View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 161

Which security control is designed to prevent unauthorized users from accessing a restricted physical area?

1. Firewall
2. Access badge
3. SIEM
4. DLP

Correct Answer: 2

Explanation

 An access badge is a physical security control that restricts entry to authorized personnel. Badges can also provide audit trails by recording when users enter or leave secured areas.

Question 162

An administrator wants to ensure that users can access only the files and applications required for their jobs. Which principle should be implemented?

1. Least privilege
2. Open access
3. Job rotation
4. Data sovereignty

Correct Answer: 1

Explanation

 The principle of least privilege gives users only the permissions necessary to perform their assigned tasks. This limits the potential impact of compromised accounts or accidental misuse.

Question 163

Which technology is commonly used to securely connect remote employees to an organization’s internal network?

1. VPN
2. Hub
3. Proxy ARP
4. VLAN trunk

Correct Answer: 1

Explanation

 A VPN creates an encrypted connection between a remote user and the organization’s network. This helps protect data from interception while traveling across untrusted networks.

Question 164

A security analyst notices that an attacker is attempting to authenticate to many different accounts using the same password. What type of attack is occurring?

1. Credential stuffing
2. Password spraying
3. Brute-force attack
4. Rainbow table attack

Correct Answer: 2

Explanation

 Password spraying uses a small number of commonly used passwords against many accounts. Unlike brute-force attacks, it typically avoids repeatedly attempting many passwords against a single account.

Question 165

Which security technology can detect suspicious behavior on an endpoint and provide automated response capabilities?

1. EDR
2. DNS server
3. Load balancer
4. Network switch

Correct Answer: 1

Explanation

 Endpoint Detection and Response (EDR) monitors endpoint activity, detects suspicious behavior, and can provide response actions such as isolating a compromised device.

Question 166

Which attack attempts to inject malicious SQL statements into an application’s database query?

1. XSS
2. SQL injection
3. CSRF
4. Directory traversal

Correct Answer: 2

Explanation

 SQL injection occurs when an attacker inserts malicious SQL commands into application input fields. Successful attacks can expose, modify, or delete database information.

Question 167

Which authentication factor is represented by a fingerprint?

1. Something you know
2. Something you have
3. Something you are
4. Somewhere you are

Correct Answer: 3

Explanation

 A fingerprint is a biometric characteristic, making it an example of “something you are.” Other examples include facial recognition, iris scans, and voice recognition.

Question 168

Which backup type copies all selected data every time the backup is performed?

1. Incremental
2. Differential
3. Full
4. Snapshot

Correct Answer: 3

Explanation

 A full backup copies all selected data regardless of whether it changed since the previous backup. Full backups simplify restoration but generally require more storage and backup time.

Question 169

Which security device is specifically designed to inspect and control traffic entering or leaving a network?

1. Firewall
2. Patch panel
3. NAS
4. KVM switch

Correct Answer: 1

Explanation

A firewall controls network traffic based on configured rules. It can allow or block traffic according to factors such as source, destination, port, protocol, or application.

Question 170

A company requires users to authenticate once and then access multiple authorized applications without signing in again. Which technology provides this capability?

1. SSO
2. NAC
3. MFA
4. FIM

Correct Answer: 1

Explanation

Single Sign-On (SSO) allows users to authenticate once and then access multiple applications or services without repeatedly entering credentials.

Question 171

Which technique involves placing a fake system on a network to attract and study attackers?

1. Sandboxing
2. Honeypot
3. Tokenization
4. Geofencing

Correct Answer: 2

Explanation

A honeypot is a deliberately deployed system designed to attract attackers. Security teams can monitor interactions with it to gain intelligence about attack methods and indicators of compromise.

Question 172

Which security principle assumes that no user or device should automatically be trusted based solely on network location?

1. Defense in depth
2. Zero trust
3. Separation of duties
4. Data minimization

Correct Answer: 2

Explanation

Zero trust follows the concept of continuously verifying users, devices, and access requests rather than automatically trusting entities because they are inside the corporate network.

Question 173

Which type of malware provides an attacker with privileged access while attempting to hide its presence on a system?

1. Rootkit
2. Worm
3. Adware
4. Logic bomb

Correct Answer: 1

Explanation

A rootkit is designed to maintain unauthorized access while hiding malicious processes, files, or system modifications from normal detection mechanisms.

Question 174

Which security control monitors files and alerts administrators when unauthorized changes occur?

1. FIM
2. VPN
3. NAC
4. Proxy

Correct Answer: 1

Explanation

File Integrity Monitoring (FIM) tracks files and detects unauthorized modifications. It is useful for identifying tampering with important system or configuration files.

Question 175

An employee receives a text message claiming to be from a bank and asking the employee to click a link to verify an account. What type of attack is this?

1. Vishing
2. Smishing
3. Pharming
4. Tailgating

Correct Answer: 2

Explanation

Smishing is phishing performed through SMS or text messages. Attackers commonly use urgent messages and malicious links to steal credentials or other sensitive information.

Question 176

Which security solution is designed to prevent sensitive information from being improperly transmitted outside an organization?

1. DLP
2. IDS
3. DHCP
4. NTP

Correct Answer: 1

Explanation

Data Loss Prevention (DLP) identifies and protects sensitive information. It can monitor and restrict activities such as copying confidential files to unauthorized devices or sending sensitive data externally.

Question 177

Which protocol provides encrypted remote command-line access to a server?

1. FTP
2. Telnet
3. SSH
4. HTTP

Correct Answer: 3

Explanation

Secure Shell (SSH) provides encrypted remote administration and command-line access. It is preferred over Telnet because Telnet transmits credentials and data without encryption.

Question 178

A security team separates a public-facing web server from the internal corporate network using an isolated network segment. What is this segment commonly called?

1. DMZ
2. SAN
3. VLAN trunk
4. Intranet

Correct Answer: 1

Explanation

A Demilitarized Zone (DMZ) is a segmented network designed to host systems that need to be accessible from untrusted networks while reducing direct exposure of the internal network.

Question 179

Which security objective ensures that information remains accurate and has not been improperly altered?

1. Confidentiality
2. Integrity
3. Availability
4. Non-repudiation

Correct Answer: 2

Explanation

Integrity ensures that data remains accurate, complete, and protected from unauthorized modification. Hashing, digital signatures, and file integrity monitoring can help support integrity.

Question 180

Which metric identifies the maximum acceptable amount of data loss measured in time?

1. RTO
2. RPO
3. MTTR
4. MTBF

Correct Answer: 2

Explanation

The Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss expressed as a period of time. For example, an RPO of one hour means the organization aims to lose no more than approximately one hour of data.