A forensic engineer determines that the root cause of a compromise is a SQL injection attack. Which of the following should the engineer review to identify the command used by the threat actor?
Answer(s): B
Application logs capture the SQL statements executed (including user inputs and errors). Reviewing the application log will reveal the exact injection payload and commands the attacker used, whereas system or network logs do not record SQL query details.
In which of the following will unencrypted PLC management traffic most likely be found?
Answer(s): D
SCADA systems orchestrate and manage PLCs in industrial environments, and their native management protocols (e.g., Modbus, DNP3) are often sent unencrypted.
An administrator must implement a solution that provides security and network connectivity between two companies. Which of the following infrastructure solutions is the best for this purpose?
A VPN establishes an encrypted tunnel over the Internet (or other untrusted networks), securely linking two separate corporate networks so they can communicate as if on a private network.
A software engineering manager wants to scan the code for security vulnerabilities before it is pushed into production. Which of the following types of analysis should the manager select?
Answer(s): A
Static analysis inspects source code at rest, prior to execution, to identify security vulnerabilities, coding errors, and insecure patterns before the software is deployed.
A security team purchases a tool for cloud security posture management. The team is quickly overwhelmed by the number of misconfigurations the tool detects. Which of the following should the security team configure to establish secure baselines for cloud resource usage?
Answer(s): C
Guardrails define and enforce organization-specific policies and secure configuration baselines in cloud environments, automatically detecting and preventing deviations from approved settings.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.