View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 61

Which security control is used to restrict access to network resources based on a device’s MAC address?

1. Access control list
2. MAC filtering
3. Port mirroring
4. Network load balancing

Correct Answer: 2

Explanation

MAC filtering allows a network device to permit or deny connections based on the Media Access Control (MAC) addresses of devices. Administrators can create an allowlist or denylist of specific hardware addresses. Although MAC filtering can provide an additional layer of control, it should not be considered a complete security solution because MAC addresses can potentially be spoofed.

Question 62

A security analyst notices repeated login attempts using a small number of common passwords against many different accounts. Which attack is most likely occurring?

1. Credential stuffing
2. Password spraying
3. Brute-force attack
4. Rainbow table attack

Correct Answer: 2

Explanation

Password spraying attempts to authenticate against many accounts using a small list of commonly used passwords. Unlike a traditional brute-force attack, which may attempt many passwords against one account, password spraying spreads attempts across multiple accounts to reduce the likelihood of triggering account lockout mechanisms. Strong passwords and multifactor authentication can help mitigate this attack.

Question 63

Which technology provides a secure method for administrators to remotely manage network devices using encrypted communications?

1. Telnet
2. FTP
3. SSH
4. HTTP

Correct Answer: 3

Explanation

Secure Shell (SSH) provides encrypted remote access to systems and network devices. It protects authentication credentials and administrative commands while they are transmitted across the network. SSH is preferred over Telnet because Telnet transmits information, including credentials, without encryption.

Question 64

Which security mechanism is commonly used to securely store passwords so that the original password cannot easily be recovered?

1. Hashing
2. Plaintext storage
3. Encoding
4. Compression

Correct Answer: 1

Explanation

Password hashing converts a password into a fixed-length value using a one-way cryptographic function. Secure password storage typically combines hashing with unique salts and an appropriate password-hashing algorithm. If a password database is compromised, properly hashed and salted passwords are more difficult for attackers to recover than plaintext passwords.

Question 65

Which type of attack occurs when an attacker intercepts and potentially modifies communication between two parties?

1. Man-in-the-middle
2. Denial-of-service
3. Password spraying
4. Privilege escalation

Correct Answer: 1

Explanation

A man-in-the-middle (MITM) attack occurs when an attacker positions themselves between two communicating parties and intercepts their communications. The attacker may monitor, modify, or redirect the information being exchanged. Encryption, certificate validation, secure protocols, and strong authentication can help protect communications from MITM attacks.

Question 66

Which security solution is designed to prevent users from accessing websites that violate an organization’s security policy?

1. Web content filter
2. Load balancer
3. DHCP server
4. File server

Correct Answer: 1

Explanation

A web content filter controls access to websites and online content according to organizational policies. It can block categories such as malicious websites, inappropriate content, or known phishing domains. Web filtering can reduce exposure to web-based threats and help enforce acceptable-use policies.

Question 67

Which type of malicious software encrypts files and demands payment from the victim to restore access?

1. Ransomware
2. Spyware
3. Rootkit
4. Adware

Correct Answer: 1

Explanation

Ransomware is malware that typically encrypts files or otherwise prevents users from accessing their data and then demands payment from the victim. A successful ransomware incident can significantly disrupt business operations. Offline or immutable backups, endpoint protection, patch management, access controls, and security awareness can help reduce the risk and impact of ransomware.

Question 68

Which protocol is commonly used to securely transfer files by operating through an encrypted SSH connection?

1. TFTP
2. SFTP
3. FTP
4. SMTP

Correct Answer: 2

Explanation

Secure File Transfer Protocol (SFTP) provides encrypted file transfers through an SSH connection. It protects credentials and transferred data from interception while communicating over an untrusted network. SFTP is preferable to traditional FTP when sensitive information must be transferred securely.

Question 69

Which security principle focuses on preventing a single individual from having complete control over a critical business process?

1. Separation of duties
2. Least privilege
3. Job rotation
4. Mandatory access control

Correct Answer: 1

Explanation

Separation of duties ensures that critical responsibilities are divided among multiple individuals. This reduces the possibility that one person can perform unauthorized actions without oversight. For example, an employee who prepares a payment may be different from the employee who approves it.

Question 70

Which type of attack exploits a vulnerability in an application by injecting malicious script into content viewed by other users?

1. Cross-site scripting
2. SQL injection
3. Buffer overflow
4. Directory traversal

Correct Answer: 1

Explanation

Cross-site scripting (XSS) occurs when an attacker injects malicious scripts into web content that is subsequently executed in a victim’s browser. Depending on the vulnerability, an attacker may attempt to steal session information, manipulate web content, or perform actions on behalf of a victim. Input validation, output encoding, and appropriate security controls can help prevent XSS.

Question 71

Which security architecture places a public-facing web server in a separate network segment from an organization’s internal network?

1. DMZ
2. VLAN trunk
3. Intranet
4. Peer-to-peer network

Correct Answer: 1

Explanation

A demilitarized zone (DMZ) is a network segment designed to host systems that must be accessible from untrusted networks while keeping them separated from the internal network. Public-facing services such as web, email, and DNS servers may be placed in a DMZ. This segmentation limits the potential impact if a public-facing server is compromised.

Question 72

Which security control is primarily responsible for preventing unauthorized software from executing on an endpoint?

1. Application allowlisting
2. Data backup
3. Network address translation
4. Port forwarding

Correct Answer: 1

Explanation

Application allowlisting permits only approved applications to execute on a system. Unauthorized or unknown programs are blocked according to the organization’s security policy. This control can help prevent malware and unapproved software from running, particularly on systems that require a tightly controlled software environment.

Question 73

Which type of attack uses a fake DNS response to redirect users to a malicious website?

1. DNS poisoning
2. Password spraying
3. Credential stuffing
4. Tailgating

Correct Answer: 1

Explanation

DNS poisoning involves manipulating DNS information so that a domain name resolves to an incorrect or malicious IP address. Users may believe they are visiting a legitimate website while actually being redirected to an attacker’s site. DNS security mechanisms, secure DNS configurations, and certificate validation can help reduce the effectiveness of DNS-based attacks.

Question 74

Which type of security control is intended to discourage unauthorized activity by making an attacker aware that security measures are present?

1. Deterrent control
2. Corrective control
3. Recovery control
4. Compensating control

Correct Answer: 1

Explanation

A deterrent control is designed to discourage individuals from attempting unauthorized or malicious actions. Examples include warning banners, visible security cameras, security guards, and clearly posted security policies. These controls may not physically prevent an attack, but they can reduce the likelihood that an individual will attempt one.

Question 75

Which security control is designed to restore normal operations after a security incident has occurred?

1. Preventive control
2. Detective control
3. Corrective control
4. Deterrent control

Correct Answer: 3

Explanation

A corrective control is used to address the effects of a security incident and help restore systems to an operational state. Examples include restoring data from backups, removing malware, and repairing compromised configurations. Corrective controls are an important component of incident response and business continuity.

Question 76

Which cloud security concept ensures that customers are responsible for securing certain components while the cloud provider secures the underlying infrastructure?

1. Shared responsibility model
2. Zero Trust model
3. Defense-in-depth model
4. Open authentication model

Correct Answer: 1

Explanation

The shared responsibility model divides security responsibilities between the cloud service provider and the customer. The provider is generally responsible for protecting the underlying infrastructure, while the customer remains responsible for security tasks such as identities, configurations, applications, or data depending on the service model. Understanding these responsibilities helps organizations avoid security gaps in cloud environments.

Question 77

Which wireless security protocol provides stronger protection than WPA and uses AES-based encryption?

1. WEP
2. WPA2
3. WPA
4. Open authentication

Correct Answer: 2

Explanation

WPA2 provides stronger wireless security than the older WEP and WPA standards and commonly uses AES-based encryption through CCMP. Organizations should use modern wireless security configurations and strong authentication methods whenever supported. Legacy protocols such as WEP should be avoided because of known security weaknesses.

Question 78

Which type of attack attempts to use an operating system command through an application’s input field?

1. Command injection
2. SQL injection
3. Cross-site scripting
4. Replay attack

Correct Answer: 1

Explanation

Command injection occurs when an attacker manipulates application input so that operating system commands are executed by the underlying system. If successful, this attack may allow unauthorized access to system resources or execution of malicious commands. Input validation, secure coding practices, least privilege, and avoiding unsafe command execution methods can help prevent command injection.

Question 79

Which security measure provides an additional layer of protection by requiring a user to approve a login through a separate device?

1. Multifactor authentication
2. Single sign-on
3. Password synchronization
4. Account federation

Correct Answer: 1

Explanation

Multifactor authentication requires more than one authentication factor to verify a user’s identity. A login approval through a separate device can represent a possession factor when used alongside a password or another factor. This additional requirement can help prevent unauthorized access even when an attacker has obtained the user’s password.

Question 80

Which disaster recovery metric defines the maximum acceptable amount of data that an organization can lose after an incident?

1. RTO
2. RPO
3. MTTR
4. SLA

Correct Answer: 2

Explanation

The Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss measured in time. For example, an organization with an RPO of one hour should have recovery mechanisms capable of restoring data to a point no more than approximately one hour before the disruption. RPO helps organizations determine appropriate backup frequency and data replication requirements.