Which of the following is the best way to prevent data from being leaked from a secure network that does not need to communicate externally?
Answer(s): A
Physically isolating a network (air gapping) ensures there is no direct or indirect external connection, effectively preventing any data leakage from the secure environment.
Which of the following activities identifies but does not exploit vulnerabilities?
Answer(s): B
Static analysis examines code in a non-running state to uncover vulnerabilities without executing or exploiting them, ensuring you identify issues without actively attacking the system.
A penetration tester was able to gain unauthorized access to a hypervisor platform. Which of the following vulnerabilities was most likely exploited?
Answer(s): D
VM escape occurs when an attacker breaks out of a virtual machine’s sandbox to interact directly with the underlying hypervisor, granting unauthorized access to the host platform. This is the vulnerability exploited when compromising a hypervisor.
An attacker defaces a company's website and refuses to relinquish control until the company removes specific harmful chemicals from its products. Which of the following best describes this type of threat actor?
A hacktivist uses cyberattacks, such as website defacement, to advance a political or social agenda. In this case, the attacker’s demand to remove harmful chemicals reflects an ideological motive, characteristic of hacktivism.
A company uses a cloud-based server for file storage and wants to ensure the security of its data in transit. Which of the following should the company use to secure this type of communication? (Choose two.)
Answer(s): A,D
TLS certificates establish an encrypted channel (SSL/TLS) between clients and the cloud server, ensuring all file‐transfer traffic is protected in transit.A VPN creates a secure, encrypted tunnel over the Internet, adding an additional layer of protection for all network communications with the cloud environment.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.