DS0-001 Exam Questions & Answers

Correct Answer: A

A result of an on-path attack on a system is a Wi-Fi network that redirects to clones of legitimate websites. An on-path attack is a type of attack that intercepts and modifies the traffic between two parties without their knowledge or consent. An attacker can use an on-path attack to create a rogue Wi-Fi network that mimics a legitimate one, and then redirect the users to fake websites that look like the ones they intended to visit. The attacker can then steal the users' personal or financial information, such as usernames, passwords, credit card numbers, or bank account details. The other options are either results of different types of attacks or not related to attacks at all. For example, a website that has crashed and is no longer accessible may be a result of a denial-of-service attack, an email from an unknown source requesting bank account details may be a result of a phishing attack, and a web application that returns the addresses of its customers may be a result of a poor design or a data breach. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.4 Given a scenario, identify common types of attacks against databases.

Correct Answer: D

The option that is recommended in order to provide encrypted data communication pathways for information as it is transmitted over a network is TLS. TLS, or Transport Layer Security, is a protocol that provides secure communication over the internet by encrypting the data using cryptographic algorithms and keys. TLS also provides authentication and integrity by verifying the identity of the parties involved and ensuring that the data has not been altered or tampered with. TLS can be used to protect various types of data, such as web traffic, email, instant messaging, voice over IP, etc. The other options are either not related or not sufficient for this purpose. For example, TCP/IP, or Transmission Control Protocol/ Internet Protocol, is a set of protocols that defines how data is transmitted and routed over the internet, but does not provide encryption or security; NFS, or Network File System, is a protocol that allows users to access and share files over a network, but does not provide encryption or security; SMB, or Server Message Block, is a protocol that allows users to access and share files, printers, and other resources over a network, but does not provide encryption or security. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.

Correct Answer: A

The approach that the administrator should use when conducting the stress test is to capture business logic, check the performance of codes, and report findings. This will help the administrator to evaluate how well the application handles high volumes of data and transactions, identify any bottlenecks or errors in the code, and provide feedback to the development team on how to improve the application's efficiency and reliability. The other options are either too narrow or too broad in scope, and do not address the specific needs of an application that uses the Entity Framework. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.3 Given a scenario, monitor database performance and security.