View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 201

Which security concept ensures that a user cannot deny having performed a particular action?

1. Availability
2. Non-repudiation
3. Confidentiality
4. Redundancy

Correct Answer: 2

Explanation
Non-repudiation provides evidence that a specific party performed an action. Digital signatures are commonly used to support non-repudiation.

Question 202

Which security solution analyzes user and entity behavior to identify unusual activity?

1. UEBA
2. NAC
3. DLP
4. FIM

Correct Answer: 1

Explanation
User and Entity Behavior Analytics (UEBA) establishes normal behavioral patterns and identifies unusual activities that may indicate compromised accounts or insider threats.

Question 203

Which attack attempts to overwhelm a service by sending it an excessive amount of traffic or requests?

1. DDoS
2. Phishing
3. Directory traversal
4. Credential stuffing

Correct Answer: 1

Explanation
A Distributed Denial-of-Service (DDoS) attack uses multiple systems or sources to overwhelm a target with traffic or requests, potentially making the service unavailable to legitimate users.

Question 204

Which security practice removes unnecessary services, applications, and ports from a system to reduce its attack surface?

1. System hardening
2. Data masking
3. Tokenization
4. Federation

Correct Answer: 1

Explanation
System hardening reduces attack opportunities by disabling unnecessary services, removing unused software, closing unnecessary ports, and applying secure configurations.

Question 205

Which attack tricks a user into visiting a malicious website by manipulating DNS information?

1. DNS poisoning
2. Smishing
3. Vishing
4. Shoulder surfing

Correct Answer: 1

Explanation
DNS poisoning corrupts DNS information so that users can be redirected to an attacker-controlled destination instead of the legitimate website.

Question 206

Which security control can automatically block known malicious network traffic based on detected attack signatures?

1. IPS
2. IDS
3. Passive tap
4. Syslog server

Correct Answer: 1

Explanation
An Intrusion Prevention System (IPS) monitors traffic and can actively block malicious activity. Signature-based detection is commonly used to identify known threats.

Question 207

Which type of vulnerability occurs when an application allows a user to access resources belonging to another user by changing an identifier in a request?

1. IDOR
2. XSS
3. SQL injection
4. Buffer overflow

Correct Answer: 1

Explanation
Insecure Direct Object Reference (IDOR) occurs when an application exposes references to objects without properly verifying authorization. An attacker may modify an identifier to access another user’s data.

Question 208

Which security mechanism uses cryptographic hashes to detect whether a file has been modified?

1. File Integrity Monitoring
2. Network Address Translation
3. Single Sign-On
4. Network Access Control

Correct Answer: 1

Explanation
File Integrity Monitoring (FIM) can calculate and compare cryptographic hashes to detect unauthorized changes to files.

Question 209

Which type of encryption uses a public key to encrypt information and a corresponding private key to decrypt it?

1. Symmetric encryption
2. Asymmetric encryption
3. Hashing
4. Tokenization

Correct Answer: 2

Explanation
Asymmetric encryption uses a key pair consisting of a public key and a private key. Data encrypted with the appropriate public key can be decrypted using the corresponding private key.

Question 210

Which attack attempts to exploit a newly discovered vulnerability before a security patch is available?

1. Zero-day attack
2. Replay attack
3. Password spraying
4. Phishing attack

Correct Answer: 1

Explanation
A zero-day attack exploits a vulnerability before the vendor has released an effective patch or before defenders have had sufficient opportunity to address it.

Question 211

Which security control is intended to discourage attackers by making them believe that an attack will be detected or prevented?

1. Deterrent control
2. Corrective control
3. Recovery control
4. Detective control

Correct Answer: 1

Explanation
Deterrent controls discourage unwanted behavior. Warning signs, security cameras, and visible security personnel can discourage potential attackers.

Question 212

Which type of control restores a system to normal operation after a security incident?

1. Preventive
2. Detective
3. Corrective
4. Deterrent

Correct Answer: 3

Explanation
Corrective controls are designed to fix or restore systems after an incident. Examples include restoring data from backups and removing malware from affected systems.

Question 213

Which cloud security model requires the customer to secure their data, identities, and configurations while the provider secures the underlying infrastructure?

1. Shared responsibility model
2. Zero trust model
3. Bell-LaPadula model
4. Open access model

Correct Answer: 1

Explanation
The shared responsibility model divides security responsibilities between the cloud provider and customer. The exact responsibilities vary depending on the cloud service being used.

Question 214

Which wireless security standard provides stronger protection than WPA and uses AES-based encryption?

1. WEP
2. WPA2
3. Open authentication
4. TKIP

Correct Answer: 2

Explanation
WPA2 uses the stronger AES-based CCMP encryption mechanism and provides significantly better security than older WEP and WPA configurations.

Question 215

Which attack occurs when malicious input is inserted into an operating system command executed by an application?

1. Command injection
2. SQL injection
3. XSS
4. Pharming

Correct Answer: 1

Explanation
Command injection occurs when an attacker manipulates application input so that unintended operating system commands are executed by the underlying system.

Question 216

Which authentication method requires a user to provide two or more different types of authentication factors?

1. SSO
2. MFA
3. Federation
4. LDAP

Correct Answer: 2

Explanation
Multi-Factor Authentication (MFA) requires multiple authentication factors, such as a password combined with a hardware security key or biometric factor.

Question 217

Which attack captures valid authentication data and later retransmits it to gain unauthorized access?

1. Replay attack
2. DDoS
3. Tailgating
4. Dumpster diving

Correct Answer: 1

Explanation
A replay attack captures valid authentication information, such as a session token or authentication exchange, and retransmits it later in an attempt to gain access.

Question 218

Which security technique isolates potentially malicious software from the rest of a system while it executes?

1. Sandboxing
2. Port forwarding
3. Tokenization
4. Data classification

Correct Answer: 1

Explanation
Sandboxing runs applications or files in an isolated environment. This limits their ability to affect the underlying operating system or other resources.

Question 219

Which process involves reviewing system configurations to ensure they remain consistent with approved security settings?

1. Configuration monitoring
2. Password spraying
3. Data destruction
4. Credential stuffing

Correct Answer: 1

Explanation
Configuration monitoring checks systems against approved baselines and can identify unauthorized or potentially insecure configuration changes.

Question 220

Which security principle requires an organization to maintain multiple independent layers of protection?

1. Defense in depth
2. Least privilege
3. Separation of duties
4. Need to know

Correct Answer: 1

Explanation
Defense in depth uses multiple security layers, such as firewalls, endpoint protection, access controls, monitoring, and encryption, so that failure of one control does not completely compromise the environment.