Análise completa de Security+ SY0-701: o que o relatório de US$39 mostra

Uma questão real da análise completa

É assim que cada questão que você erra aparece no relatório. A questão, a resposta certa, a explicação e a fonte são reais. A resposta mostrada como sua é um exemplo, não são dados de ninguém.

An MSP manages the perimeter firewall for a regional retailer. Three engineers edit the rule base directly from the console, and last Tuesday a rule change cut off the retailer's payment processor for two hours. Nobody can say which of the day's nine edits caused it or what the rule looked like before. The service delivery manager wants to prevent a repeat. Which change management practice addresses the root problem?

• A Requiring a service restart after each edit
• B Adding the processor's IP to a deny list
• C Shortening the maintenance window
• D Putting the configuration under version control with documented changes

Resposta de exemplo, marcada com certeza: A · Resposta certa: D

Version control keeps every revision of the configuration with who changed it, when, and why, so any edit can be compared with the previous version and reverted in minutes. Paired with documentation of each change, it answers both questions the manager could not: which edit broke the processor and what the rule looked like before. A service restart after each edit adds downtime and no traceability. A deny list for the processor would block the very traffic the retailer needs. Shortening the window reduces the time available and does nothing about untracked edits. NIST SP 800-128 makes configuration baselines and controlled, recorded changes the foundation of configuration management for this reason.

A preparação por domínio usa os pesos da prova real: General Security Concepts 12%, Threats, Vulnerabilities, and Mitigations 22%, Security Architecture 18%, Security Operations 28%, Security Program Management and Oversight 20%.