Exam SY0-701 topic 1 question 577 discussion

Actual exam question from CompTIA's SY0-701

Question #: 577
Topic #: 1

A penetration test identifies that an SMBv1 is enabled on multiple servers across an organization. The organization wants to remediate this vulnerability in the most efficient way possible. Which of the following should the organization use for this purpose?

A. GPO
B. ACL
C. SFTP
D. DLP

Show Suggested Answer

Suggested Answer: A 🗳️

by test_arrow at Feb. 17, 2025, 11:08 p.m.

Comments

Submit Cancel

Nahidwin

2 months, 2 weeks ago

Selected Answer: A

Why? GPO (Group Policy Object) allows the organization to centrally disable SMBv1 on all affected servers efficiently, without manually configuring each one. Why not the others? B. ACL – Controls permissions, not protocols. C. SFTP – Unrelated to SMB. D. DLP – Prevents data loss, not protocol issues.

upvoted 4 times

...

test_arrow

2 months, 2 weeks ago

Selected Answer: A

A. GPO (Group Policy Object) Explanation: SMBv1 (Server Message Block version 1) is an outdated and vulnerable protocol that is susceptible to attacks like EternalBlue, which was used in ransomware outbreaks like WannaCry. To remediate this issue efficiently across multiple servers, the best approach is to disable SMBv1 using Group Policy Objects (GPO). GPO allows administrators to enforce settings across all affected systems centrally, making it the fastest and most scalable solution.

upvoted 4 times

...