A new corporate policy requires all staff to use multifactor authentication to access company resources. Which of the following can be utilized to set up this form of identity and access management? (Choose two.)
Answer(s): A,C
Authentication tokens: Tokens, such as hardware or software-based one-time password (OTP) generators, are commonly used as one factor in multifactor authentication (MFA). They provide an additional layer of security beyond just a password.Biometrics: Biometric factors, such as fingerprint scans or facial recognition, are another common component of MFA, providing a "something you are" factor for identity verification.These factors, when combined with something the user knows (e.g., a password), fulfill the requirements for MFA by incorporating multiple layers of authentication.
A help desk employee receives a call from someone impersonating the Chief Executive Officer. The caller asks for assistance with resetting a password. Which of the following best describes this event?
Answer(s): A
Vishing (voice phishing) is a social engineering attack conducted over the phone. In this scenario, the attacker impersonates the CEO to manipulate the help desk employee into resetting a password, which is a classic example of a vishing attempt.
The number of tickets the help desk has been receiving has increased recently due to numerous false-positive phishing reports. Which of the following would be best to help to reduce the false positives?
Answer(s): B
Improving security awareness training helps employees better understand and identify legitimate phishing attempts, reducing the number of false-positive reports. Enhanced training can teach staff to recognize key indicators of phishing emails and report only those that warrant investigation, decreasing the workload for the help desk.
A systems administrator needs to encrypt all data on employee laptops. Which of the following encryption levels should be implemented?
Answer(s): C
Full disk encryption (FDE) encrypts the entire disk, including the operating system, applications, and user data. This ensures that all data on the laptop is encrypted, providing strong security against data theft or unauthorized access if the laptop is lost or stolen. It's the most comprehensive method for securing all information stored on the device.
Which of the following actions best addresses a vulnerability found on a company's web server?
Patching involves applying updates or fixes to software to address known vulnerabilities. If a vulnerability is found on a web server, applying a patch is the most effective and direct way to resolve the issue and protect the system from exploitation. This action fixes the security holes in the software, making it secure against known threats.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.