Security+ SY0-701

A security analyst is reviewing the following logs:

Which of the following attacks is most likely occurring?

• 
  

• Password spraying

• Account forgery

• Pass-the-hash

• Brute-force

An IT manager informs the entire help desk staff that only the IT manager and the help desk lead will have access to the administrator console of the help desk software. Which of the following security techniques is the IT manager setting up?

• Hardening

• Employee monitoring

• Configuration enforcement

• Least privilege

Which of the following enables the use of an input field to run commands that can view or manipulate data?

• 
  

• Cross-site scripting

• Side loading

• Buffer overflow

• SQL injection

A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis. Which of the following types of controls is the company setting up?

• 
  

• Corrective

• Preventive

• Deterrent

• Detective

A security analyst scans a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the security analyst recommend?

• Changing the remote desktop port to a non-standard number

• Setting up a VPN and placing the jump server inside the firewall

• Using a proxy for web connections from the remote desktop server

• Connecting the remote server to the domain and increasing the password length

A systems administrator is working on a solution with the following requirements:
• Provide a secure zone.
• Enforce a company-wide access control policy.
• Reduce the scope of threats.
Which of the following is the systems administrator setting up?

• Zero Trust

• AAA

• Non-repudiation

• CIA

A retail company processes credit card payments and must comply with PCI DSS requirements. The IT team needs to secure sensitive cardholder data at rest.

Question:
Which of the following is the most appropriate solution?

• Encrypt data using AES-256 and restrict access to authorized personnel.

• Hash the cardholder data using MD5 for long-term storage.

• Store cardholder data in plain text on a secure server.

• Use SSL/TLS to transmit cardholder data securely.

The security team is responding to a ransomware attack. The attackers have encrypted critical files and are demanding payment in cryptocurrency.

Question: What should the team do first?

• Pay the ransom to regain access to the files.

• Isolate affected systems to prevent further spread.

• Report the incident to law enforcement.

• Initiate a system-wide backup restore.

A company hosts its critical infrastructure on-premises. A risk assessment reveals that its backup data is stored on the same site as the infrastructure, increasing risk in case of natural disasters.

Question:
What is the best way to mitigate this risk?

• Encrypt all backup data.

• Implement an offsite backup solution.

• Install a fire suppression system in the data center.

• Perform regular disaster recovery drills.

An employee tries to access a secure system but receives a notification stating that access is denied because they are outside the company’s geographic region.

Question:
What type of access control policy is in place?

• Discretionary Access Control (DAC).

• Role-Based Access Control (RBAC).

• Mandatory Access Control (MAC).

• Attribute-Based Access Control (ABAC).