A security analyst receives an alert from a front-end web server connected to a database back end. The alert contains the following logs:Which of the following attacks is occurring?
Answer(s): C
The log shows classic SQL injection techniques—tautology (1=1), comment injection ('--), and a time‐based payload (dbms_lock.sleep(20)), all indicative of an SQL injection attack.
Which of the following control types involves restricting IP connectivity to a router's web management interface to protect it from being exploited by a vulnerability?
Restricting IP access to the router’s management interface proactively blocks unauthorized attempts to exploit vulnerabilities, making it a preventive control.
Which of the following data types relates to data sovereignty?
Answer(s): D
Data sovereignty concerns the legal and regulatory requirements governing data where it physically resides. Storing data at rest outside a country’s borders subjects it to the foreign jurisdiction’s laws, making this the key data sovereignty issue.
A software developer wishes to implement an application security technique that will provide assurance of the application’s integrity. Which of the following techniques will achieve this?
Code signing uses digital signatures to verify that an application’s binaries haven’t been altered since they were signed, providing cryptographic assurance of the software’s integrity.
A penetration test reveals that users can easily access internal VLANs from the company's guest Wi-Fi. Which of the following security principles would remediate this vulnerability by improving network authentication mechanisms?
802.1X enforces port-based authentication before assigning a device to a VLAN, ensuring only authorized users can join internal networks and preventing guests from accessing protected segments.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.