View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 241

Which security principle limits access to information based on a user’s need to perform a specific task?

1. Need to know
2. Open access
3. Separation of duties
4. Job rotation

Correct Answer: 1

Explanation
The need-to-know principle restricts access to information only to users who require it for their assigned responsibilities. This reduces unnecessary exposure of sensitive data.

Question 242

Which type of vulnerability occurs when a program writes more data into a memory area than it was designed to hold?

1. Buffer overflow
2. SQL injection
3. Race condition
4. Directory traversal

Correct Answer: 1

Explanation
A buffer overflow occurs when more data is written to a memory buffer than it can accommodate. Attackers may exploit this to crash applications or potentially execute malicious code.

Question 243

Which security solution is primarily used to prevent sensitive information from being copied to unauthorized removable media?

1. DLP
2. IDS
3. DNSSEC
4. SIEM

Correct Answer: 1

Explanation
Data Loss Prevention (DLP) can monitor and restrict sensitive data transfers, including attempts to copy protected information to USB drives or other removable media.

Question 244

Which protocol is commonly used to retrieve email securely while keeping messages on the mail server?

1. IMAPS
2. TFTP
3. Telnet
4. SNMP

Correct Answer: 1

Explanation
IMAPS is the secure version of IMAP and uses TLS encryption to protect email communications while allowing messages to remain stored on the mail server.

Question 245

Which attack involves secretly observing a user’s screen or keyboard to obtain confidential information?

1. Shoulder surfing
2. Pharming
3. Credential stuffing
4. DNS poisoning

Correct Answer: 1

Explanation
Shoulder surfing is a form of physical or visual information theft in which an attacker observes a victim entering passwords, PINs, or other sensitive information.

Question 246

Which security control automatically restores a system or application to a previously known-good state after a failure?

1. Recovery control
2. Deterrent control
3. Preventive control
4. Directive control

Correct Answer: 1

Explanation
Recovery controls help restore systems and services after an incident or failure. Backups and system restoration procedures are common examples.

Question 247

Which attack involves stealing or taking control of a user’s active web session?

1. Session hijacking
2. Password spraying
3. Smishing
4. Dumpster diving

Correct Answer: 1

Explanation
Session hijacking occurs when an attacker obtains or manipulates a valid session identifier or token and uses it to impersonate an authenticated user.

Question 248

Which security mechanism verifies the identity of a website and helps establish encrypted communication with clients?

1. Digital certificate
2. Password hash
3. Access control list
4. Security baseline

Correct Answer: 1

Explanation
A digital certificate binds an identity to a public key and is commonly used with TLS to authenticate websites and establish encrypted connections.

Question 249

Which type of malware is designed to secretly monitor a user’s activities and collect information?

1. Spyware
2. Worm
3. Logic bomb
4. Boot sector virus

Correct Answer: 1

Explanation
Spyware secretly monitors user activity and may collect information such as browsing behavior, credentials, or other sensitive data.

Question 250

Which security control is used to restrict network communication between different segments of an organization’s infrastructure?

1. Network segmentation
2. Data masking
3. Password hashing
4. Tokenization

Correct Answer: 1

Explanation
Network segmentation divides a network into separate security zones. It can limit lateral movement and restrict communication between systems that do not need to communicate directly.

Question 251

Which type of attack uses fraudulent websites or messages to redirect users to a malicious destination while appearing legitimate?

1. Pharming
2. Tailgating
3. Brute force
4. Privilege escalation

Correct Answer: 1

Explanation
Pharming redirects users to fraudulent websites, often through manipulation of DNS or host information. The goal is usually to steal credentials or other sensitive information.

Question 252

Which security control provides a physical barrier to prevent vehicles from entering a restricted area?

1. Bollard
2. Mantrap
3. Badge reader
4. Motion detector

Correct Answer: 1

Explanation
Bollards are sturdy vertical barriers used to prevent or restrict vehicle access. They are commonly installed around buildings, entrances, and other protected areas.

Question 253

Which process ensures that security patches are tested and deployed to systems in a controlled manner?

1. Patch management
2. Data classification
3. Threat hunting
4. Account provisioning

Correct Answer: 1

Explanation
Patch management involves identifying, testing, approving, deploying, and verifying software updates. Regular patching reduces exposure to known vulnerabilities.

Question 254

Which type of security assessment attempts to actively exploit vulnerabilities to determine their real-world impact?

1. Penetration test
2. Vulnerability scan
3. Configuration review
4. Compliance audit

Correct Answer: 1

Explanation
A penetration test actively attempts to exploit vulnerabilities in an authorized environment. This helps determine whether identified weaknesses can actually be used to compromise systems.

Question 255

Which security technology provides centralized management of highly privileged administrative accounts?

1. PAM
2. NAC
3. WAF
4. IDS

Correct Answer: 1

Explanation
Privileged Access Management (PAM) controls and monitors privileged accounts. It can provide features such as credential vaulting, session monitoring, and temporary privileged access.

Question 256

Which type of attack attempts to guess a password by systematically trying many possible combinations?

1. Brute-force attack
2. Phishing
3. Replay attack
4. MITM attack

Correct Answer: 1

Explanation
A brute-force attack systematically attempts different password combinations until the correct credential is discovered. Strong passwords and account lockout mechanisms can reduce this risk.

Question 257

Which security technology can prevent users from accessing known malicious or inappropriate websites based on domain or URL information?

1. DNS filtering
2. File integrity monitoring
3. Port security
4. Tokenization

Correct Answer: 1

Explanation
DNS filtering compares requested domains against security or policy lists and can block access to malicious, suspicious, or prohibited websites.

Question 258

Which security property ensures that authorized users can access systems and information when needed?

1. Confidentiality
2. Integrity
3. Availability
4. Non-repudiation

Correct Answer: 3

Explanation
Availability ensures that systems, services, and information remain accessible to authorized users when required. Redundancy, backups, and fault-tolerant systems can improve availability.

Question 259

Which security practice involves assigning a sensitivity level such as public, confidential, or restricted to information?

1. Data classification
2. Data destruction
3. Data masking
4. Data replication

Correct Answer: 1

Explanation
Data classification categorizes information according to its sensitivity and business value. Classification helps determine the appropriate security controls for protecting each type of data.

Question 260

Which recovery metric measures the amount of time required to repair and restore a system after a failure?

1. MTTR
2. RPO
3. RTO
4. MTBF

Correct Answer: 1

Explanation
Mean Time to Repair (MTTR) measures the average time required to repair a failed system or restore it to operational status. A lower MTTR generally indicates faster recovery.