View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 121

Which security control is designed to identify vulnerabilities in systems before attackers can exploit them?

1. Vulnerability scanner
2. Load balancer
3. Data loss prevention
4. Password manager

Correct Answer: 1

Explanation

A vulnerability scanner examines systems, applications, and network devices for known security weaknesses. It can identify issues such as missing patches, insecure configurations, outdated software, and exposed services. Organizations can use vulnerability scanning to prioritize remediation efforts and reduce their overall attack surface.

Question 122

Which type of attack attempts to gain unauthorized access by using a list of commonly used passwords against multiple accounts?

1. Password spraying
2. Credential stuffing
3. Rainbow table attack
4. Brute-force attack

Correct Answer: 1

Explanation

Password spraying involves attempting a small number of commonly used passwords against many different user accounts. Attackers use this approach to avoid triggering account lockout mechanisms that might occur when repeatedly targeting a single account. Strong password policies and multifactor authentication can help protect against password spraying.

Question 123

Which technology is commonly used to encrypt communications between a web browser and a web server?

1. TLS
2. FTP
3. SNMP
4. DHCP

Correct Answer: 1

Explanation

Transport Layer Security (TLS) encrypts data exchanged between applications communicating over a network. It is commonly used to protect web traffic between browsers and web servers through HTTPS. TLS provides confidentiality and integrity and also supports authentication through digital certificates.

Question 124

Which security control is most appropriate for protecting a server from unauthorized physical removal?

1. Cable lock
2. Antivirus software
3. Firewall
4. Encryption key

Correct Answer: 1

Explanation

A cable lock is a physical security control used to secure equipment such as servers, laptops, and workstations to a fixed object. It can help prevent unauthorized individuals from physically removing the equipment. Physical controls are an important part of protecting systems and data from theft.

Question 125

Which type of attack attempts to obtain sensitive information by searching discarded documents or storage media?

1. Dumpster diving
2. Shoulder surfing
3. Tailgating
4. Vishing

Correct Answer: 1

Explanation

Dumpster diving involves searching discarded materials for useful information. Attackers may find documents containing usernames, passwords, account information, network details, or other sensitive data. Organizations can reduce this risk by implementing secure document disposal, media destruction procedures, and employee awareness training.

Question 126

Which security technology can automatically quarantine a suspicious file detected on an endpoint?

1. Endpoint protection platform
2. Network switch
3. DNS server
4. Load balancer

Correct Answer: 1

Explanation

An endpoint protection platform can monitor devices for malware and suspicious activity and may automatically quarantine detected files. Quarantine prevents a suspicious file from interacting with the rest of the system while security personnel investigate it. Modern endpoint security solutions may combine antivirus, behavioral analysis, and other detection technologies.

Question 127

Which type of encryption is generally preferred for encrypting large amounts of data because of its efficiency?

1. Symmetric encryption
2. Asymmetric encryption
3. Hashing
4. Digital signing

Correct Answer: 1

Explanation

Symmetric encryption is generally more efficient than asymmetric encryption for protecting large amounts of data. It uses the same secret key for encryption and decryption. Algorithms such as AES are commonly used for data encryption, while asymmetric cryptography is often used for key exchange and authentication.

Question 128

Which security control provides an additional authentication requirement when accessing highly sensitive systems?

1. Multifactor authentication
2. Network address translation
3. Data masking
4. Port forwarding

Correct Answer: 1

Explanation

Multifactor authentication requires users to provide multiple authentication factors before access is granted. Requiring MFA for sensitive systems provides stronger protection against stolen passwords and other credential-based attacks. Organizations can further strengthen authentication by using phishing-resistant methods such as hardware security keys.

Question 129

Which type of attack attempts to exploit a vulnerable application by providing unexpected input that causes it to execute unintended commands?

1. Injection attack
2. DDoS attack
3. Shoulder surfing
4. Tailgating

Correct Answer: 1

Explanation

Injection attacks occur when untrusted input is interpreted as commands or instructions by an application or underlying system. Examples include SQL injection, command injection, and LDAP injection. Secure input validation, parameterized queries, and appropriate application controls can help prevent injection vulnerabilities.

Question 130

Which security practice requires administrators to regularly install updates that address known software vulnerabilities?

1. Patch management
2. Data classification
3. Network segmentation
4. Asset disposal

Correct Answer: 1

Explanation

Patch management involves identifying, testing, approving, and deploying software updates to address vulnerabilities and other issues. Regular patching reduces the opportunity for attackers to exploit known weaknesses. Organizations should maintain an inventory of systems and establish procedures for prioritizing critical security updates.

Question 131

Which classification identifies information that could cause serious harm to an organization if disclosed without authorization?

1. Confidential
2. Public
3. Unrestricted
4. Non-sensitive

Correct Answer: 1

Explanation

Confidential information requires protection from unauthorized disclosure because its exposure could negatively affect an organization or its stakeholders. Organizations establish data classification levels to determine how information should be stored, transmitted, accessed, and disposed of. Access to confidential information should be limited to authorized individuals.

Question 132

Which security technology can inspect encrypted network traffic after it has been decrypted for security analysis?

1. SSL/TLS inspection
2. MAC filtering
3. Port security
4. DHCP snooping

Correct Answer: 1

Explanation

SSL/TLS inspection allows a security device to decrypt and inspect protected network traffic before forwarding it to its destination. This can help identify threats hidden within encrypted communications. Because inspection involves handling potentially sensitive information, organizations must carefully consider privacy, performance, certificate management, and policy requirements.

Question 133

Which type of authentication attack uses credentials obtained from previous data breaches to attempt access to another service?

1. Credential stuffing
2. Password spraying
3. Brute-force attack
4. Social engineering

Correct Answer: 1

Explanation

Credential stuffing uses previously compromised usernames and passwords to attempt authentication against other services. The attack is effective when users reuse passwords across multiple accounts. Using unique passwords, password managers, multifactor authentication, and breached-credential detection can reduce the effectiveness of credential stuffing.

Question 134

Which security control is designed to detect malicious activity by comparing network traffic against known attack patterns?

1. Signature-based detection
2. Data masking
3. Tokenization
4. Load balancing

Correct Answer: 1

Explanation

Signature-based detection compares observed activity against known patterns associated with malware, attacks, or other threats. It can be effective at identifying known threats quickly, but it may not detect previously unknown attacks that do not match an existing signature. Combining signature detection with behavioral and anomaly-based techniques can provide broader protection.

Question 135

Which security mechanism can restrict an application from accessing resources that it does not require?

1. Application sandboxing
2. Port forwarding
3. Network translation
4. Data replication

Correct Answer: 1

Explanation

Application sandboxing isolates an application from other system resources and limits what it can access or modify. If the application becomes compromised, the sandbox can reduce the potential impact by restricting its privileges and interactions with the operating system. Sandboxing is commonly used when running untrusted or potentially malicious code.

Question 136

Which type of attack occurs when an attacker gains access to a legitimate session token and uses it to impersonate the user?

1. Session hijacking
2. Password spraying
3. DNS poisoning
4. Buffer overflow

Correct Answer: 1

Explanation

Session hijacking occurs when an attacker obtains a valid session identifier or token and uses it to access an application as the legitimate user. Attackers may obtain session information through various techniques, including exploiting insecure applications or unprotected communications. Secure TLS connections, protected cookies, short session lifetimes, and appropriate session management can help reduce this risk.

Question 137

Which security control is used to ensure that only authorized personnel can enter a data center?

1. Access badge system
2. Antivirus software
3. Web application firewall
4. Data loss prevention

Correct Answer: 1

Explanation

An access badge system controls physical entry by requiring individuals to present an authorized credential. Access systems can record entry and exit events and can be integrated with additional controls such as cameras or biometric authentication. Restricting physical access helps protect servers, networking equipment, and sensitive information.

Question 138

Which type of attack attempts to exploit a vulnerable wireless network by capturing and analyzing wireless communication?

1. Wireless packet sniffing
2. SQL injection
3. Credential stuffing
4. Command injection

Correct Answer: 1

Explanation

Wireless packet sniffing involves capturing wireless network traffic for analysis. If communications are unencrypted or improperly secured, attackers may be able to obtain sensitive information from captured traffic. Strong wireless encryption and secure application protocols help protect data even if network traffic is intercepted.

Question 139

Which recovery strategy involves maintaining a duplicate system at another location that can be activated if the primary site becomes unavailable?

1. Hot site
2. Cold site
3. Backup rotation
4. Archive site

Correct Answer: 1

Explanation

A hot site is a secondary facility that is equipped and configured to support rapid recovery when the primary site becomes unavailable. It generally has operational systems, connectivity, and other resources ready for use. Hot sites provide faster recovery than cold sites but are typically more expensive to maintain.

Question 140

Which security control is designed to provide evidence that a security event occurred by recording relevant system activities?

1. Audit logs
2. Data masking
3. Network segmentation
4. Encryption

Correct Answer: 1

Explanation

Audit logs record system and user activities that can later be reviewed during security investigations. Logs may contain information such as login attempts, administrative changes, access to resources, and security events. Proper log retention, protection, and centralized monitoring help organizations investigate incidents and maintain accountability.