Which of the following describes the difference between encryption and hashing?
Answer(s): B
Encryption transforms cleartext into ciphertext using an algorithm and a key to protect the data's confidentiality. The ciphertext can be decrypted back into the original cleartext with the correct key.Hashing is a one-way process that generates a fixed-size hash value (checksum) from input data. Hashing is typically used to ensure data integrity by detecting changes in the data, as even a small alteration results in a completely different hash value.
A security report shows that during a two-week test period, 80% of employees unwittingly disclosed their SSO credentials when accessing an external website. The organization purposely created the website to simulate a cost-free password complexity test. Which of the following would best help reduce the number of visits to similar websites in the future?
A phishing awareness campaign is the best way to address this issue by educating employees about recognizing and avoiding phishing attempts. The campaign can include training sessions, simulated phishing exercises, and guidelines for safely handling requests for sensitive information. By increasing awareness and understanding, employees will be less likely to fall for similar schemes in the future, significantly reducing the risk of credential disclosure.
A Chief Information Security Officer (CISO) has developed information security policies that relate to the software development methodology. Which of the following would the CISO most likely include in the organization’s documentation?
Answer(s): A
Peer review requirements are often included in information security policies related to the software development methodology. Peer reviews help ensure that code is reviewed for quality, security vulnerabilities, and adherence to best practices before it is merged or deployed. This process reduces the likelihood of introducing security flaws into the software and aligns with secure development lifecycle practices.
An organization is developing a security program that conveys the responsibilities associated with the general operation of systems and software within the organization. Which of the following documents would most likely communicate these expectations?
Answer(s): C
An Acceptable Use Policy (AUP) outlines the responsibilities and expectations for employees and users regarding the use of systems, software, and other organizational resources. It specifies the appropriate and prohibited behaviors to ensure secure and proper operation of these systems. This policy communicates general operational responsibilities and helps enforce compliance with organizational security standards.
A security analyst created a fake account and saved the password in a non-readily accessible directory in a spreadsheet. An alert was also configured to notify the security team if the spreadsheet is opened. Which of the following best describes the deception method being deployed?
A honeyfile is a decoy file created to detect unauthorized access or suspicious activities. In this case, the security analyst set up a fake account and saved its password in a hidden spreadsheet, configuring an alert to trigger if the file is accessed. This approach aims to deceive potential attackers and monitor their behavior, making it a clear example of using a honeyfile.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.