Which of the following activities should be performed first to compile a list of vulnerabilities in an environment?
Answer(s): A
Automated scanning is the first step in identifying vulnerabilities in an environment. Tools that perform automated vulnerability scanning scan systems and networks for known vulnerabilities, missing patches, misconfigurations, and other security weaknesses. This helps create an initial list of vulnerabilities that can then be prioritized and addressed, often serving as the foundation for further in-depth activities like penetration testing or threat hunting.
Which of the following can be used to mitigate attacks from high-risk regions?
Answer(s): C
IP geolocation allows you to identify the geographical location of an IP address, enabling you to block or limit access from high-risk regions. By using IP geolocation, you can restrict or monitor traffic coming from certain geographic areas that are known to be sources of frequent cyberattacks. This is an effective way to mitigate risks associated with unwanted or malicious traffic from those regions.
An organization that handles sensitive information wants to protect the information by using a reversible technology. Which of the following best satisfies this requirement?
Tokenization is a reversible technology that replaces sensitive information (such as credit card numbers or personal data) with a non-sensitive placeholder (a token). The original data can be retrieved from the token through a secure process, making tokenization ideal for situations where sensitive data needs to be protected but still be recoverable in a controlled manner. Unlike hashing, which is irreversible, tokenization provides a way to securely protect and retrieve sensitive information when necessary.
After a series of account compromises and credential misuse, a company hires a security manager to develop a security program. Which of the following steps should the security manager take first to increase security awareness?
Answer(s): D
The first step in increasing security awareness should be to update policies and handbooks to ensure that all employees are aware of the new procedures and security expectations. Clear, documented policies provide a foundation for employees to understand their roles and responsibilities regarding security. Once the policies are in place, the company can implement additional strategies like training, newsletters, or phishing campaigns to reinforce these practices.
A program manager wants to ensure contract employees can only access the company's computers Monday through Friday from 9 a m. to 5 p.m. Which of the following would best enforce this access control?
Group Policy Objects (GPOs) in a Windows environment allow administrators to enforce access control policies, including restricting user logins based on time-of-day. By applying a GPO to contract employees and configuring logon hours from Monday through Friday, 9 a.m. to 5 p.m., the organization can ensure that these users cannot log in outside of the specified hours. This is the most effective way to enforce access control based on time.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.