Question 521 · 607 in bank
A systems administrator needs to encrypt all data on employee laptops. Which of the following encryption levels should be implemented?
Show answer
Answer: C
CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
A systems administrator needs to encrypt all data on employee laptops. Which of the following encryption levels should be implemented?
Answer: C
Which of the following actions best addresses a vulnerability found on a company's web server?
Answer: A
A company is changing its mobile device policy. The company has the following requirements: • Company-owned devices • Ability to harden the devices • Reduced security risk • Compatibility with company resources Which of the following would best meet these requirements?
Answer: D
D. COBO (Company-Owned, Business-Only) Explanation: COBO (Company-Owned, Business-Only) means the company fully owns and controls the devices, ensuring they can be hardened, secured, and optimized for business use. This reduces security risks and ensures full compatibility with company resources. COPE (Company-Owned, Personally Enabled) allows some personal use, which might introduce security risks, though it still offers good control. CYOD (Choose Your Own Device) lets employees select from a list of company-approved devices but may limit security enforcement. BYOD (Bring Your Own Device) allows employees to use personal devices, reducing company control and increasing security risks. Best Choice: COBO ensures maximum security and control, making it the best fit for the company's requirements.
Source: Adapted from community discussion — test_arrow
A company is concerned about employees unintentionally introducing malware into the network. The company identified fifty employees who clicked on a link embedded in an email sent by the internal IT department. Which of the following should the company implement to best improve its security posture?
Answer: A
A penetration test identifies that an SMBv1 is enabled on multiple servers across an organization. The organization wants to remediate this vulnerability in the most efficient way possible. Which of the following should the organization use for this purpose?
Answer: A
A. GPO (Group Policy Object) Explanation: SMBv1 (Server Message Block version 1) is an outdated and vulnerable protocol that is susceptible to attacks like EternalBlue, which was used in ransomware outbreaks like WannaCry. To remediate this issue efficiently across multiple servers, the best approach is to disable SMBv1 using Group Policy Objects (GPO). GPO allows administrators to enforce settings across all affected systems centrally, making it the fastest and most scalable solution.
Source: Adapted from community discussion — test_arrow
Which of the following best protects sensitive data in transit across a geographically dispersed infrastructure?
Answer: A
A. Encryption Explanation: Encryption is the process of converting data into a secure format that can only be read or decrypted by authorized parties. It protects data while it is in transit across the network, ensuring that sensitive information is not exposed even if intercepted. This is particularly important when dealing with geographically dispersed infrastructure where data might travel across various networks or regions.
Source: Adapted from community discussion — test_arrow
As part of new compliance audit requirements, multiple servers need to be segmented on different networks and should be reachable only from authorized internal systems. Which of the following would meet the requirements?
Answer: D
During an investigation, an incident response team attempts to understand the source of an incident. Which of the following incident response activities describes this process?
Answer: A
In the Analysis phase, the team examines logs, network traffic, artifacts, and other relevant data to determine: The root cause of the incident How the incident occurred The systems and data affected Indicators of Compromise (IOCs) Possible paths for remediation and prevention
Source: Adapted from community discussion — darpanne
Which of the following activities should be performed first to compile a list of vulnerabilities in an environment?
Answer: A
Which of the following can be used to mitigate attacks from high-risk regions?
Answer: C
IP geolocation is the technique used to determine the physical location of a device based on its IP address. This can be used to block or restrict access from high-risk regions by identifying the geographic origin of incoming traffic. By using IP geolocation, an organization can filter out or limit access from countries or regions known for high levels of malicious activity or unwanted traffic. Good Luck!!! <3
Source: Adapted from community discussion — Zbig34
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 521. 607 questions available.
Version 1.0.0. How we source questions