Which of the following is a social engineering attack in which a bad actor impersonates a web URL?
Answer(s): C
Typosquatting involves registering a look-alike domain (e.g., examplе.com instead of example.com) to trick users who mistype URLs into visiting a malicious site.
A company is in the process of cutting jobs to manage costs. The Chief Information Security Officer is concerned about the increased risk of an insider threat. Which of the following would most likely help the security awareness team address this potential threat?
Answer(s): B
Equipping supervisors to recognize signs of dissatisfaction and potential insider threats enables early intervention, addressing the human factors that awareness programs are designed to influence.
A security analyst is prioritizing vulnerability scan results using a risk-based approach. Which of the following is the most efficient resource for the analyst to use?
CVSS provides a standardized, numerical severity rating for each vulnerability, enabling an analyst to efficiently rank and prioritize scan findings based on objective risk metrics.
A penetration tester visits a client's website and downloads the site's content. Which of the following actions is the penetration tester performing?
Answer(s): D
Downloading publicly available website content without exploiting vulnerabilities or interacting with private systems is passive reconnaissance - collecting information from external sources without direct intrusion.
Which of the following actions must an organization take to comply with a person's request for the right to be forgotten?
The “right to be forgotten” (right of erasure) requires that organizations delete or permanently remove all personal data related to the individual from their systems and backups, not merely obfuscate or encrypt it.
Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SY0-701 content, but please register or login to continue.