A certificate authority needs to post information about expired certificates. Which of the following would accomplish this task?
Answer(s): B
A CRL (Certificate Revocation List) is a list published by a Certificate Authority (CA) that contains information about certificates that have been revoked or are no longer valid. This list helps systems verify the status of a certificate and ensures that expired or compromised certificates are not trusted.
Which of the following can best contribute to prioritizing patch applications?
Answer(s): A
The Common Vulnerability Scoring System (CVSS) provides a standardized way to assess and prioritize the severity of vulnerabilities. By assigning a numerical score to each vulnerability based on factors like exploitability and impact, CVSS helps organizations determine the urgency of applying patches, enabling efficient risk management and prioritization of remediation efforts.
A systems administrator creates a script that validates OS version, patch levels, and installed applications when users log in. Which of the following examples best describes the purpose of this script?
Answer(s): C
The script ensures that systems meet specific requirements such as the OS version, patch levels, and installed applications when users log in. This process is an example of baseline enforcement, where a predefined standard or configuration (baseline) is enforced to maintain system security, compliance, and stability.
A security analyst learns that an attack vector, which was used as a part of a recent incident, was a well-known IoT device exploit. The analyst needs to review logs to identify the time of initial exploit. Which of the following logs should the analyst review first?
A firewall log is the most relevant log to review first when investigating the initial exploit of an IoT device. Firewalls monitor and log network traffic, including incoming and outgoing connections, which can reveal suspicious activity or unauthorized access attempts targeting the IoT device. By analyzing these logs, the security analyst can pinpoint the time and source of the initial exploit.
A company’s gate access logs show multiple entries from an employee’s ID badge within a two-minute period. Which of the following is this an example of?
RFID cloning occurs when an attacker duplicates the data from an RFID badge, allowing them to simulate multiple entries using the same badge ID. The multiple entries within a short period in the gate access logs indicate that the RFID badge data might have been copied and used illegitimately.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.