A company wants to implement MFA. Which of the following enables the additional factor while using a smart card?
Answer(s): A
Option A is correct because pairing a smart card with a PIN provides multi-factor authentication: something you have (smart card) and something you know (PIN). Incorrect — B hardware token: while a separate token can be second factor, the question specifies using a smart card, and a token typically is a standalone device, not integrated with the card. Incorrect — C User ID: not a factor; it is an identifier, not an authentication factor. Incorrect — D SMS: delivers a one-time code via phone, not involving the smart card as the possession factor.
A company hired an external consultant to assist with required system upgrades to a critical business application. A systems administrator needs to secure the consultant's access without sharing passwords to critical systems. Which of the following solutions should most likely be utilized?
Answer(s): E
Option E) correct — PAM (Pluggable Authentication Module) software enables centralized, password-based or token-based authentication management for external consultants without sharing passwords, and supports credential vaults and session controls. It helps enforce least privilege and audit access.A) Incorrect — TACACS+ is for device administration authentication but not specifically about secure consultant access without sharing credentials.B) Incorrect — SAML is for federated SSO authentication tokens, not direct privilege management for temporary consultant access.C) Incorrect — An SSO platform provides single sign-on, not granular, temporary access controls or credential separation for consultants.D) Incorrect — RBAC defines permissions but does not address secure authentication and credential management for outsiders.
A newly implemented wireless network is designed so that visitors can connect to the wireless network for business activities. The legal department is concerned that visitors might connect to the network and perform illicit activities. Which of me following should the security team implement to address this concern?
Answer(s): C
Option C is correct because a guest captive portal enforces terms and conditions, allowing policy enforcement, monitoring, and legal defensibility for visitor activity on the network. A captive portal can require consent and provide usage restrictions, reducing illicit activity risk.A) Incorrect — RADIUS manages device authentication and centralized authorization, but does not explicitly address user behavior enforcement or terms/conditions for visitors. B) Incorrect — 802.1X authenticates devices but is more about access control than enforceable user terms and policy. D) Incorrect — WPS is insecure and not related to visitor policy or legal compliance; it does not enforce usage terms.
Which of the following data roles is responsible for identifying risks and appropriate access to data?
Option A is correct because an data owner is responsible for identifying data risks and defining who has access to that data, aligning with data governance and access control responsibilities. Incorrect — B: Custodian handles data storage and protection controls but not ownership of risk decisions. Incorrect — C: Steward focuses on ongoing data quality and metadata management, not risk ownership or access authorization. Incorrect — D: Controller is not a standard dataRole in this context; governance typically uses owner, steward, custodian, and sometimes user access roles, making it not the correct term here.
Which of the following physical controls can be used to both detect and deter? (Choose two.)
Answer(s): A,D
Option A is correct because lighting serves as a deterrent by increasing visibility and a detector by revealing intruders in well-lit areas. Option D is correct because sensors detect unauthorized access or activity, contributing to deterrence via warning or notification. Incorrect — B) Fencing can deter but is not a detector. Incorrect — C) Signage deters by warning but does not detect. Incorrect — E) Bollard provides physical deterrence but not detection. Incorrect — F) Lock deters access but does not detect activity; some might argue alarms, but locks alone aren’t detectors.
A multinational bank hosts several servers in its data center. These servers run a business-critical application used by customers to access their account information. Which of the following should the bank use to ensure accessibility during peak usage times?
Option A is correct because a load balancer distributes client requests across multiple servers, improving availability and performance during peak usage by preventing any single server from becoming a bottleneck. Incorrect — B: Cloud backups protect data loss, not active availability during peak load. Incorrect — C: Geographic dispersal enhances disaster recovery and latency for some users but does not inherently balance load across servers. Incorrect — D: Disk multipathing provides redundant I/O paths for storage devices but does not address application layer load distribution across servers.
The author of a software package is concerned about bad actors repackaging and inserting malware into the software. The software download is hosted on a website, and the author exclusively controls the website's contents. Which of the following techniques would best ensure the software's integrity?
Answer(s): B
Option B is correct because code signing provides integrity verification of the software package, enabling users to detect tampering or repackaging by validating the publisher’s digital signature. A) Input validation protects against invalid data in applications, not software integrity. C) Secure cookies protect session data, not code integrity. D) Fuzzing is a testing technique to find vulnerabilities, not a method for ensuring integrity post-release. Correct — code signing ensures authenticity and integrity of the downloadable package, preventing malicious alterations. Incorrect — A, C, and D do not verify or guarantee the integrity of the distributed software.
A third-party vendor is moving a particular application to the end-of-life stage at the end of the current year. Which of the following is the most critical risk if the company chooses to continue running the application?
Option A is correct because continuing to run an end-of-life application eliminates ongoing security updates and patches, increasing vulnerability exposure and risk of exploitation.B) Incorrect — While missing new features may be a concern, the critical risk in EOL software is security and patching, not feature parity.C) Incorrect — Lack of official vendor support is a concern, but the more immediate risk is unpatched vulnerabilities that remain exploitable.D) Incorrect — Source code access is not typically the primary risk of running EOL software; exposure remains tied to unpatched weaknesses rather than access to code.
Share your comments for CompTIA SY0-701 exam with other users:
good questions
good content
totally not correct answers. 21. you have one gcp account running in your default region and zone and another account running in a non-default region and zone. you want to start a new compute engine instance in these two google cloud platform accounts using the command line interface. what should you do? correct: create two configurations using gcloud config configurations create [name]. run gcloud config configurations activate [name] to switch between accounts when running the commands to start the compute engine instances.
kindly upload the dumps
still learning
excellent way to learn
help so much
understand sql col.
i would give 5 stars to this website as i studied for az-800 exam from here. it has all the relevant material available for preparation. i got 890/1000 on the test.
this is nice.
q55- the ridac workflow can be modified using flow designer, correct answer is d not a
by far this is the most accurate exam dumps i have ever purchased. all questions are in the exam. i saw almost 90% of the questions word by word.
i cleared the az-104 exam by scoring 930/1000 on the exam. it was all possible due to this platform as it provides premium quality service. thank you!
question # 232: accessibility, privacy, and innovation are not data quality dimensions.
looks wrong answer for 443 question, please check and update
great question
question: a user wants to start a recruiting posting job posting. what must occur before the posting process can begin? 3 ans: comment- option e is incorrect reason: as part of enablement steps, sap recommends that to be able to post jobs to a job board, a user need to have the correct permission and secondly, be associated with one posting profile at minimum
answer to question 72 is d [sys_user_role]
please provide the pdf
hey guys, just to let you all know that i cleared my 312-38 today within 1 hr with 100 questions and passed. thank you so much brain-dumps.net all the questions that ive studied in this dump came out exactly the same word for word "verbatim". you rock brain-dumps.net!!! section name total score gained score network perimeter protection 16 11 incident response 10 8 enterprise virtual, cloud, and wireless network protection 12 8 application and data protection 13 10 network défense management 10 9 endpoint protection 15 12 incident d
very helpful
useful questions
page :20 https://exam-dumps.com/snowflake/free-cof-c02-braindumps.html?p=20#collapse_453 q 74: true or false: pipes can be suspended and resumed. true. desc.: pausing or resuming pipes in addition to the pipe owner, a role that has the following minimum permissions can pause or resume the pipe https://docs.snowflake.com/en/user-guide/data-load-snowpipe-intro
i want hcia exam dumps
good training
very useful
yes need this exam dumps
these questions are a great eye opener
thank you for providing these questions and answers. they helped me pass my exam. you guys are great.
good knowledge
answer 10 should be a because only a new project will be created & the organization is the same.
can you please upload the dump again
is it legit questions from sap certifications ?
question 16 should be b (changing the connector settings on the monitor) pc and monitor were powered on. the lights on the pc are on indicating power. the monitor is showing an error text indicating that it is receiving power too. this is a clear sign of having the wrong input selected on the monitor. thus, the "connector setting" needs to be switched from hdmi to display port on the monitor so it receives the signal from the pc, or the other way around (display port to hdmi).