Which of the following are activities that should be completed during the containment and eradication phases of the incident response process? (Choose two.)
Answer(s): C,D
During containment, you first pinpoint exactly what malware or attack vector is in play and how far it has spread - i.e. identifying the threat. Then, in the eradication phase, you eliminate the root cause by removing the malicious threat (malware, backdoors, unauthorized accounts, etc.) before moving on to system recovery.
All clients who connect to the switchports are required to complete a posture analysis before accessing the internet. Which of the following should the IT team configure to help secure the enterprise infrastructure?
Answer(s): D
Network Access Control (NAC) enforces endpoint posture checks, such as antivirus status, patch levels, and configuration, before allowing devices on switchports to access the network or internet.
An attorney prints confidential documents to a copier in an office space near multiple workstations and a reception desk. When the attorney goes to the copier to retrieve the documents, the documents are missing. Which of the following would best prevent this from reoccurring?
Answer(s): C
Requiring users to authenticate at the copier before a print job is released (often called pull-printing) ensures that confidential documents are only printed when the authorized person is physically present - preventing documents from being left unattended.
Which of the following activities should a systems administrator perform to quarantine a potentially infected system?
Answer(s): A
Quarantining an infected host means isolating it from the rest of the network to prevent malware from spreading. Physically or logically placing the device into an air-gapped (isolated) environment severs its connectivity, effectively containing the threat.
Which of the following can be deployed in data centers as a protection against an undervoltage event?
A UPS provides battery-backed power and voltage regulation, protecting equipment from undervoltage (brownout) conditions by supplying stable power until normal levels are restored or a generator comes online. Surge protectors, by contrast, guard against overvoltage, and the other options don’t address voltage dips.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.