A user receives an aggressive text from an unknown sender who is demanding money. Which of the following attacks is this an example of?
Answer(s): C
Smishing is a form of phishing conducted via SMS or text messages. An unsolicited, threatening text demanding money exemplifies a smishing attack.
Employees receive a text message containing a link to a web page that prompts the user to enter their ID and a work phone number. The text message appears to come from the Chief Executive Officer, but it is later discovered that the message is not legitimate. Which of the following does this best represent? (Choose two.)
Answer(s): B,C
Smishing is phishing via SMS/text messages, exactly as seen when users receive a malicious link by text.Impersonation occurs when the attacker poses as the CEO to lend credibility to the request and trick employees into divulging sensitive information.
A security engineer needs to patch an OS vulnerability that impacts all corporate laptops. Which of the following is necessary to ensure all corporate laptops are patched?
Answer(s): B
An accurate inventory of corporate laptops is essential to ensure that every affected device is identified and included in the patch deployment process. Without a complete asset inventory, some laptops could be missed and remain vulnerable.
Which of the following threat vectors would a user be vulnerable to when using a smartphone to scan a two-dimensional matrix barcode?
Answer(s): A
Malicious QR codes can embed phishing URLs or commands that execute when scanned. Attacks using QR codes to phish users are known as “quishing.”
Which of the following is most likely a security concern when installing and using low-cost IoT devices in infrastructure environments?
Low-cost IoT devices often come from unvetted or knock-off manufacturers, introducing counterfeit or tampered hardware and firmware that can embed backdoors or malicious components, posing a major supply-chain security risk.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.