View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 141

Which security control is used to prevent unauthorized users from connecting to a switch port?

1. Port security
2. Network address translation
3. Load balancing
4. DNS filtering

Correct Answer: 1

Explanation

Port security is a network switch feature that controls which devices can connect to individual switch ports. Administrators can restrict access based on MAC addresses and define actions when unauthorized devices are detected. This helps prevent unauthorized endpoints from gaining network access through available switch ports.

Question 142

Which type of attack attempts to discover valid usernames by analyzing differences in application responses?

1. Account enumeration
2. Credential stuffing
3. Password spraying
4. Brute-force attack

Correct Answer: 1

Explanation

Account enumeration occurs when an attacker determines whether specific user accounts exist by observing application responses, error messages, timing, or other differences. Once valid usernames are identified, attackers may use them in subsequent password attacks. Applications should avoid revealing unnecessary information about whether an account exists.

Question 143

Which security technology provides centralized authentication and authorization for network devices using a dedicated server?

1. AAA
2. NAT
3. DHCP
4. DNS

Correct Answer: 1

Explanation

Authentication, authorization, and accounting (AAA) provides centralized control over access to network devices and other resources. Authentication verifies a user’s identity, authorization determines what the user is allowed to do, and accounting records relevant activity. Protocols such as RADIUS and TACACS+ can provide AAA functionality.

Question 144

Which type of malware remains inactive until a specific condition or event occurs?

1. Logic bomb
2. Worm
3. Spyware
4. Trojan

Correct Answer: 1

Explanation

A logic bomb is malicious code that remains dormant until a predefined condition is met. The trigger could be a particular date, deletion of an account, or another specified event. Once activated, the logic bomb may delete data, disrupt services, or perform other malicious actions.

Question 145

Which security control can prevent users from connecting unauthorized removable storage devices to company computers?

1. Device control
2. Network segmentation
3. Web filtering
4. Load balancing

Correct Answer: 1

Explanation

Device control allows organizations to manage which hardware devices can connect to endpoints. Administrators can restrict or block removable media such as USB storage devices based on organizational policies. This helps reduce risks associated with malware infections, unauthorized data transfers, and data exfiltration.

Question 146

Which type of attack attempts to exploit weaknesses in an application’s handling of user-supplied file names or paths?

1. Directory traversal
2. Password spraying
3. Replay attack
4. DDoS attack

Correct Answer: 1

Explanation

Directory traversal attacks manipulate file paths to access files or directories outside the intended application directory. Attackers may attempt to retrieve sensitive configuration files, credentials, or system information. Input validation, canonicalization, and proper access controls can help prevent unauthorized file access.

Question 147

Which security technology can identify malicious behavior by analyzing how an application or process normally operates?

1. Behavioral analysis
2. MAC filtering
3. Data masking
4. Port forwarding

Correct Answer: 1

Explanation

Behavioral analysis identifies suspicious activity by examining the actions and behavior of applications, processes, users, or devices. Unlike signature-based detection, it can potentially identify previously unknown threats that exhibit abnormal behavior. Behavioral detection is commonly used as part of modern endpoint and network security solutions.

Question 148

Which type of social engineering involves following an authorized person through a secure entrance without using proper credentials?

1. Tailgating
2. Vishing
3. Pretexting
4. Smishing

Correct Answer: 1

Explanation

Tailgating occurs when an unauthorized person follows an authorized individual through a secured entrance. The attacker may take advantage of courtesy or distraction to bypass physical access controls. Mantraps, badge verification, security guards, and employee awareness can help prevent tailgating.

Question 149

Which security control is designed to ensure that only approved applications and processes can run on a system?

1. Application allowlisting
2. Password policy
3. Network segmentation
4. Data classification

Correct Answer: 1

Explanation

Application allowlisting permits only explicitly approved software to execute on a system. Applications not included in the approved list are blocked or prevented from running. This approach can significantly reduce the risk of unauthorized software and malware executing on sensitive systems.

Question 150

Which protocol is commonly used to securely transfer email between mail servers?

1. SMTPS
2. Telnet
3. TFTP
4. HTTP

Correct Answer: 1

Explanation

SMTPS uses Transport Layer Security to protect SMTP communications between mail systems. Encryption helps prevent attackers from intercepting email traffic and sensitive authentication information while it is transmitted. Secure email configurations should use modern encryption standards and appropriate certificate validation.

Question 151

Which type of attack attempts to manipulate a user into revealing confidential information by exploiting trust or authority?

1. Social engineering
2. Buffer overflow
3. SQL injection
4. DNS poisoning

Correct Answer: 1

Explanation

Social engineering attacks manipulate people rather than directly exploiting technical vulnerabilities. Attackers may impersonate trusted individuals, create a sense of urgency, or use authority to persuade victims to disclose information or perform unsafe actions. Security awareness training and verification procedures are important defenses against social engineering.

Question 152

Which security control can automatically block network traffic originating from a known malicious IP address?

1. Firewall rule
2. File integrity monitoring
3. Data masking
4. Password manager

Correct Answer: 1

Explanation

A firewall rule can be configured to allow or deny network traffic based on characteristics such as source and destination IP addresses, ports, and protocols. Blocking known malicious addresses can help prevent communication with identified threats. Firewall rules should be carefully managed because attackers may change infrastructure or use compromised legitimate addresses.

Question 153

Which type of attack involves intercepting communication and modifying the information before forwarding it to the intended recipient?

1. Man-in-the-middle
2. Brute-force
3. Password spraying
4. Ransomware

Correct Answer: 1

Explanation

A man-in-the-middle attack occurs when an attacker secretly positions themselves between communicating parties. The attacker may intercept and modify data before forwarding it to the destination. Encryption, certificate validation, secure protocols, and strong authentication can help protect communications from this type of attack.

Question 154

Which security technology can identify malicious URLs and prevent users from visiting known phishing websites?

1. DNS filtering
2. RAID
3. Network bonding
4. Disk encryption

Correct Answer: 1

Explanation

DNS filtering can block requests for domains associated with malware, phishing, or other prohibited content. When a user attempts to access a blocked domain, the DNS filtering service can prevent the connection from resolving normally. This provides an additional layer of protection against malicious websites.

Question 155

Which security concept ensures that data remains accessible to authorized users when needed?

1. Availability
2. Confidentiality
3. Integrity
4. Non-repudiation

Correct Answer: 1

Explanation

Availability ensures that systems, applications, and information are accessible to authorized users when required. Redundancy, backups, fault-tolerant infrastructure, disaster recovery plans, and appropriate maintenance can help maintain availability. Availability is one of the three core principles of the CIA triad.

Question 156

Which principle ensures that information is protected from unauthorized modification?

1. Integrity
2. Availability
3. Confidentiality
4. Authentication

Correct Answer: 1

Explanation

Integrity ensures that information remains accurate, complete, and protected from unauthorized changes. Hashing, digital signatures, access controls, and file integrity monitoring can help maintain data integrity. Organizations should also use appropriate logging and change-management procedures to detect unauthorized modifications.

Question 157

Which principle of the CIA triad ensures that sensitive information is accessible only to authorized individuals?

1. Confidentiality
2. Availability
3. Integrity
4. Accountability

Correct Answer: 1

Explanation

Confidentiality protects information from unauthorized disclosure. Access controls, encryption, authentication, authorization, and data classification are commonly used to maintain confidentiality. The goal is to ensure that sensitive information is available only to individuals or systems that have appropriate authorization.

Question 158

Which security control provides an isolated copy of data that can be used after ransomware encrypts production files?

1. Offline backup
2. Load balancer
3. Proxy server
4. Access control list

Correct Answer: 1

Explanation

An offline backup is disconnected from the production environment and therefore is less likely to be affected by malware that compromises connected systems. If ransomware encrypts production data, an isolated backup can provide a recovery source. Organizations should regularly test backups to ensure that data can actually be restored when needed.

Question 159

Which type of assessment evaluates the potential impact and likelihood of identified security threats?

1. Risk assessment
2. Vulnerability scan
3. Penetration test
4. Code review

Correct Answer: 1

Explanation

A risk assessment evaluates threats, vulnerabilities, likelihood, and potential impact to determine the level of risk facing an organization. The results can help security teams prioritize controls and remediation efforts. Risk assessments may consider technical, operational, financial, legal, and business factors.

Question 160

Which security process determines how sensitive information should be handled based on its importance and potential impact if exposed?

1. Data classification
2. Network segmentation
3. Patch management
4. Incident containment

Correct Answer: 1

Explanation

Data classification categorizes information according to its sensitivity, value, and security requirements. Common classifications may include public, internal, confidential, and restricted. Classification helps organizations determine appropriate access controls, encryption requirements, retention policies, and handling procedures for different types of information.