SY0-701 Exam Dumps | During a routine audit, an analyst discovers that a department uses software that was not vetted. Which

<< Prev Question

Question 348/348

During a routine audit, an analyst discovers that a department uses software that was not vetted. Which threat is this?

A. Espionage

B. Data exfiltration

C. Shadow IT

D. Zero-day

Question List (348q): Question 1: A systems administrator discovers a system that is no longer...; Question 2: An employee fell for a phishing scam, which allowed an attac...; Question 3: A U.S.-based cloud-hosting provider wants to expand its data...; Question 4: An administrator notices that several users are logging in f...; Question 5: Which of the following explains why an attacker cannot easil...; Question 6: A security analyst is evaluating a SaaS application that the...; Question 7: A security engineer would like to enhance the use of automat...; Question 8: A security analyst discovers that a large number of employee...; Question 9: An accountant is transferring information to a bank over FTP...; Question 10: Which of the following should be used to prevent changes to ...; Question 11: Sine a recent upgrade (o a WLAN infrastructure, several mobi...; Question 12: Which of the following solutions would most likely be used i...; Question 13: A security audit of an organization revealed that most of th...; Question 14: A company has yearly engagements with a service provider. Th...; Question 15: Which of the following is the best way to validate the integ...; Question 16: Which of the following tools is best for logging and monitor...; Question 17: Which of the following describes a security alerting and mon...; Question 18: A company wants to track modifications to the code used to b...; Question 19: Which of the following best practices gives administrators a...; Question 20: A company evaluates several options that would allow employe...; Question 21: Which of the following actions must an organization take to ...; Question 22: A security consultant needs secure, remote access to a clien...; Question 23: During an investigation, a security analyst discovers traffi...; Question 24: Which of the following activities is included in the post-in...; Question 25: Which of the following must be considered when designing a h...; Question 26: After multiple phishing simulations, the Chief Security Offi...; Question 27: A vendor needs to remotely and securely transfer files from ...; Question 28: A company is concerned about the theft of client data from d...; Question 29: A security analyst scans a company's public network and disc...; Question 30: A company wants to improve the availability of its applicati...; Question 31: A security analyst is reviewing logs and discovers the follo...; Question 32: A company is concerned with supply chain compromise of new s...; Question 33: Which of the following activities should a systems administr...; Question 34: The security operations center is researching an event conce...; Question 35: An organization is implementing a COPE mobile device managem...; Question 36: An organization disabled unneeded services and placed a fire...; Question 37: Which of the following data types relates to data sovereignt...; Question 38: An employee emailed a new systems administrator a malicious ...; Question 39: An organization is leveraging a VPN between its headquarters...; Question 40: A bank set up a new server that contains customers' Pll. Whi...; Question 41: Which of the following would be the best way to block unknow...; Question 42: A company plans to secure its systems by: Preventing users f...; Question 43: Which of the following agreements defines response time, esc...; Question 44: A systems administrator creates a script that validates OS v...; Question 45: Which of the following is the most likely outcome if a large...; Question 46: An organization is struggling with scaling issues on its VPN...; Question 47: Which of the following should be deployed on an externally f...; Question 48: A cybersecurity incident response team at a large company re...; Question 49: Which of the following teams combines both offensive and def...; Question 50: A company is adding a clause to its AUP that states employee...; Question 51: A security administrator receives multiple reports about the...; Question 52: Which of the following describes the category of data that i...; Question 53: A recent black-box penetration test of http://example.com di...; Question 54: A network engineer is increasing the overall security of net...; Question 55: Executives at a company are concerned about employees access...; Question 56: Which of the following is used to add extra complexity befor...; Question 57: An accounting employee recently used software that was not a...; Question 58: Which of the following risk management strategies should an ...; Question 59: An organization is evaluating new regulatory requirements as...; Question 60: A company is aware of a given security risk related to a spe...; Question 61: An organization has a new regulatory requirement to implemen...; Question 62: An administrator is estimating the cost associated with an a...; Question 63: Which of the following has been implemented when a host-base...; Question 64: An administrator wants to perform a risk assessment without ...; Question 65: A systems administrator is creating a script that would save...; Question 66: A store is setting up wireless access for their employees. M...; Question 67: Which of the following is prevented by proper data sanitizat...; Question 68: A security team purchases a tool for cloud security posture ...; Question 69: A Chief Information Security Officer (CISO) has developed in...; Question 70: Which of the following should a technician perform to verify...; Question 71: A business is expanding to a new country and must protect cu...; Question 72: During a SQL update of a database, a temporary field used as...; Question 73: Which of the following data recovery strategies will result ...; Question 74: A user needs to complete training at https://comptiatraining...; Question 75: A security analyst receives alerts about an internal system ...; Question 76: Which of the following strategies should an organization use...; Question 77: An organization's web servers host an online ordering system...; Question 78: An attorney prints confidential documents to a copier in an ...; Question 79: Employees in the research and development business unit rece...; Question 80: Which of the following is the best way to prevent data from ...; Question 81: While a user reviews their email, a host gets infected by ma...; Question 82: Which of the following objectives is best achieved by a tabl...; Question 83: Which of the following should a systems administrator use to...; Question 84: A security report shows that during a two-week test period. ...; Question 85: A security analyst is examining a penetration test report an...; Question 86: A security analyst reviews domain activity logs and notices ...; Question 87: Which of the following would enable a data center to remain ...; Question 88: Which of the following would be best suited for constantly c...; Question 89: Which of the following cryptographic methods is preferred fo...; Question 90: Which of the following actors attacking an organization is t...; Question 91: Which of the following should an internal auditor check for ...; Question 92: In which of the following will unencrypted PLC management tr...; Question 93: Which of the following practices would be best to prevent an...; Question 94: Which of the following is an example of memory injection?...; Question 95: A malicious insider from the marketing team alters records a...; Question 96: During an investigation, an incident response team attempts ...; Question 97: Which of the following alert types is the most likely to be ...; Question 98: A network administrator wants to ensure that network traffic...; Question 99: During a recent company safety stand-down, the cyber-awarene...; Question 100: The Chief Information Security Officer wants to put security...; Question 101: A store is setting up wireless access for employees. Managem...; Question 102: An IT team rolls out a new management application that uses ...; Question 103: A database administrator is updating the company's SQL datab...; Question 104: Several employees received a fraudulent text message from so...; Question 105: Which of the following would a systems administrator follow ...; Question 106: A company implemented an MDM policy 10 mitigate risks after ...; Question 107: A company's legal department drafted sensitive documents in ...; Question 108: An organization wants to limit potential impact to its log-i...; Question 109: A systems administrator notices that the research and develo...; Question 110: Visitors to a secured facility are required to check in with...; Question 111: An organization issued new laptops to all employees and want...; Question 112: Which of the following vulnerabilities is associated with in...; Question 113: An organization recently started hosting a new service that ...; Question 114: A cyber operations team informs a security analyst about a n...; Question 115: Which of the following is the best method to reduce the atta...; Question 116: After a security incident, a systems administrator asks the ...; Question 117: Which of the following security measures is required when us...; Question 118: Various stakeholders are meeting to discuss their hypothetic...; Question 119: Which of the following best describe the benefits of a micro...; Question 120: A security engineer at a large company needs to enhance IAM ...; Question 121: Which of the following can assist in recovering data if the ...; Question 122: A security officer observes that a software development team...; Question 123: Which of the following data protection strategies can be use...; Question 124: The private key for a website was stolen, and a new certific...; Question 125: A systems administrator needs to encrypt all data on employe...; Question 126: A systems administrator set up a perimeter firewall but cont...; Question 127: A company is concerned about weather events causing damage t...; Question 128: A recent penetration test identified that an attacker could ...; Question 129: Which of the following is the best reason to complete an aud...; Question 130: A company's accounting department receives an urgent payment...; Question 131: An administrator is Investigating an incident and discovers ...; Question 132: Which of the following is a reason environmental variables a...; Question 133: A growing company would like to enhance the ability of its s...; Question 134: A malicious update was distributed to a common software plat...; Question 135: Two companies are in the process of merging. The companies n...; Question 136: Malware spread across a company's network after an employee ...; Question 137: A client demands at least 99.99% uptime from a service provi...; Question 138: A security manager wants to reduce the number of steps requi...; Question 139: Which of the following types of identification methods can b...; Question 140: Which of the following is a benefit of an RTO when conductin...; Question 141: A data administrator is configuring authentication for a Saa...; Question 142: An IT administrator needs to ensure data retention standards...; Question 143: Which of the following should an organization use to protect...; Question 144: While a school district is performing state testing, a secur...; Question 145: Which of the following can best protect against an employee ...; Question 146: Which of the following prevents unauthorized modifications t...; Question 147: Which of the following should a systems administrator use to...; Question 148: Which of the following scenarios describes a possible busine...; Question 149: An administrator needs to perform server hardening before de...; Question 150: Which of the following should a security analyst consider wh...; Question 151: Which of the following is an algorithm performed to verify t...; Question 152: A company is required to use certified hardware when buildin...; Question 153: A security analyst receives an alert that there was an attem...; Question 154: An employee clicked a malicious link in an email and downloa...; Question 155: Which of the following is the final step of the modem respon...; Question 156: A systems administrator is auditing all company servers to e...; Question 157: An important patch for a critical application has just been ...; Question 158: Which of the following consequences would a retail chain mos...; Question 159: A company recently decided to allow employees to work remote...; Question 160: A security manager created new documentation to use in respo...; Question 161: After failing an audit twice, an organization has been order...; Question 162: A company's web filter is configured to scan the URL for str...; Question 163: A company needs to determine whether authentication weakness...; Question 164: The Chief Information Security Officer wants to discuss opti...; Question 165: The physical security team at a company receives reports tha...; Question 166: An organization wants to improve the company's security auth...; Question 167: Which of the following metrics impacts the backup schedule a...; Question 168: The internal audit team determines a software application is...; Question 169: Which of the following is a qualitative approach to risk ana...; Question 170: Which of the following would be the best way to test resilie...; Question 171: An organization designs an inbound firewall with a fail-open...; Question 172: A Chief Security Officer signs off on a request to allow inb...; Question 173: An attacker used XSS to compromise a web server. Which of th...; Question 174: Client files can only be accessed by employees who need to k...; Question 175: A company discovers suspicious transactions that were entere...; Question 176: A security analyst reviews web server logs and sees the foll...; Question 177: A technician wants to improve the situational and environmen...; Question 178: Which of the following would be the best ways to ensure only...; Question 179: An administrator implements web-filtering products but still...; Question 180: A company wants to track modifications to the code that is u...; Question 181: Security controls in a data center are being reviewed to ens...; Question 182: A systems administrator notices that one of the systems crit...; Question 183: Which of the following automation use cases would best enhan...; Question 184: The help desk receives multiple calls that machines with an ...; Question 185: An administrator at a small business notices an increase in ...; Question 186: The Chief Information Security Officer of an organization ne...; Question 187: Which of the following activities should be performed first ...; Question 188: Which of the following should be used to select a label for ...; Question 189: Which of the following organizational documents is most ofte...; Question 190: A company that has a large IT operation is looking to better...; Question 191: An analyst identifies that multiple users have the same pass...; Question 192: A service provider wants a cost-effective way to rapidly exp...; Question 193: A company wants to protect a specialized legacy platform tha...; Question 194: A security consultant is working with a client that wants to...; Question 195: A systems administrator is concerned users are accessing ema...; Question 196: A network manager wants to protect the company's VPN by impl...; Question 197: Employees sign an agreement that restricts specific activiti...; Question 198: A security analyst must prevent remote users from accessing ...; Question 199: Which of the following is the most likely to be used to docu...; Question 200: A penetration test has demonstrated that domain administrato...; Question 201: After a security awareness training session, a user called t...; Question 202: A new employee can select a particular make and model of an ...; Question 203: A security analyst developed a script to automate a trivial ...; Question 204: A security team receives reports about high latency and comp...; Question 205: An MSSP manages firewalls for hundreds of clients. Which of ...; Question 206: Company A jointly develops a product with Company B, which i...; Question 207: A customer has a contract with a CSP and wants to identify w...; Question 208: A newly appointed board member with cybersecurity knowledge ...; Question 209: A systems administrator receives a text message from an unkn...; Question 210: Which of the following actions best addresses a vulnerabilit...; Question 211: Which of the following control types involves restricting IP...; Question 212: Which of the following must be considered when designing a h...; Question 213: Various company stakeholders meet to discuss roles and respo...; Question 214: Which of the following strategies most effectively protects ...; Question 215: The analyst wants to move data from production to the UAT se...; Question 216: Which of the following security controls are a company imple...; Question 217: A user downloads a patch from an unknown repository... FIM a...; Question 218: A systems administrator receives an alert that a company's i...; Question 219: A company is implementing a policy to allow employees to use...; Question 220: A business needs a recovery site but does not require immedi...; Question 221: An administrator assists the legal and compliance team with ...; Question 222: An employee from the accounting department logs in to the we...; Question 223: Which of the following examples would be best mitigated by i...; Question 224: The number of tickets the help desk has been receiving has i...; Question 225: Which of the following activities is the first stage in the ...; Question 226: Which of the following steps in the risk management process ...; Question 227: Which of the following security controls is a company implem...; Question 228: Users at a company are reporting they are unable to access t...; Question 229: Prior to implementing a design change, the change must go th...; Question 230: Which of the following can be used to compromise a system th...; Question 231: Which of the following is a preventive physical security con...; Question 232: An analyst discovers a suspicious item in the SQL server log...; Question 233: A company is considering an expansion of access controls for...; Question 234: A government official receives a blank envelope containing p...; Question 235: Which of the following security concepts is the best reason ...; Question 236: Which of the following is a type of vulnerability that may r...; Question 237: Employees located off-site must have access to company resou...; Question 238: Which of the following best describes the practice of resear...; Question 239: Which of the following is the best way to securely store an ...; Question 240: A security administrator is deploying a DLP solution to prev...; Question 241: An attacker posing as the Chief Executive Officer calls an e...; Question 242: A company requires hard drives to be securely wiped before s...; Question 243: A company expects its provider to ensure servers and network...; Question 244: A company installed cameras and added signs to alert visitor...; Question 245: Which of the following is the act of proving to a customer t...; Question 246: Which of the following is the most effective way to protect ...; Question 247: While reviewing a recent compromise, a forensics team discov...; Question 248: Which of the following is a reason why a forensic specialist...; Question 249: A security analyst is assessing several company firewalls. W...; Question 250: An organization is adopting cloud services at a rapid pace a...; Question 251: An administrator has identified and fingerprinted specific f...; Question 252: An organization recently updated its security policy to incl...; Question 253: A security analyst and the management team are reviewing the...; Question 254: Which of the following describes an executive team that is m...; Question 255: A company is using a legacy FTP server to transfer financial...; Question 256: At the start of a penetration test, the tester checks OSINT ...; Question 257: An administrator has configured a quarantine subnet for all ...; Question 258: A company receives an alert that a widely used network devic...; Question 259: Which of the following allows for the attribution of message...; Question 260: Which of the following considerations is the most important ...; Question 261: A company wants to verify that the software the company is d...; Question 262: A healthcare organization wants to provide a web application...; Question 263: Which of the following is the best reason to perform a table...; Question 264: Which of the following is the best way to consistently deter...; Question 265: Which of the following receives logs from various devices an...; Question 266: Which of the following best represents an application that d...; Question 267: Which of the following best describes the concept of informa...; Question 268: A security analyst is investigating an application server an...; Question 269: In a rush to meet an end-of-year business goal, the IT depar...; Question 270: Which of the following can be used to identify potential att...; Question 271: A company identified the potential for malicious insiders to...; Question 272: A systems administrator is redesigning now devices will perf...; Question 273: A newly identified network access vulnerability has been fou...; Question 274: Which of the following can be used to mitigate attacks from ...; Question 275: Which of the following is a type of vulnerability that invol...; Question 276: Which of the following is the best safeguard to protect agai...; Question 277: Which of the following would be the best way to handle a cri...; Question 278: A security engineer needs to quickly identify a signature fr...; Question 279: While reviewing logs, a security administrator identifies th...; Question 280: Which of the following incident response activities ensures ...; Question 281: Which of the following outlines the configuration, maintenan...; Question 282: An organization has issues with deleted network share data a...; Question 283: Which of the following security controls would best guard a ...; Question 284: A technician is opening ports on a firewall for a new system...; Question 285: During a penetration test, a vendor attempts to enter an una...; Question 286: An organization experiences a cybersecurity incident involvi...; Question 287: An administrator is installing an SSL certificate on a new s...; Question 288: Which of the following is used to protect a computer from vi...; Question 289: An engineer needs to ensure that a script has not been modif...; Question 290: Which of the following allows an exploit to go undetected by...; Question 291: Which of the following roles, according to the shared respon...; Question 292: A company is expanding its threat surface program and allowi...; Question 293: A company is in the process of migrating to cloud-based serv...; Question 294: A security analyst finds a rogue device during a monthly aud...; Question 295: Which of the following describes effective change management...; Question 296: Which of the following best describes why me SMS DIP authent...; Question 297: An organization implemented cloud-managed IP cameras to moni...; Question 298: After reviewing the following vulnerability scanning report:...; Question 299: Which of the following digital forensics activities would a ...; Question 300: Which of the following is the main consideration when a lega...; Question 301: Which of the following hardening techniques must be applied ...; Question 302: Which of the following describes the difference between encr...; Question 303: A systems administrator is working on a solution with the fo...; Question 304: Which of the following is used to validate a certificate whe...; Question 305: A security manager is implementing MFA and patch management....; Question 306: A company's online shopping website became unusable shortly ...; Question 307: An IT security team is concerned about the confidentiality o...; Question 308: An administrator is reviewing a single server's security log...; Question 309: A security administrator is reissuing a former employee's la...; Question 310: Which of the following activities uses OSINT?...; Question 311: A security analyst needs to propose a remediation plan 'or e...; Question 312: An organization's internet-facing website was compromised wh...; Question 313: A systems administrator needs to ensure the secure communica...; Question 314: Which of the following can a security director use to priori...; Question 315: Which of the following is a hardware-specific vulnerability?...; Question 316: An employee receives a text message that appears to have bee...; Question 317: A systems administrator needs to provide traveling employees...; Question 318: Which of the following would best prepare a security team fo...; Question 319: Which of the following vulnerabilities is exploited when an ...; Question 320: Which of the following best protects sensitive data in trans...; Question 321: Which of the following would most likely prevent exploitatio...; Question 322: Which of the following should an organization focus on the m...; Question 323: Which of the following is a common data removal option for c...; Question 324: An employee in the accounting department receives an email c...; Question 325: A company discovered its data was advertised for sale on the...; Question 326: Which of the following phases of an incident response involv...; Question 327: The management team reports employees are missing features o...; Question 328: A forensic engineer determines that the root cause of a comp...; Question 329: A security team installs an IPS on an organization's network...; Question 330: A company wants to reduce the time and expense associated wi...; Question 331: A financial institution would like to store its customer dat...; Question 332: Which of the following is the most likely benefit of conduct...; Question 333: A company's accounts payable clerk receives a message from a...; Question 334: A security analyst wants to automate a task that shares data...; Question 335: Which security controls is a company implementing by deployi...; Question 336: A company is implementing a vendor's security tool in the cl...; Question 337: Which of the following is the best way to improve the confid...; Question 338: A company is utilizing an offshore team to help support the ...; Question 339: A security officer is implementing a security awareness prog...; Question 340: An alert references attacks associated with a zero-day explo...; Question 341: The local administrator account for a company's VPN applianc...; Question 342: Which of the following is the phase in the incident response...; Question 343: A site reliability engineer is designing a recovery strategy...; Question 344: A spoofed identity was detected for a digital certificate. W...; Question 345: A company wants to update its disaster recovery plan to incl...; Question 346: A security administrator observed the following in a web ser...; Question 347: Which of the following methods to secure credit card data is...; Question 348: During a routine audit, an analyst discovers that a departme...

Question 348/348

LEAVE A REPLY

Download PDF File