Question 531 · 607 in bank
A program manager wants to ensure contract employees can only access the company's computers Monday through Friday from 9 a m. to 5 p.m. Which of the following would best enforce this access control?
Show answer
Answer: A
CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
A program manager wants to ensure contract employees can only access the company's computers Monday through Friday from 9 a m. to 5 p.m. Which of the following would best enforce this access control?
Answer: A
An organization that handles sensitive information wants to protect the information by using a reversible technology. Which of the following best satisfies this requirement?
Answer: C
After a series of account compromises and credential misuse, a company hires a security manager to develop a security program. Which of the following steps should the security manager take first to increase security awareness?
Answer: A
I would say A here The first step in increasing security awareness is to identify the root causes of security issues, such as poor password hygiene, phishing susceptibility, or risky user behavior. Evaluating tools that monitor user behavior (e.g., login anomalies, credential reuse, and failed authentication attempts) helps the security manager understand where the biggest risks exist. Distributing reports on these findings provides data-driven insights to employees and management, making security awareness efforts more impactful. Why Not the Other Options? B - Newsletters provide passive awareness, but they do not actively identify or address specific risky behaviors. C - Phishing simulations are useful but focus only on phishing risks. A broader risk assessment is needed first. D - Policies are necessary, but updating documents alone does not actively increase awareness or change behavior.
Source: Adapted from community discussion — test_arrow
A security practitioner completes a vulnerability assessment on a company’s network and finds several vulnerabilities, which the operations team remediates. Which of the following should be done next?
Answer: C
Rescanning the network is essential to verify that the previously identified vulnerabilities have been successfully remediated and to ensure that no new vulnerabilities have been introduced. This step confirms the effectiveness of the remediation efforts before moving on to further actions such as audits, penetration tests, or reporting.
Source: Adapted from community discussion — SHADTECH123
Which of the following scenarios describes a possible business email compromise attack?
Answer: C
C. In a BEC attack, the attacker typically impersonates a high-ranking executive or authority figure within the organization and requests sensitive information or actions from employees. In this case, the HR director is requesting log-in credentials for a cloud administrator account, which is a classic example of BEC where the attacker seeks to gain access to privileged accounts through deception.
Source: Adapted from community discussion — lauren2wright
An administrator was notified that a user logged in remotely after hours and copied large amounts of data to a personal device. Which of the following best describes the user’s activity?
Answer: D
D. Insider Threat An insider threat is the potential for an insider to use their authorized access or understanding of an organization to harm that organization.
Source: Adapted from community discussion — Dlove
Which of the following allows for the attribution of messages to individuals?
Answer: B
Message attribute associated with a person!!!!! its verifying that a specific individual sent the message! this is non-repudiation !! Ez lemon squeezy
Source: Adapted from community discussion — uday1985
Which of the following is the best way to consistently determine on a daily basis whether security settings on servers have been modified?
Answer: A
Automation involves using tools and scripts to regularly check and report on the security settings of servers. This method ensures consistent, real-time monitoring and can quickly detect any unauthorized changes. It is more reliable and efficient compared to manual methods, compliance checklists, or periodic attestations, which may not capture changes as promptly or consistently.
Source: Adapted from community discussion — SHADTECH123
Which of the following tools can assist with detecting an employee who has accidentally emailed a file containing a customer’s PII?
Answer: D
Data Loss Prevention (DLP) solutions monitor, detect, and block sensitive data from being sent outside an organization through email, file transfers, and other communication methods. DLP can be configured to detect specific data patterns, such as social security numbers, credit card information, or other forms of PII. As it pertains to this Scenario Application: -Accidental Data Leakage: If an employee accidentally emails a file containing PII, a DLP tool can automatically detect this based on pre-configured rules and patterns that identify sensitive data. -Policy Enforcement: DLP can enforce security policies by alerting administrators or blocking the email from being sent if it contains PII, thereby preventing data breaches. DLP tools are designed to handle situations like accidental data leakage, making them the most suitable choice for detecting and preventing unauthorized transmission of PII.
Source: Adapted from community discussion — dbrowndiver
An organization recently updated its security policy to include the following statement: Regular expressions are included in source code to remove special characters such as $, |, ;. &, `, and ? from variables set by forms in a web application. Which of the following best explains the security technique the organization adopted by making this addition to the policy?
Answer: C
Input validation is the process of analyzing inputs and disallowing those which are considered unsuitable. Ie: Only allowing accepted inputs based on specific criteria
Source: Adapted from community discussion — 123456789User
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 531. 607 questions available.
Version 1.0.0. How we source questions