Free Access CompTIA.SYO-501.v2022-01-28.q315 Practice Test (Page 46)

Question 221

A security team has downloaded a public database of the largest collection of password dumps on the Internet.
This collection contains the cleartext credentials of every major breach for the last four years. The security team pulls and compares users' credentials to the database and discovers that more than 30% of the users were still using passwords discovered in this list. Which of the following would be the BEST combination to reduce the risks discovered?

A.Password reuse, password complexity, password expiration

B.Password complexity, least privilege, password reuse

C.Group policy, password history, password encryption

D.Password length, password encryption, password complexity

Question 222

Users are attempting to access a company's website but are transparently redirected to another websites. The users confirm the URL is correct. Which of the following would BEST prevent this issue in the future?

A.IPSec

B.HTTPS

C.DNSSEC

D.TLS/SSL

Question 223

A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list below in the correct order in which the forensic analyst should preserve them.

Question 224

Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.