View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 221

Which security control is designed to prevent unauthorized software from executing on an endpoint?

1. Application allowlisting
2. Network segmentation
3. Data masking
4. Port mirroring

Correct Answer: 1

Explanation
Application allowlisting permits only approved applications to execute. This can prevent unknown or unauthorized software, including many types of malware, from running on an endpoint.

Question 222

Which type of attack uses fraudulent phone calls to convince victims to reveal sensitive information?

1. Smishing
2. Vishing
3. Pharming
4. Tailgating

Correct Answer: 2

Explanation
Vishing, or voice phishing, uses phone calls or voice communications to manipulate victims into providing credentials, financial information, or other sensitive data.

Question 223

Which security technology can analyze large volumes of log data from servers, endpoints, and network devices in one centralized platform?

1. SIEM
2. NAC
3. EDR
4. WAF

Correct Answer: 1

Explanation
A Security Information and Event Management (SIEM) platform collects and correlates logs from multiple sources. It helps security teams identify suspicious activity and investigate incidents.

Question 224

Which security control is specifically designed to protect web applications from attacks such as SQL injection and cross-site scripting?

1. WAF
2. VPN
3. NAC
4. HSM

Correct Answer: 1

Explanation
A Web Application Firewall (WAF) filters and monitors HTTP/HTTPS traffic to protect web applications from common application-layer attacks.

Question 225

An attacker attempts to gain higher permissions after compromising a standard user account. What type of attack is this?

1. Privilege escalation
2. Password spraying
3. Reconnaissance
4. Data exfiltration

Correct Answer: 1

Explanation
Privilege escalation occurs when an attacker attempts to obtain permissions beyond those originally assigned to the compromised account.

Question 226

Which technique protects sensitive information by replacing it with a value that cannot be used to directly identify the original data?

1. Tokenization
2. Port security
3. Network address translation
4. Load balancing

Correct Answer: 1

Explanation
Tokenization substitutes sensitive information with a token. The token itself does not contain the original sensitive value and can be mapped back to it only through an appropriate system.

Question 227

Which security control can prevent a compromised endpoint from communicating with other systems on the network?

1. Network isolation
2. Data classification
3. Password policy
4. File hashing

Correct Answer: 1

Explanation
Network isolation separates a compromised endpoint from other systems. This can limit lateral movement and help contain an active security incident.

Question 228

Which type of malware executes when a specific condition or event occurs?

1. Logic bomb
2. Worm
3. Rootkit
4. Spyware

Correct Answer: 1

Explanation
A logic bomb contains malicious code that activates when a predefined condition is met, such as a particular date, event, or system state.

Question 229

Which security mechanism provides proof that a message or document was created or approved by a particular party?

1. Digital signature
2. Password hash
3. VPN tunnel
4. MAC filtering

Correct Answer: 1

Explanation
A digital signature uses asymmetric cryptography to provide integrity and authentication of the signer. It can also support non-repudiation.

Question 230

Which method is most effective for reducing the risk associated with users reusing the same password across multiple systems?

1. Password managers
2. Disabling encryption
3. Removing account lockout
4. Sharing credentials

Correct Answer: 1

Explanation
Password managers can generate and securely store unique passwords for different services. This reduces password reuse and helps users maintain stronger credentials.

Question 231

Which attack attempts to discover valid usernames by observing differences in application responses?

1. Account enumeration
2. DDoS
3. Session hijacking
4. DNS poisoning

Correct Answer: 1

Explanation
Account enumeration occurs when an attacker determines whether specific usernames or accounts exist. Applications should avoid revealing noticeably different responses for valid and invalid accounts.

Question 232

Which technology can enforce security policies by controlling what devices are allowed to connect to a network?

1. NAC
2. WAF
3. HSM
4. SIEM

Correct Answer: 1

Explanation
Network Access Control (NAC) evaluates connecting devices and can enforce requirements such as authentication, security software status, and compliance before granting network access.

Question 233

Which type of attack attempts to access files outside the intended web application directory by manipulating a file path?

1. Directory traversal
2. Credential stuffing
3. Replay attack
4. DDoS

Correct Answer: 1

Explanation
Directory traversal manipulates file paths to access files or directories outside the application’s intended location. Proper input validation and access controls can help prevent it.

Question 234

Which security measure helps protect against unauthorized physical access by requiring a visitor to be accompanied by an authorized employee?

1. Escort policy
2. VLAN
3. Encryption
4. Password rotation

Correct Answer: 1

Explanation
An escort policy requires visitors to remain with an authorized employee while inside restricted areas. This reduces the risk of unauthorized physical access.

Question 235

Which security approach uses multiple controls such as authentication, segmentation, encryption, and monitoring to protect an environment?

1. Defense in depth
2. Single sign-on
3. Open access
4. Data minimization

Correct Answer: 1

Explanation
Defense in depth combines multiple independent security controls. If one layer fails, additional layers can still protect systems and information.

Question 236

Which type of backup contains all changes made since the last full backup?

1. Differential
2. Incremental
3. Snapshot
4. Mirror

Correct Answer: 1

Explanation
A differential backup stores changes made since the most recent full backup. Restoring generally requires the latest full backup and the latest differential backup.

Question 237

Which security technology can detect malicious behavior on an endpoint even when the specific malware signature is unknown?

1. Behavioral analysis
2. MAC filtering
3. Port security
4. Data classification

Correct Answer: 1

Explanation
Behavioral analysis identifies suspicious activity based on how software or processes behave rather than relying solely on known malware signatures.

Question 238

Which access control model assigns permissions according to a user’s job function or organizational role?

1. RBAC
2. DAC
3. MAC
4. Rule-based routing

Correct Answer: 1

Explanation
Role-Based Access Control (RBAC) assigns permissions to roles, and users receive access according to the roles assigned to them. This simplifies permission management in organizations.

Question 239

Which security measure can prevent employees from connecting unauthorized USB storage devices to corporate computers?

1. Device control
2. DNS filtering
3. Network load balancing
4. Data hashing

Correct Answer: 1

Explanation
Device control allows organizations to manage or restrict peripheral devices such as USB drives. It can reduce the risk of malware infections and unauthorized data transfers.

Question 240

Which incident response phase focuses on stopping an attacker from continuing to affect systems?

1. Containment
2. Lessons learned
3. Preparation
4. Reporting

Correct Answer: 1

Explanation
Containment focuses on limiting the impact and spread of an incident. Actions may include isolating affected systems, disabling compromised accounts, or blocking malicious network traffic.