SY0-701 Exam Dumps | A security team identifies a vulnerability in an application that the developers will not be able to

<< Prev Question Next Question >>

Question 125/407

A security team identifies a vulnerability in an application that the developers will not be able to patch for six months. Which of the following should the security team use to document this vulnerability?

A. Risk register

B. Patching schedule

C. Vulnerability matrix

D. Change management procedure

Question List (407q): Question 1: Which of the following is a vulnerability concern for end-of...; Question 2: After a recent ransomware attack on a company's system, an a...; Question 3: An employee receives a text message that appears to have bee...; Question 4: Which of the following is an example of memory injection?...; Question 5: The Chief Information Security Officer (CISO) has determined...; Question 6: Which of the following is best used to detect fraud by assig...; Question 7: Which of the following should be used to prevent changes to ...; Question 8: Which of the following data types best describes an AI tool ...; Question 9: A company plans to secure its systems by: Preventing users f...; Question 10: Which of the following agreements defines response time, esc...; Question 11: While a user reviews their email, a host gets infected by ma...; Question 12: A security analyst developed a script to automate a trivial ...; Question 13: Which of the following vulnerabilities is associated with in...; Question 14: A security analyst collects IOCs from a cybersecurity bullet...; Question 15: A security analyst is reviewing logs to identify the destina...; Question 16: An organization maintains intellectual property that it want...; Question 17: An organization conducts a self-evaluation with a phishing c...; Question 18: Visitors to a secured facility are required to check in with...; Question 19: Which of the following teams combines both offensive and def...; Question 20: A security engineer receives reports of unauthorized devices...; Question 21: Which of the following would be the best ways to ensure only...; Question 22: An IT security team is concerned about the confidentiality o...; Question 23: An administrator discovers a cross-site scripting vulnerabil...; Question 24: The security team notices that the Always On VPN solution so...; Question 25: Which of the following can be used to mitigate attacks from ...; Question 26: A legal department must maintain a backup from all devices t...; Question 27: Which of the following activities is included in the post-in...; Question 28: Which of the following describes how a risk event might affe...; Question 29: During an investigation, an incident response team attempts ...; Question 30: During a SQL update of a database, a temporary field used as...; Question 31: Which of the following should be used to aggregate log data ...; Question 32: Which of the following is a qualitative approach to risk ana...; Question 33: An organization wants a third-party vendor to do a penetrati...; Question 34: Which of the following is the most likely outcome if a large...; Question 35: Which of the following cryptographic solutions protects data...; Question 36: An enterprise is trying to limit outbound DNS traffic origin...; Question 37: An engineer has ensured that the switches are using the late...; Question 38: Which of the following is the stage in an investigation when...; Question 39: A penetration tester begins an engagement by performing port...; Question 40: For which of the following reasons would a systems administr...; Question 41: A security administrator is implementing encryption on all h...; Question 42: SIMULATION A recent black-box penetration test of http://exa...; Question 43: A company is considering an expansion of access controls for...; Question 44: An administrator must replace an expired SSL certificate. Wh...; Question 45: Which of the following roles, according to the shared respon...; Question 46: Which of the following prevents unauthorized modifications t...; Question 47: A security analyst is monitoring logs from the organization'...; Question 48: Which of the following best describes the concept of informa...; Question 49: A company relies on open-source software libraries to build ...; Question 50: A U.S.-based cloud-hosting provider wants to expand its data...; Question 51: A company's Chief Information Security Officer (CISO) wants ...; Question 52: Which of the following best practices gives administrators a...; Question 53: A company is considering an expansion of access controls for...; Question 54: Which of the following best describes a common use of OSINT?...; Question 55: An IT team rolls out a new management application that uses ...; Question 56: A financial institution would like to store its customer dat...; Question 57: Which of the following is an example of a certificate that i...; Question 58: A penetration tester must conduct a vulnerability assessment...; Question 59: A security administrator needs to protect the integrity of a...; Question 60: Which of the following threat actors is the most likely to u...; Question 61: An administrator wants to automate an account permissions up...; Question 62: Which of the following is a social engineering attack in whi...; Question 63: A security analyst discovers that a large number of employee...; Question 64: An analyst identifies that multiple users have the same pass...; Question 65: Which of the following is a prerequisite for a DLP solution?...; Question 66: A company asks a vendor to help its internal red team with a...; Question 67: A security analyst receives alerts about an internal system ...; Question 68: Which of the following is a common source of unintentional c...; Question 69: An attacker floods an organization's VoIP phone system with ...; Question 70: Which of the following would be best suited for constantly c...; Question 71: An administrator discovers that some files on a database ser...; Question 72: Which of the following security concepts is the best reason ...; Question 73: A security team receives reports about high latency and comp...; Question 74: A company is developing a critical system for the government...; Question 75: A company is in the process of migrating to cloud-based serv...; Question 76: An administrator must implement a solution that provides sec...; Question 77: Which of the following best distinguishes hacktivists from i...; Question 78: A security analyst must prevent remote users from accessing ...; Question 79: A security engineer configured a remote access VPN. The remo...; Question 80: A malicious insider from the marketing team alters records a...; Question 81: A Chief Security Officer signs off on a request to allow inb...; Question 82: Which of the following objectives is best achieved by a tabl...; Question 83: A security analyst is prioritizing vulnerability scan result...; Question 84: Which of the following risk management strategies should an ...; Question 85: A software developer released a new application and is distr...; Question 86: An analyst discovers a suspicious item in the SQL server log...; Question 87: A company is aware of a given security risk related to a spe...; Question 88: Which of the following aspects of the data management life c...; Question 89: A healthcare organization wants to provide a web application...; Question 90: A bank set up a new server that contains customers' Pll. Whi...; Question 91: An accounting clerk sent money to an attacker's bank account...; Question 92: An administrator has identified and fingerprinted specific f...; Question 93: Which of the following cryptographic methods is preferred fo...; Question 94: A new security regulation was announced that will take effec...; Question 95: Which of the following should be used to ensure an attacker ...; Question 96: A security analyst wants to better understand the behavior o...; Question 97: Various company stakeholders meet to discuss roles and respo...; Question 98: The Cruel Information Security Officer (CISO) asks a securit...; Question 99: A company decided to reduce the cost of its annual cyber ins...; Question 100: You are security administrator investigating a potential inf...; Question 101: A company uses multiple providers to send its marketing, int...; Question 102: A company discovers suspicious transactions that were entere...; Question 103: Which of the following best describes the practice of preser...; Question 104: A company needs to provide administrative access to internal...; Question 105: Which of the following could potentially be introduced at th...; Question 106: An organization wants to deploy software in a container envi...; Question 107: According to various privacy rules and regulations, users ha...; Question 108: Which of the following uses proprietary controls and is desi...; Question 109: After multiple phishing simul-ations, the Chief Security Off...; Question 110: A security administrator observed the following in a web ser...; Question 111: A security analyst finds a rogue device during a monthly aud...; Question 112: During a recent company safety stand-down, the cyber-awarene...; Question 113: Which of the following strategies most effectively protects ...; Question 114: A company processes a large volume of business-to-business t...; Question 115: A company's end users are reporting that they are unable to ...; Question 116: After multiple phishing simulations, the Chief Security Offi...; Question 117: A newly appointed board member with cybersecurity knowledge ...; Question 118: Which of the following are the most important considerations...; Question 119: A user downloads a patch from an unknown repository... FIM a...; Question 120: A systems administrator is working on a solution with the fo...; Question 121: Which of the following vulnerabilities is exploited when an ...; Question 122: A technician is opening ports on a firewall for a new system...; Question 123: The local administrator account for a company's VPN applianc...; Question 124: An administrator was notified that a user logged in remotely...; Question 125: A security team identifies a vulnerability in an application...; Question 126: An end-of-service server cannot be patched, but it still per...; Question 127: A company experiences a data loss event due to a stolen lapt...; Question 128: An organization is leveraging a VPN between its headquarters...; Question 129: A security analyst reviews domain activity logs and notices ...; Question 130: Which of the following describes effective change management...; Question 131: Which of the following is used to add extra complexity befor...; Question 132: An organization experiences a compromise in a cloud-hosted s...; Question 133: Which of the following metrics are used to calculate the ris...; Question 134: In order to strengthen a password and prevent a hacker from ...; Question 135: A company installed cameras and added signs to alert visitor...; Question 136: Which of the following is a risk of conducting a vulnerabili...; Question 137: A Chief Information Security Officer would like to conduct f...; Question 138: During a penetration test, a vendor attempts to enter an una...; Question 139: A security analyst locates a potentially malicious video fil...; Question 140: Which of the following methods to secure credit card data is...; Question 141: An unexpected and out-of-character email message from a Chie...; Question 142: Which of the following security concepts is being followed w...; Question 143: An organization is developing a security program that convey...; Question 144: Which of the following best explains a concern with OS-based...; Question 145: A security analyst learns that an attack vector, used as par...; Question 146: Which of the following is most likely to be used as a just-i...; Question 147: Which of the following is the best way to securely store an ...; Question 148: Which of the following is most likely associated with introd...; Question 149: Which of the following should an organization focus on the m...; Question 150: A security analyst and the management team are reviewing the...; Question 151: An administrator investigating an incident is concerned abou...; Question 152: Which of the following security control types does an accept...; Question 153: An employee used a company's billing system to issue fraudul...; Question 154: Which of the following is the best reason to complete an aud...; Question 155: During a security incident, the security operations team ide...; Question 156: A smart lighting system is deployed in an office building. T...; Question 157: Which of the following is die most important security concer...; Question 158: Which of the following must be considered when designing a h...; Question 159: Which of the following risk management strategies is being u...; Question 160: A security technician determines that no additional patches ...; Question 161: An organization failed to account for the right-to-be-forgot...; Question 162: Which of the following actions best addresses a vulnerabilit...; Question 163: Which of the following methods will most likely be used to i...; Question 164: An employee emailed a new systems administrator a malicious ...; Question 165: An administrator needs to perform server hardening before de...; Question 166: A systems administrator is redesigning now devices will perf...; Question 167: A penetration tester was able to gain unauthorized access to...; Question 168: Which of the following tools can assist with detecting an em...; Question 169: Which of the following provides the details about the terms ...; Question 170: Various company stakeholders meet to discuss roles and respo...; Question 171: The management team notices that new accounts that are set u...; Question 172: An organization experiences a suspected data breach that aff...; Question 173: During a routine audit, an analyst discovers that a departme...; Question 174: A security analyst finds a rogue device during a monthly aud...; Question 175: Which of the following is an example of a data protection st...; Question 176: Which of the following is a reason environmental variables a...; Question 177: Select the appropriate attack and remediation from each drop...; Question 178: A security administrator wants to determine if the company's...; Question 179: A user needs to complete training at https://comptiatraining...; Question 180: A security analyst learns that an attack vector, which was u...; Question 181: A systems administrator discovers a system that is no longer...; Question 182: A government official receives a blank envelope containing p...; Question 183: Which of the following explains how organizations benefit fr...; Question 184: The Cyber Incident Response Team is reviewing an incident th...; Question 185: Which of the following architecture models ensures that crit...; Question 186: A systems administrator receives an alert that a company's i...; Question 187: Which of the following should be used to ensure that a new s...; Question 188: A company performs risk analysis on its equipment and estima...; Question 189: A security company informs its customers of a new vulnerabil...; Question 190: Which of the following would a systems administrator follow ...; Question 191: A security analyst reviews logs and finds a large number of ...; Question 192: A company expects its provider to ensure servers and network...; Question 193: Which of the following best explains how tokenization helps ...; Question 194: Which of the following allows for the attribution of message...; Question 195: The private key for a website was stolen, and a new certific...; Question 196: An organization has a new regulatory requirement to implemen...; Question 197: Which of the following should an organization use to protect...; Question 198: A new employee can select a particular make and model of an ...; Question 199: An organization would like to store customer data on a separ...; Question 200: A website user is locked out of an account after clicking an...; Question 201: Which of the following can automate vulnerability management...; Question 202: Which of the following best explains why an organization wou...; Question 203: Which of the following most securely protects data at rest?...; Question 204: Which of the following describes the reason root cause analy...; Question 205: A security consultant is working with a client that wants to...; Question 206: Which of the following exercises should an organization use ...; Question 207: A vendor needs to remotely and securely transfer files from ...; Question 208: Which of the following examples would be best mitigated by i...; Question 209: Which of the following control types describes an alert from...; Question 210: After failing an audit twice, an organization has been order...; Question 211: An organization plans to increase security controls for devi...; Question 212: Which of the following activities should a systems administr...; Question 213: Which of the following is the final step of the modem respon...; Question 214: Which of the following Is a common, passive reconnaissance t...; Question 215: A security analyst is creating base for the server team to f...; Question 216: A company processes personal data from customers in multiple...; Question 217: Which of the following should a systems administrator use to...; Question 218: Which of the following is used to validate a certificate whe...; Question 219: Which of the following strategies should an organization use...; Question 220: A security analyst receives an alert from a web server that ...; Question 221: A security team is setting up a new environment for hosting ...; Question 222: One of a company's vendors sent an analyst a security bullet...; Question 223: Which of the following is the most relevant reason a DPO wou...; Question 224: A staff member finds a USB drive in the office's parking lot...; Question 225: A company has a website in a server cluster. One server is e...; Question 226: A penetration tester visits a client's website and downloads...; Question 227: Which of the following are the best security controls for co...; Question 228: Which of the following is best prevented by adding input val...; Question 229: A security manager is implementing MFA and patch management....; Question 230: A company wants to track modifications to the code that is u...; Question 231: A growing company would like to enhance the ability of its s...; Question 232: An organization is required to provide assurance that its co...; Question 233: An external security assessment report indicates a high clic...; Question 234: An organization's internet-facing website was compromised wh...; Question 235: A systems administrator notices that the research and develo...; Question 236: Which of the following provides the best protection against ...; Question 237: Which of the following would enable a data center to remain ...; Question 238: A security officer is implementing a security awareness prog...; Question 239: An employee fell for a phishing scam, which allowed an attac...; Question 240: The executive management team is mandating the company devel...; Question 241: Which of the following data recovery strategies will result ...; Question 242: An organization wants to limit potential impact to its log-i...; Question 243: Which of the following types of identification methods can b...; Question 244: Alerts from email protection systems and MSSPs must be enter...; Question 245: Which of the following would most likely be deployed to obta...; Question 246: Which of the following security controls is a company implem...; Question 247: An organization has been experiencing issues with deleted ne...; Question 248: Which of the following practices would be best to prevent an...; Question 249: A security analyst scans a company's public network and disc...; Question 250: Which of the following best describe why a process would req...; Question 251: An accountant is transferring information to a bank over FTP...; Question 252: In which of the following will unencrypted PLC management tr...; Question 253: After reviewing the following vulnerability scanning report:...; Question 254: An employee decides to collect PII data from the company's s...; Question 255: The Chief Information Officer (CIO) asked a vendor to provid...; Question 256: A security report shows that during a two-week test period. ...; Question 257: Which solution is most likely used in the financial industry...; Question 258: A company is concerned about the theft of client data from d...; Question 259: Which of the following should a technician perform to verify...; Question 260: Which of the following will harden access to a new database ...; Question 261: Which of the following is the act of proving to a customer t...; Question 262: A security analyst created a fake account and saved the pass...; Question 263: A security administrator protects passwords by using hashing...; Question 264: A company is utilizing an offshore team to help support the ...; Question 265: A company is discarding a classified storage array and hires...; Question 266: Which of the following architectures is most suitable to pro...; Question 267: A business needs a recovery site but does not require immedi...; Question 268: After a security awareness training session, a user called t...; Question 269: Which of the following threat actors would most likely defac...; Question 270: Which vulnerability is most likely mitigated by setting up a...; Question 271: As part of new compliance audit requirements, multiple serve...; Question 272: A security analyst has determined that a security breach wou...; Question 273: The security operations center is researching an event conce...; Question 274: An organization disabled unneeded services and placed a fire...; Question 275: Which of the following alert types is the most likely to be ...; Question 276: A company wants to reduce the time and expense associated wi...; Question 277: A penetration test has demonstrated that domain administrato...; Question 278: A marketing team launches a new AI solution that trains on s...; Question 279: Which of the following describes the understanding between a...; Question 280: A service provider wants a cost-effective way to rapidly exp...; Question 281: Which of the following best protects sensitive data in trans...; Question 282: A security practitioner completes a vulnerability assessment...; Question 283: Sine a recent upgrade (o a WLAN infrastructure, several mobi...; Question 284: The Chief Information Security Officer of an organization ne...; Question 285: An organization is building a new backup data center with co...; Question 286: An external vendor recently visited a company's headquarters...; Question 287: Following a security review, an organization must ensure use...; Question 288: A security engineer is working to address the growing risks ...; Question 289: A company is adding a clause to its AUP that states employee...; Question 290: A systems administrator is looking for a low-cost applicatio...; Question 291: An important patch for a critical application has just been ...; Question 292: The Chief Information Security Officer (CISO) of a medium-si...; Question 293: Which of the following describes a situation where a user is...; Question 294: An administrator finds that all user workstations and server...; Question 295: Which of the following is an example of implementing Zero Tr...; Question 296: A customer of a large company receives a phone call from som...; Question 297: Which of the following should be used to ensure a device is ...; Question 298: Which of the following must be considered when designing a h...; Question 299: A company is concerned about weather events causing damage t...; Question 300: A recent penetration test identified that an attacker could ...; Question 301: An organization experiences a cybersecurity incident involvi...; Question 302: A security engineer needs to quickly identify a signature fr...; Question 303: Which of the following types of vulnerabilities involves att...; Question 304: A security analyst notices an increase in port scans on the ...; Question 305: Which of the following is the most likely motivation for a h...; Question 306: The management team reports employees are missing features o...; Question 307: A security analyst investigates abnormal outbound traffic fr...; Question 308: A cybersecurity incident response team at a large company re...; Question 309: A company wants to track modifications to the code used to b...; Question 310: An analyst wants to move data from production to the UAT ser...; Question 311: A network manager wants to protect the company's VPN by impl...; Question 312: An administrator is reviewing a single server's security log...; Question 313: Which of the following methods would most likely be used to ...; Question 314: A systems administrator set up a perimeter firewall but cont...; Question 315: Which of the following best explains the role of compensatin...; Question 316: A company purchased cyber insurance to address items listed ...; Question 317: A software developer wishes to implement an application secu...; Question 318: An enterprise security team is researching a new security ar...; Question 319: Which of the following is the best method to reduce the atta...; Question 320: Which of the following practices would be best to prevent an...; Question 321: An organization determines that tenured employees have retai...; Question 322: While reviewing logs, a security administrator identifies th...; Question 323: Which of the following most accurately describes the order i...; Question 324: Which of the following would be the greatest concern for a c...; Question 325: During a recent log review, an analyst found evidence of suc...; Question 326: A manufacturing organization receives the results from a pen...; Question 327: Malware spread across a company's network after an employee ...; Question 328: Which of the following should a security analyst consider wh...; Question 329: A newly identified network access vulnerability has been fou...; Question 330: During a routine audit, an analyst discovers that a departme...; Question 331: A security administrator wants to implement a security infor...; Question 332: Which of the following elements of digital forensics should ...; Question 333: Which of the following is used to protect a computer from vi...; Question 334: Which of the following is an example of memory injection?...; Question 335: An engineer needs to ensure that a script has not been modif...; Question 336: Which of the following can be used to compromise a system th...; Question 337: Which of the following allows an exploit to go undetected by...; Question 338: A software developer would like to ensure. The source code c...; Question 339: Which of the following best explains how open service ports ...; Question 340: A business provides long-term cold storage services to banks...; Question 341: Which of the following involves an attempt to take advantage...; Question 342: Which of the following is the main consideration when a lega...; Question 343: Which of the following is the first step to take when creati...; Question 344: A company decided to reduce the cost of its annual cyber ins...; Question 345: Users at a company are reporting they are unable to access t...; Question 346: Which of the following tools is best for logging and monitor...; Question 347: An engineer needs to find a solution that creates an added l...; Question 348: A security administrator needs to reduce the attack surface ...; Question 349: Which of the following phases of an incident response involv...; Question 350: Which of the following is a reason an organization should us...; Question 351: A company wants to use new Wi-Fi-enabled environmental senso...; Question 352: A network engineer is increasing the overall security of net...; Question 353: Which of the following best explains a core principle of a Z...; Question 354: Which of the following hardening techniques must be applied ...; Question 355: In an effort to reduce costs, a company is implementing a st...; Question 356: An organization issued new laptops to all employees and want...; Question 357: An organization needs to monitor its users' activities to pr...; Question 358: During a penetration test in a hypervisor, the security engi...; Question 359: A company deploys a new server that a client must be able to...; Question 360: A bank insists all of its vendors must prevent data loss on ...; Question 361: An employee clicked a malicious link in an email and downloa...; Question 362: The Chief Information Security Officer wants to discuss opti...; Question 363: After creating a contract for IT contractors, the human reso...; Question 364: A company is redesigning its infrastructure and wants to red...; Question 365: An administrator has configured a quarantine subnet for all ...; Question 366: Which of the following would be the most appropriate way to ...; Question 367: Which of the following would be the best way to handle a cri...; Question 368: An organization designs an inbound firewall with a fail-open...; Question 369: Which of the following should a security operations center u...; Question 370: Which of the following is a benefit of an RTO when conductin...; Question 371: Which of the following is the best way to improve the confid...; Question 372: A new employee logs in to the email system for the first tim...; Question 373: Which of the following is the best way to secure an on-site ...; Question 374: In a rush to meet an end-of-year business goal, the IT depar...; Question 375: A security analyst investigates an incident in which a Power...; Question 376: A company is expanding its threat surface program and allowi...; Question 377: Which of the following activities should be included as part...; Question 378: A penetration test identifies that an SMBvl Is enabled on mu...; Question 379: An attacker forces an internal company employee to inject ma...; Question 380: The security operations center is researching an event conce...; Question 381: Which of the following consequences would a retail chain mos...; Question 382: A small business uses kiosks on the sales floor to display p...; Question 383: After completing an annual external penetration test, a comp...; Question 384: Which of the following best represents how frequently an inc...; Question 385: A security operations center determines that the malicious a...; Question 386: Which of the following control types involves restricting IP...; Question 387: Which of the following is a primary security concern for a c...; Question 388: A company is implementing a policy to allow employees to use...; Question 389: A security analyst is investigating an application server an...; Question 390: A security team wants to work with the development team to e...; Question 391: Which of the following is an example of a false negative vul...; Question 392: Which of the following mitigation techniques would a securit...; Question 393: Which of the following describes a security alerting and mon...; Question 394: After an audit, an administrator discovers all users have ac...; Question 395: Which of the following tasks is typically included in the BI...; Question 396: Which of the following should a systems administrator use to...; Question 397: A program manager wants to ensure contract employees can onl...; Question 398: Which of the following best describes the purpose of using d...; Question 399: Which of the following is a directive managerial control?...; Question 400: A software development manager wants to ensure the authentic...; Question 401: Which of the following risk analysis attributes measures the...; Question 402: Which of the following agreement types defines the time fram...; Question 403: Which of the following should a security team do first befor...; Question 404: An office wants to install a Wi-Fi network. The security tea...; Question 405: A company prevented direct access from the database administ...; Question 406: A growing organization, which hosts an externally accessible...; Question 407: Which of the following is a preventive physical security con...

Question 125/407

LEAVE A REPLY

Download PDF File