Questão 47 — CompTIA SY0-701 CompTIA Security+ Certification Exam
An accounting employee recently used software that was not approved by the company. Which of the following risks does this most likely represent?
- A. Unskilled attacker
- B. Hacktivist
- C. Shadow IT
- D. Supply chain
Resposta correta:
C
Explicação
Explanation: Correct answer: C. Shadow IT Shadow IT refers to employees using software or services without official approval, often introducing security risks due to lack of control, monitoring, or compliance. This can lead to vulnerabilities, data leakage, or policy violations. Unskilled attacker (A) and hacktivist (B) are threat actor types; supply chain (D) refers to risks from external partners or vendors, not internal unauthorized software usage. Shadow IT is highlighted in Security Program Management and Threats domains for its risk implications6:Chapter 16CompTIA Security+ Study Guide.
Quer todas as 907 questões por R$ 1,00?