Questão 68 — CompTIA SY0-701 CompTIA Security+ Certification Exam
During a routine audit, an analyst discovers that a department at a high school uses a simul-ation program that was not properly vetted before deployment. Which of the following threats is this an example of?
- A. Espionage
- B. Data exfiltration
- C. Shadow IT
- D. Zero-day
Resposta correta:
C
Explicação
Explanation: Correct answer: C. Shadow IT Using a simulation program that was not properly vetted before deployment is an example of the unvetted or unapproved softwarethreat. This represents a risk where software is deployed without proper security assessment, testing, or approval. Unvetted software can introduce vulnerabilities, malware, or functionality that conflicts with security policies. This is a common threat in organizations where departments bypass standard procurement and security review processes, often referred to as 'shadow IT' risks.
Quer todas as 907 questões por R$ 1,00?