Question 301 · 607 in bank
Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?
Show answer
Answer: A
CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?
Answer: A
Which of the following provides the best protection against unwanted or insecure communications to and from a device?
Answer: B
A host-based firewall is designed to control inbound and outbound traffic to and from a device (such as a computer or server). It provides a barrier by filtering network traffic based on a set of predefined security rules, effectively blocking unwanted or insecure communications. It can prevent malicious network traffic from reaching the device, which helps protect it from various network-based attacks
Source: Adapted from community discussion — Fourgehan
Which of the following is the primary purpose of a service that tracks log-ins and time spent using the service?
Answer: B
An employee who was working remotely lost a mobile device containing company data. Which of the following provides the best solution to prevent future data loss?
Answer: A
Mobile Device Management (MDM) is a solution specifically designed to manage, monitor, and secure mobile devices, such as smartphones and tablets, that access company data. MDM allows administrators to enforce security policies on these devices, such as requiring encryption, enforcing password requirements, and remotely wiping devices in the event of loss or theft. This would be the best solution to prevent future data loss in a scenario where an employee loses a mobile device containing sensitive company data
Source: Adapted from community discussion — Fourgehan
An IT administrator needs to ensure data retention standards are implemented on an enterprise application. Which of the following describes the administrator’s role?
Answer: B
The role of a custodian involves managing and maintaining data on behalf of the data owner. The custodian is responsible for implementing the policies and procedures related to data retention, ensuring that data is stored, archived, or disposed of according to organizational and regulatory standards.
Source: Adapted from community discussion — chasingsummer
A company plans to secure its systems by: • Preventing users from sending sensitive data over corporate email • Restricting access to potentially harmful websites Which of the following features should the company set up? (Choose two.)
Answer: AB
A company processes and stores sensitive data on its own systems. Which of the following steps should the company take first to ensure compliance with privacy regulations?
Answer: A
The correct answer is: A. Implement access controls and encryption. Explanation: To ensure compliance with privacy regulations, the first step the company should take is to implement access controls and encryption. These are fundamental security measures to protect sensitive data: Access controls ensure that only authorized individuals can access sensitive data, thereby minimizing the risk of unauthorized access. Encryption protects data both at rest and in transit, ensuring that even if data is intercepted or accessed without permission, it cannot be read or used. Privacy regulations like GDPR, HIPAA, and others often have strict requirements about how sensitive data must be protected, and implementing access controls and encryption is a core component of those requirements.
Source: Adapted from community discussion — jbmac
A systems administrator receives the following alert from a file integrity monitoring tool: The hash of the cmd.exe file has changed. The systems administrator checks the OS logs and notices that no patches were applied in the last two months. Which of the following most likely occurred?
Answer: D
D. A rootkit was deployed. A change in the hash of a critical system file like cmd.exe, without any corresponding patches or updates being applied, is a strong indicator of potential malicious activity. A rootkit is a type of malware that can modify system files and hide its presence to maintain persistent and privileged access to a system. If a rootkit has altered cmd.exe, it could be an attempt to replace the legitimate command prompt with a malicious version, or to modify its behavior for nefarious purposes. This is a serious security concern and should be investigated immediately.
Source: Adapted from community discussion — Penguin1730
Which of the following cryptographic methods is preferred for securing communications with limited computing resources?
Answer: C
From Study Guide: The drawback of asymmetric encryption is that it involves substantial computing overhead compared to symmetric encryption. Where a large amount of data is being encrypted on disk or transported over a network, asymmetric encryption is inefficient. Rather than being used to encrypt the bulk data directly, the public key cipher can be used to encrypt a symmetric secret key. The Elliptic Curve Cryptography (ECC) asymmetric cipher can use 256-bit private keys to achieve a level of security equivalent to a 3,072-bit RSA key. I think the technical correct answer is D, but exam correct answer is C.
Source: Adapted from community discussion — chasingsummer
A network administrator wants to ensure that network traffic is highly secure while in transit. Which of the following actions best describes the actions the network administrator should take?
Answer: B
To ensure that network traffic is highly secure while in transit, the primary focus should be on encrypting the communication channels. By selecting TLS (Transport Layer Security) and other encrypted protocols, you ensure that the data traveling across the network is protected from eavesdropping and tampering. This protects sensitive information even if an attacker intercepts the traffic
Source: Adapted from community discussion — Fourgehan
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 301. 607 questions available.
Version 1.0.0. How we source questions