled entry point for accessing servers and environments. It is commonly used to provide external contractors or administrators with access to a specific environment, such as a test environment, while minimizing the risk of unauthorized access to other parts of the network. Jump servers typically include additional security measures like multi-factor authentication and logging to enhance control and monitoring.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.