View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 181

Which security control is primarily used to identify and block unauthorized devices from connecting to a network?

1. NAC
2. DLP
3. FIM
4. SIEM

Correct Answer: 1

Explanation
Network Access Control (NAC) evaluates devices before or during network access and can prevent unauthorized or noncompliant devices from connecting to protected resources.

Question 182

Which attack involves intercepting communication between two parties without their knowledge?

1. DDoS
2. Man-in-the-middle
3. Password spraying
4. Privilege escalation

Correct Answer: 2

Explanation
A man-in-the-middle (MITM) attack occurs when an attacker positions themselves between communicating parties to intercept or potentially modify information.

Question 183

Which protocol is commonly used to securely transfer files over an SSH connection?

1. TFTP
2. FTP
3. SFTP
4. HTTP

Correct Answer: 3

Explanation
Secure File Transfer Protocol (SFTP) transfers files through an encrypted SSH connection, protecting credentials and file contents from network interception.

Question 184

Which security mechanism can identify repeated failed login attempts and generate an alert for security personnel?

1. SIEM
2. UPS
3. Load balancer
4. Patch panel

Correct Answer: 1

Explanation
A Security Information and Event Management (SIEM) system collects and correlates security logs from multiple sources. It can detect patterns such as repeated authentication failures and generate alerts.

Question 185

Which type of malware can automatically replicate itself and spread across networks without requiring a user to execute an infected file?

1. Trojan
2. Worm
3. Spyware
4. Adware

Correct Answer: 2

Explanation
A worm is self-propagating malware that can spread from one system to another, often by exploiting vulnerabilities or weaknesses in network services.

Question 186

An attacker uses stolen usernames and passwords obtained from another website to access corporate accounts. What attack is this?

1. Credential stuffing
2. Password spraying
3. Shoulder surfing
4. Brute-force attack

Correct Answer: 1

Explanation
Credential stuffing uses previously compromised username-and-password combinations against other services. It is especially effective when users reuse passwords.

Question 187

Which control requires two employees to participate in a sensitive operation so that one person cannot complete the task alone?

1. Least privilege
2. Separation of duties
3. Data masking
4. Job enrichment

Correct Answer: 2

Explanation
Separation of duties divides critical responsibilities among multiple individuals. This reduces the possibility of fraud, abuse, or unauthorized actions by a single employee.

Question 188

Which technology can inspect encrypted web traffic to identify malicious content?

1. SSL/TLS inspection
2. MAC filtering
3. Port mirroring
4. DHCP snooping

Correct Answer: 1

Explanation
SSL/TLS inspection allows security devices to decrypt, inspect, and re-encrypt protected traffic. This can help identify threats hidden inside encrypted connections.

Question 189

Which type of attack attempts to execute malicious JavaScript in a victim’s web browser?

1. SQL injection
2. XSS
3. CSRF
4. DNS poisoning

Correct Answer: 2

Explanation
Cross-Site Scripting (XSS) injects malicious scripts into web content that is viewed by other users. The script may steal session information or perform unauthorized actions.

Question 190

Which backup method copies only data that has changed since the last full backup?

1. Incremental
2. Differential
3. Full
4. Synthetic

Correct Answer: 2

Explanation
A differential backup copies data changed since the most recent full backup. As additional differential backups are created, their size can increase until the next full backup.

Question 191

Which security technology is designed to detect suspicious activity on a network and alert administrators without directly blocking the traffic?

1. IDS
2. IPS
3. Firewall
4. Proxy

Correct Answer: 1

Explanation
An Intrusion Detection System (IDS) monitors network activity and generates alerts when suspicious behavior is detected. An IPS can additionally take action to block or prevent threats.

Question 192

Which type of authentication uses a hardware token, smart card, or security key?

1. Something you know
2. Something you have
3. Something you are
4. Somewhere you are

Correct Answer: 2

Explanation
A hardware token, smart card, or security key represents the “something you have” authentication factor because the user must possess the physical item.

Question 193

A company replaces sensitive customer account numbers with randomly generated values that have no exploitable meaning. Which technique is being used?

1. Hashing
2. Tokenization
3. Encryption
4. Steganography

Correct Answer: 2

Explanation
Tokenization replaces sensitive information with a non-sensitive token. The original data is stored separately and can be retrieved through an appropriate tokenization system.

Question 194

Which physical security control uses two interlocking doors to prevent unauthorized individuals from entering a secure facility?

1. Bollard
2. Mantrap
3. Fence
4. Turnstile

Correct Answer: 2

Explanation
A mantrap consists of two doors arranged so that one door generally must close before the other opens. This helps prevent unauthorized individuals from following an authorized person into a restricted area.

Question 195

Which principle requires an organization to verify a user’s identity and authorization before granting access to each requested resource?

1. Zero trust
2. Open authentication
3. Implicit trust
4. Network flattening

Correct Answer: 1

Explanation
Zero trust assumes that users and devices should not automatically be trusted. Access decisions are based on identity, authorization, device state, and other relevant security conditions.

Question 196

Which technology protects data stored on a laptop if the device is lost or stolen?

1. Full-disk encryption
2. Network segmentation
3. DNS filtering
4. Port security

Correct Answer: 1

Explanation
Full-disk encryption encrypts data stored on the device. If the laptop is lost or stolen, unauthorized individuals cannot easily access the protected information without the required authentication or encryption key.

Question 197

Which type of social engineering attack involves an attacker pretending to be a trusted person or organization?

1. Impersonation
2. Tailgating
3. Dumpster diving
4. Shoulder surfing

Correct Answer: 1

Explanation
Impersonation occurs when an attacker pretends to be someone the victim trusts, such as a manager, technician, vendor, or company representative, to manipulate the victim into performing an action.

Question 198

Which security process identifies weaknesses in systems and ranks them according to their potential impact and likelihood?

1. Risk assessment
2. Data destruction
3. Change management
4. Incident containment

Correct Answer: 1

Explanation
A risk assessment identifies threats and vulnerabilities and evaluates their likelihood and potential impact. Organizations use this information to prioritize security efforts.

Question 199

Which device security feature can prevent unauthorized computers from connecting to a specific switch port?

1. Port security
2. DNSSEC
3. NAT
4. Load balancing

Correct Answer: 1

Explanation
Switch port security can restrict which devices are allowed to use a particular physical port, often by controlling permitted MAC addresses.

Question 200

Which recovery metric specifies the maximum amount of time a system can remain unavailable after an incident?

1. RPO
2. RTO
3. MTBF
4. MTTD

Correct Answer: 2

Explanation
The Recovery Time Objective (RTO) defines the maximum acceptable amount of time a system or service can be unavailable before it needs to be restored.