Which of the following could potentially be introduced at the time of side loading?
Answer(s): B
Side loading involves installing software or applications from sources outside official or trusted repositories. This process can potentially introduce malicious software, such as a rootkit, which embeds itself deeply into a system to maintain privileged access and evade detection. Rootkits are often a significant threat when using unverified or non-trusted installation sources.
While a school district is performing state testing, a security analyst notices all internet services are unavailable. The analyst discovers that ARP poisoning is occurring on the network and then terminates access for the host. Which of the following is most likely responsible for this malicious activity?
Answer(s): C
The malicious activity involving ARP poisoning in a school district during state testing suggests deliberate and targeted action, likely from someone with internal access and knowledge of the network. This aligns with an insider threat, where an individual within the organization, such as a student or staff member, intentionally disrupts network operations. Insiders often have the access and opportunity required to carry out such attacks.
A user needs to complete training at https://comptiatraining.com. After manually entering the URL, the user sees that the accessed website is noticeably different from the standard company website. Which of the following is the most likely explanation for the difference?
Typosquatting occurs when an attacker registers a domain name that is very similar to a legitimate website, often exploiting common typographical errors (e.g., "comptiatrainning.com" instead of "comptiatraining.com"). If a user manually enters an incorrect URL and lands on a fraudulent website, it is most likely a typosquatting attempt. This is commonly used for phishing or distributing malware.
A company has yearly engagements with a service provider. The general terms and conditions are the same for all engagements. The company wants to simplify the process and revisit the general terms every three years. Which of the following documents would provide the best way to set the general terms?
Answer(s): A
A Master Service Agreement (MSA) establishes the general terms and conditions governing the relationship between a company and a service provider. It is designed for long-term use, allowing individual engagements (e.g., statements of work) to reference the MSA instead of redefining the terms repeatedly. Revisiting the MSA every three years simplifies the process while maintaining flexibility for yearly engagements.
While updating the security awareness training, a security analyst wants to address issues created if vendors' email accounts are compromised. Which of the following recommendations should the security analyst include in the training?
Answer(s): D
Compromised vendor email accounts can be used to send phishing emails or fraudulent requests that appear legitimate. Employees should be trained to recognize and scrutinize unexpected requests even when they come from familiar email addresses, as this is a common tactic in phishing and business email compromise (BEC) attacks. This recommendation directly addresses the risk posed by compromised vendor accounts.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.