A retail company receives a request to remove a customer's data. Which of the following is the retail company considered under GDPR legislation?
Answer(s): B
Under GDPR, the data controller determines the purposes and means of processing personal data. The retail company, which collects and manages customer data, is responsible for complying with data deletion requests and thus acts as the data controller.
An administrator implements web-filtering products but still sees that users are visiting malicious links. Which of the following configuration items does the security administrator need to review?
Content categorization defines how websites are classified (e.g., gambling, malicious, social media) within the web-filtering product. If users are still accessing malicious links, it likely means the categorization settings need to be reviewed or updated to block those sites effectively.
A security analyst is reviewing the following logs about a suspicious activity alert for a user's VPN log-ins:Which of the following malicious activity indicators triggered the alert?
Answer(s): A
The logs show successful logins from Chicago, IL, and then within minutes, logins from Rome, Italy, followed again by logins from Chicago. The time between these geographically distant logins is too short for physical travel, triggering the "impossible travel" alert—an indication of potential credential compromise.
Which of the following phases of the incident response process attempts to minimize disruption?
The containment phase focuses on limiting the scope and impact of an incident to prevent further damage or disruption, thereby helping to maintain business continuity during the response process.
Which of the following security principles most likely requires validation before allowing traffic between systems?
Answer(s): C
Zero Trust architecture is built on the principle of “never trust, always verify,” meaning that every request for resource access must be validated - regardless of where it originates - before any traffic is allowed between systems. This continuous validation requirement distinguishes Zero Trust from other models.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.