View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 81

Which security control is primarily used to identify and block unauthorized devices from connecting to a corporate network?

1. Network access control
2. Data loss prevention
3. File integrity monitoring
4. Security information and event management

Correct Answer: 1

Explanation

Network access control (NAC) evaluates devices attempting to connect to a network and can enforce access policies based on factors such as device identity, security configuration, and compliance status. NAC can prevent unauthorized or noncompliant devices from gaining normal network access. Organizations may place noncompliant devices into a restricted network until security requirements are satisfied.

Question 82

Which security technology is designed to prevent sensitive information from being transmitted outside an organization without authorization?

1. Data loss prevention
2. Intrusion detection system
3. Network load balancer
4. Virtual private network

Correct Answer: 1

Explanation

Data loss prevention (DLP) solutions monitor, detect, and control the movement of sensitive information. They can identify protected data in emails, files, cloud applications, and network traffic and apply policies to prevent unauthorized disclosure. DLP is commonly used to protect information such as financial records, intellectual property, and personally identifiable information.

Question 83

Which type of attack attempts to use a previously captured authentication exchange to gain unauthorized access?

1. Replay attack
2. DDoS attack
3. Phishing attack
4. Directory traversal

Correct Answer: 1

Explanation

A replay attack occurs when an attacker captures legitimate authentication data or a network transmission and later retransmits it to gain unauthorized access. Even if the attacker cannot understand the captured information, they may attempt to reuse it. Timestamps, nonces, session tokens, and challenge-response authentication can help prevent replay attacks.

Question 84

Which security technology allows users to authenticate once and access multiple authorized applications without logging in separately to each one?

1. Single sign-on
2. Password spraying
3. Privileged access management
4. Network access control

Correct Answer: 1

Explanation

Single sign-on (SSO) allows a user to authenticate once and then access multiple authorized applications or services. This can improve usability and reduce the number of passwords users need to manage. Centralized authentication also gives administrators greater control over account access and makes it easier to enforce authentication policies.

Question 85

Which type of security control detects suspicious activity and generates an alert without automatically blocking the traffic?

1. IPS
2. IDS
3. Firewall
4. Proxy

Correct Answer: 2

Explanation

An intrusion detection system (IDS) monitors network or system activity for suspicious behavior and generates alerts when potential threats are identified. Unlike an intrusion prevention system (IPS), an IDS generally does not automatically block the detected activity. Security personnel can review IDS alerts and determine the appropriate response.

Question 86

Which authentication method uses a temporary code that changes after a short period of time?

1. One-time password
2. Static password
3. Security question
4. PIN reuse

Correct Answer: 1

Explanation

A one-time password (OTP) is a temporary authentication code that is typically valid for only one authentication attempt or a limited period. Time-based one-time passwords (TOTP) generate codes that change at regular intervals. OTPs can provide an additional authentication factor when combined with a password or another credential.

Question 87

Which type of attack attempts to access files outside the intended web application directory by manipulating file path information?

1. Directory traversal
2. SQL injection
3. Cross-site scripting
4. Credential stuffing

Correct Answer: 1

Explanation

A directory traversal attack attempts to access files or directories outside the application’s intended directory by manipulating path information. If successful, an attacker may access sensitive configuration files, credentials, or other restricted resources. Proper input validation, access controls, and secure file-handling practices can help prevent directory traversal vulnerabilities.

Question 88

Which security solution is specifically designed to manage and monitor accounts with elevated administrative privileges?

1. Privileged access management
2. Network access control
3. Data loss prevention
4. Web application firewall

Correct Answer: 1

Explanation

Privileged access management (PAM) controls and monitors accounts that have elevated permissions. PAM solutions can restrict administrative access, enforce stronger authentication, record privileged sessions, and provide temporary access when required. Limiting privileged access reduces the potential impact of compromised administrator accounts.

Question 89

Which type of firewall can inspect application-layer traffic and apply rules based on specific applications?

1. Next-generation firewall
2. Packet-filtering firewall
3. Circuit-level gateway
4. Stateless firewall

Correct Answer: 1

Explanation

A next-generation firewall (NGFW) provides advanced traffic inspection capabilities beyond traditional port and protocol filtering. It can identify applications, users, and threats and apply security policies based on those characteristics. NGFWs may also integrate features such as intrusion prevention, URL filtering, and malware detection.

Question 90

Which security technique hides sensitive information by replacing portions of the original data with substitute characters?

1. Data masking
2. Data replication
3. Data deduplication
4. Data compression

Correct Answer: 1

Explanation

Data masking hides sensitive information by replacing all or part of the original data with characters or substitute values. For example, a payment card number may be displayed with only its last few digits visible. Data masking allows authorized personnel to work with data without unnecessarily exposing sensitive information.

Question 91

Which type of attack targets a user’s mobile phone by sending a fraudulent text message containing a malicious link?

1. Smishing
2. Vishing
3. Pharming
4. Pretexting

Correct Answer: 1

Explanation

Smishing is a form of phishing that uses SMS or other text messaging services to target victims. Attackers may send fraudulent messages containing malicious links, requests for credentials, or instructions to perform unsafe actions. Users should verify unexpected messages through trusted channels rather than clicking suspicious links or providing sensitive information.

Question 92

Which type of social engineering attack uses a fraudulent phone call to persuade a victim to provide sensitive information?

1. Vishing
2. Smishing
3. Tailgating
4. Shoulder surfing

Correct Answer: 1

Explanation

Vishing, or voice phishing, uses telephone calls or voice communication to manipulate victims into revealing sensitive information. Attackers may impersonate banks, technical support personnel, government representatives, or company employees. User awareness training and procedures for independently verifying requests can help reduce the risk of vishing attacks.

Question 93

Which security control is designed to prevent unauthorized users from following an authorized person through a secured entrance?

1. Mantrap
2. Bollard
3. Firewall
4. Honeypot

Correct Answer: 1

Explanation

A mantrap uses two or more controlled doors to regulate physical entry into a secure area. The first door must typically close before the second door can be opened. This arrangement helps prevent tailgating and allows security personnel or access systems to verify individuals before they enter sensitive areas.

Question 94

Which security technology is designed to detect and block malicious HTTP or HTTPS requests targeting a web application?

1. Web application firewall
2. Network access control
3. VPN concentrator
4. Mail gateway

Correct Answer: 1

Explanation

A web application firewall (WAF) monitors HTTP and HTTPS traffic directed toward web applications. It can detect and block attacks such as SQL injection, cross-site scripting, and other malicious web requests. A WAF provides an additional security layer between users and web applications and can help protect vulnerable applications while developers address underlying issues.

Question 95

Which type of attack attempts to gain unauthorized access by exploiting excessive permissions assigned to a legitimate account?

1. Privilege escalation
2. Phishing
3. Replay attack
4. DDoS

Correct Answer: 1

Explanation

Privilege escalation occurs when an attacker or malicious process obtains permissions beyond those originally authorized. Vertical privilege escalation involves gaining higher-level permissions, such as administrator privileges, while horizontal escalation involves accessing resources belonging to another user with a similar privilege level. Least privilege and regular permission reviews can help reduce this risk.

Question 96

Which security approach requires administrators to assume that a network may already be compromised?

1. Zero Trust
2. Open trust
3. Perimeter-only security
4. Single-factor security

Correct Answer: 1

Explanation

Zero Trust operates on the assumption that no user, device, or network connection should automatically be trusted. Access requests should be authenticated, authorized, and evaluated based on security context before access is granted. This approach reduces reliance on traditional network boundaries and limits the potential impact of compromised accounts or devices.

Question 97

Which type of backup contains all data changed since the last full backup?

1. Incremental backup
2. Differential backup
3. Full backup
4. Snapshot backup

Correct Answer: 2

Explanation

A differential backup contains all data that has changed since the most recent full backup. As additional differential backups are created, each one generally becomes larger because it includes changes accumulated since the last full backup. During restoration, the most recent full backup and the most recent differential backup are typically required.

Question 98

Which security mechanism is used to verify the identity of a server during an encrypted web connection?

1. Digital certificate
2. Password hash
3. Security token
4. Access control list

Correct Answer: 1

Explanation

A digital certificate binds an identity to a public key and is commonly used to authenticate servers during encrypted connections. Certificates are issued by trusted certificate authorities and contain information that allows clients to verify the server’s identity. This process is an important part of Transport Layer Security (TLS) communications.

Question 99

Which type of attack attempts to discover a password by comparing its hash against a precomputed list of hash values?

1. Rainbow table attack
2. Password spraying
3. Credential stuffing
4. Phishing

Correct Answer: 1

Explanation

A rainbow table attack uses precomputed tables containing password hashes to help recover passwords from compromised password databases. Salting passwords makes precomputed tables much less effective because the same password produces different hash values when different salts are used. Strong password-hashing algorithms and unique salts are therefore important for secure password storage.

Question 100

Which disaster recovery metric identifies the maximum acceptable time required to restore a service after an outage?

1. RPO
2. RTO
3. MTBF
4. SLA

Correct Answer: 2

Explanation

The Recovery Time Objective (RTO) defines the maximum acceptable amount of time an organization expects a system or service to be unavailable after a disruption. A shorter RTO generally requires faster recovery processes and may require additional infrastructure or resources. RTO helps organizations establish appropriate disaster recovery strategies and priorities.