CompTia Security+ 701 Domain 4.0(Security Operations)

Question 1

Usrs in ur netwrk are able to assign permissions to their own shard resurces.Wich acces contrl model is usd in ur netwrk

Accepted Answer

DAC

Question 2

Scan is ran,which notes that a service is runnin on TCP port8080.Wat type of service is most likely runnin on that port?

Accepted Answer

HTTP

Question 3

Sam discovers several new usrs created after hours in the org's logs.What term describes searching for potential issues?

Accepted Answer

Threat hunting

Question 4

Sam uses cloud hosting services web publishin service rather than running his own web serves. Where to look to see logs?

Accepted Answer

The cloud service web logs

Question 5

Sam is investigating an incident&needs to ID the creator of Microsoft Office doc.Where would he find that type of info?

Accepted Answer

In the file metadata

Question 6

Sam sets her antimalware solution to move infected files to safe storage w/o removin them frm sys.Type of settin enabled

Accepted Answer

Quarantine

Question 7

Sam gets 10k for reporting a vulnerability to a vendor,who participates in a program to identify issues. Term for it?

Accepted Answer

A bug bounty

Question 8

Sam wants to implement a cloud-based authorization system. Which of the following protocols is he likely to use?

Accepted Answer

OAuth

Question 9

Sam has been asked to run Nessus on his netrwork.What type of tool has he been asked to run?

Accepted Answer

A vulnerability scanner

Question 10

Wat should be recommended to ensure that the API(Application program interface)is only used by customers who pay for it?

Accepted Answer

Require Aunthentication

Question 11

No current vulnerabilities with device, which hardening options will provide the biggest benefit to harden orgs routers?

Accepted Answer

Moving their adminitrative interfaces to a protected VLAN

Question 12

How to gain access to a network,protected by NAC(net.acces.contr)system that recognized the hardware address of systems?

Accepted Answer

Use MAC(Media Access Control) cloning to clone a legitimate MAC address

Question 13

Sam wants to limit when users can log in to stand-alone Windows workstation.Wat should Sam do to meet this requirement?

Accepted Answer

Set login time restrictions

Question 14

What is the primary threat model against static codes used for multifactor authentication?

Accepted Answer

Theft

Question 15

Sam reviews bulletins to determine what threats her org is likely to face.Type of activity is this associated with?

Accepted Answer

Threat Hunting

Question 16

Sam is looking for an XML-based open standard for exchanging authentication infromation.Wich would best meet his needs?

Accepted Answer

SAML

Question 17

Social login,the ability to use an exitin identity frm a site like Google accnt is an ex.of which of the followin conpts

Accepted Answer

Federation

Question 18

Sam conducted a forensic investigation&retrieved artifacts/drive/files.Wat should he do to document the info he acquire?

Accepted Answer

Take picture of them,label them&add them to the chain-of-cusotdy documentio

Question 19

Sam wants to test her org's web app to see if its handling business logic prperly. Which testing method most effective?

Accepted Answer

Static code analysis

Question 20

Telnet, RSH and FTP are all examples of what?

Accepted Answer

Unsecure protocols

Question 21

Aftr recent compromise,Sam has been tasked to implement tech that can help prevent sensitive data bein stolen.Type tech?

Accepted Answer

DLP(Data loss prevention)

Question 22

Sam wants to implement a biometric system for entry access in his org.Wich of the followin systm is likely to be acepted

Accepted Answer

Fingerprint

Question 23

Endpoint detection & respon has 3 major components that mke up its ability to provide visibility into EP.Wich is not one

Accepted Answer

Malware analysis

Question 24

Wat key forensic tool used to generate reports about wat happened relies on correctly set system clocks to work properly

Accepted Answer

Timelining

Question 25

Term that describes data that is collected from publicly available sources that can be used in an intelligence context?

Accepted Answer

OSINT

Question 26

Which of the following groups is not typically part of an incident response team?

Accepted Answer

Law Enforcement

Question 27

Sam wants to provision her org standard set of marketing info to mobile device through her org.Wat MDM feature is suited

Accepted Answer

Content management

Question 28

Sam completed the recovery phase of her org incident response plan. What phase should she move into?

Accepted Answer

Lessons learned

Question 29

Which of the following scenarios is least likely to result in data recovery being possible?

Accepted Answer

A disk is degaussed

Question 30

Device is running services on TCP port 22 and 443. What services has she most likely discovered?

Accepted Answer

SSH and a web server

Question 31

Sam wants to test app's before deployment.He wants to use a test system that identical to live server.Wat is it called?

Accepted Answer

A test server

Question 32

Samdoesnt want his forensic work to be repudiated.How can he validate his evidence&documentation to ensure nonrepudiated

Accepted Answer

Digitally sign the records

Question 33

CVE is an exampleof what type of feed?

Accepted Answer

A vulnerability feed

CompTia Security+ 701 Domain 4.0(Security Operations)

Questions 33

CompTia Security+ 701 Domain 4.0(Security Operations)

Questions 33