An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the following firewall ACLs will accomplish this goal?

Correct Answer: Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53

Which of the following scenarios describes a possible business email compromise attack?

Correct Answer: A service desk employee receives an email from the HR director asking for log-in credentials to a cloud administrator account.

An administrator notices that several users are logging in from suspicious IP addresses. After speaking with the users, the administrator determines that the employees were not logging in from those IP addresses and resets the affected users’ passwords. Which of the following should the administrator implement to prevent this type of attack from succeeding in the future?

Correct Answer: Multifactor authentication

A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?

Correct Answer: A thorough analysis of the supply chain

Which of the following provides the details about the terms of a test with a third-party penetration tester?

Correct Answer: Rules of engagement

A security analyst is reviewing the following logs: Which of the following attacks is most likely occurring?

Correct Answer: Password spraying

During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization’s network. Which of the following fulfills this request?

Correct Answer: access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0

A company needs to provide administrative access to internal resources while minimizing the traffic allowed through the security boundary. Which of the following methods is most secure?

Correct Answer: Implementing a bastion host

Which of the following should a security administrator adhere to when setting up a new set of firewall rules?

Correct Answer: Change management procedure

Employees in the research and development business unit receive extensive training to ensure they understand how to best protect company data. Which of the following is the type of data these employees are most likely to use in day-to-day work activities?

Correct Answer: Intellectual property

A technician wants to improve the situational and environmental awareness of existing users as they transition from remote to in-office work. Which of the following is the best option?

Correct Answer: Modify the content of recurring training.

A systems administrator receives the following alert from a file integrity monitoring tool: The hash of the cmd.exe file has changed. The systems administrator checks the OS logs and notices that no patches were applied in the last two months. Which of the following most likely occurred?

Correct Answer: A rootkit was deployed.

A security team is reviewing the findings in a report that was delivered after a third party performed a penetration test. One of the findings indicated that a web application form field is vulnerable to cross-site scripting. Which of the following application security techniques should the security analyst recommend the developer implement to prevent this vulnerability?

Correct Answer: Input validation

A technician needs to apply a high-priority patch to a production system. Which of the following steps should be taken first?

Correct Answer: Create a change control request.

Which of the following describes the reason root cause analysis should be conducted as part of incident response?

Correct Answer: To prevent future incidents of the same nature

A company is developing a business continuity strategy and needs to determine how many staff members would be required to sustain the business in the case of a disruption. Which of the following best describes this step?

Correct Answer: Capacity planning

A company’s legal department drafted sensitive documents in a SaaS application and wants to ensure the documents cannot be accessed by individuals in high-risk countries. Which of the following is the most effective way to limit this access?

Correct Answer: Geolocation policy

Which of the following is a hardware-specific vulnerability?

Correct Answer: Firmware version

While troubleshooting a firewall configuration, a technician determines that a “deny any” policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes several company servers to become unreachable. Which of the following actions would prevent this issue?

Correct Answer: Testing the policy in a non-production environment before enabling the policy in the production network

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

CompTIA Security+ 2023

The world's most popular cybersecurity certification, updated for 2023 threats.

4.8★★★★★(325 ratings)

19,819 studentsIntermediate

Master the latest security trends, including cloud, mobile, and IoT security. This course prepares you to identify and mitigate cyber threats in a rapidly changing global landscape. Establish the foundational knowledge needed for any cybersecurity role. Validate your ability to implement security solutions and react to security incidents effectively.

What you'll learn

Attacks & Vulnerabilities
- Architecture & Design
- Security Implementation
- Operations & Incident Response
- Governance, Risk & Compliance

SY0-701

Lectures6

Quizzes0

Duration30 week

Students19,819

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!