View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 281

Which security control is used to verify that a device meets organizational security requirements before allowing network access?

1. WAF
2. SIEM
3. NAC
4. HSM

Correct Answer: 3

Explanation

Network Access Control (NAC) verifies whether a device meets organizational security requirements before granting network access. It can check authentication, patch status, antivirus protection, device configuration, and other security policies. If a device does not meet the required standards, NAC can block or restrict its access until compliance is achieved. WAF protects web applications, SIEM analyzes security events, and HSM manages cryptographic keys. Therefore, NAC is the correct answer.

Question 282

Which attack attempts to obtain sensitive information by manipulating a victim through a fabricated scenario?

1. Wardriving
2. DDoS
3. Port scanning
4. Pretexting

Correct Answer: 4

Explanation

Pretexting is a social engineering technique in which an attacker creates a believable but fabricated scenario to manipulate a victim into revealing sensitive information or performing a specific action. The attacker may pretend to be a trusted person, such as a coworker, bank representative, or technical support agent. Wardriving involves searching for wireless networks, DDoS attacks overwhelm systems with traffic, and port scanning identifies open network ports. Therefore, Pretexting is the correct answer.

Question 283

Which security technology protects data by converting readable information into an unreadable format using a cryptographic key?

1. Encryption
2. Hashing
3. Tokenization
4. Data classification

Correct Answer: 1

Explanation

Encryption protects sensitive data by converting readable plaintext into an unreadable format called ciphertext using a cryptographic algorithm and key. Only authorized users with the appropriate decryption key can restore the data to its original form. Hashing converts data into a fixed-length value and is generally designed to be irreversible. Tokenization replaces sensitive data with non-sensitive tokens, while data classification categorizes information based on sensitivity. Therefore, Encryption is the correct answer.

Question 284

Which type of attack attempts to discover wireless networks and their characteristics while moving through an area?

1. Tailgating
2. Pharming
3. Wardriving
4. Vishing

Correct Answer: 3

Explanation

Wardriving is an attack or reconnaissance technique that involves searching for and identifying wireless networks while moving through a specific area. Attackers may use laptops, smartphones, GPS devices, and specialized software to detect nearby Wi-Fi networks and collect details such as network names, signal strength, and security settings. Tailgating involves unauthorized physical access, pharming redirects users to fraudulent websites, and vishing uses voice-based social engineering. Therefore, Wardriving is the correct answer.

Question 285

Which security control is designed to prevent unauthorized physical access to a server room by requiring authentication at the entrance?

1. Firewall
2. Badge reader
3. IDS
4. Proxy server

Correct Answer: 2

Explanation

A badge reader is a physical security control used to restrict access to sensitive areas such as server rooms. It requires users to present an authorized credential, such as an access card or badge, before allowing entry. This helps ensure that only approved personnel can enter restricted facilities. A firewall protects network traffic, an IDS detects suspicious activity, and a proxy server manages or filters network requests. Therefore, Badge reader is the correct answer.

Question 286

Which cryptographic technique produces a fixed-length value from input data and is commonly used to verify data integrity?

1. Encryption
2. Tokenization
3. Steganography
4. Hashing

Correct Answer: 4

Explanation

Hashing is a cryptographic technique that converts input data into a fixed-length value called a hash or digest. Even a small change in the original data typically produces a different hash, making hashing useful for verifying data integrity. Encryption protects data by making it unreadable, tokenization replaces sensitive information with tokens, and steganography hides information within another file or medium. Therefore, Hashing is the correct answer.

Question 287

Which attack attempts to use a stolen authentication token to access a user’s account?

1. Dumpster diving
2. Session hijacking
3. Password spraying
4. DNS poisoning

Correct Answer: 2

Explanation

Session hijacking is an attack in which an attacker obtains a valid session token or identifier and uses it to impersonate an authenticated user. By stealing the token, the attacker may gain access to the victim’s account without needing to know the password. Dumpster diving involves searching discarded materials for sensitive information, password spraying attempts common passwords against multiple accounts, and DNS poisoning manipulates DNS responses. Therefore, Session hijacking is the correct answer.

Question 288

Which security control provides a warning that unauthorized activity is prohibited and may be monitored?

1. Honeypot
2. Encryption
3. Load balancer
4. Banner

Correct Answer: 4

Explanation

A banner is a security control that displays a warning to users before or during system access, stating that unauthorized activity is prohibited and that system use may be monitored. It helps communicate organizational security policies and can provide legal notice about acceptable use and monitoring. A honeypot is a decoy system designed to attract and detect attackers, encryption protects data, and a load balancer distributes network traffic across multiple systems. Therefore, Banner is the correct answer.

Question 289

Which security solution is specifically designed to filter malicious or unauthorized web requests before they reach a web application?

1. WAF
2. NAC
3. SIEM
4. EDR

Correct Answer: 1

Explanation

A Web Application Firewall (WAF) protects web applications by inspecting incoming HTTP and HTTPS requests before they reach the application. It can detect and block malicious or unauthorized traffic, including common attacks such as SQL injection and cross-site scripting. NAC controls network access based on device or user requirements, SIEM collects and analyzes security events, while EDR monitors and responds to threats affecting endpoints. Therefore, WAF is the correct answer.

Question 290

Which type of attack exploits an application by inserting unexpected commands into user-supplied input?

1. Tailgating
2. DDoS
3. Injection
4. Shoulder surfing

Correct Answer: 3

Explanation

Injection attacks occur when an attacker inserts malicious or unexpected commands into user-supplied input, causing an application to interpret the input as legitimate commands or queries. Common examples include SQL injection, which targets databases, and command injection, which attempts to execute operating system commands. Tailgating involves unauthorized physical entry, DDoS attacks overwhelm systems with excessive traffic, and shoulder surfing involves observing sensitive information directly. Therefore, Injection is the correct answer.

Question 291

Which security principle requires every access request to be evaluated rather than automatically trusting users inside the corporate network?

1. Open trust
2. Implicit trust
3. Network flattening
4. Zero trust

Correct Answer: 4

Explanation

Zero trust is a security principle that requires every access request to be verified and authorized, regardless of whether the user or device is inside or outside the corporate network. It assumes that no user, device, or connection should be automatically trusted. Access decisions can consider factors such as identity, device security, location, and requested resources. Open trust and implicit trust rely on automatic trust, while network flattening refers to network architecture rather than an access control principle. Therefore, Zero trust is the correct answer.

Question 292

Which security technology can detect unusual login behavior based on established patterns for a user?

1. DHCP
2. UEBA
3. NAT
4. RAID

Correct Answer: 2

Explanation

User and Entity Behavior Analytics (UEBA) monitors user and system activity to establish normal behavioral patterns and identify unusual or suspicious behavior. It can detect anomalies such as unexpected login locations, unusual access times, abnormal resource usage, or changes in typical activity. DHCP assigns IP addresses, NAT translates private and public IP addresses, while RAID provides data redundancy and performance improvements for storage systems. Therefore, UEBA is the correct answer.

Question 293

Which type of authentication factor is represented by a password or PIN?

1. Something you know
2. Something you have
3. Something you are
4. Somewhere you are

Correct Answer: 1

Explanation

Passwords and PINs are authentication factors classified as “something you know” because they rely on information that the user remembers and provides during the authentication process. “Something you have” refers to a physical item, such as a security token or smart card. “Something you are” refers to biometric characteristics, such as fingerprints or facial features. “Somewhere you are” represents a location-based factor, such as a specific geographic area or trusted network. Therefore, Something you know is the correct answer.

Question 294

Which security mechanism can restrict access to a network based on the physical location of a user or device?

1. Tokenization
2. Hashing
3. Geofencing
4. File integrity monitoring

Correct Answer: 3

Explanation

Geofencing is a security mechanism that uses defined geographic boundaries to control or trigger actions based on the physical location of a user or device. Organizations can use geofencing to restrict access to systems or resources when a device moves outside an approved area. Tokenization replaces sensitive information with tokens, hashing generates fixed-length values for data verification, while file integrity monitoring detects unauthorized changes to files. Therefore, Geofencing is the correct answer.

Question 295

Which type of backup stores only the changes made since the most recent backup of any type?

1. Differential
2. Full
3. Mirror
4. Incremental

Correct Answer: 4

Explanation

An incremental backup stores only the data that has changed since the most recent backup, regardless of whether it was a full or another incremental backup. This approach reduces backup time and storage requirements because only new or modified data is saved. A differential backup stores changes made since the last full backup, while a full backup copies all selected data. A mirror backup maintains an exact copy of the source data. Therefore, Incremental is the correct answer.

Question 296

Which security control can automatically block network traffic that matches a known malicious signature?

1. IDS
2. IPS
3. SIEM
4. Syslog

Correct Answer: 2

Explanation

An Intrusion Prevention System (IPS) monitors network traffic for known malicious patterns, signatures, and suspicious activity. When it detects traffic matching a known threat, it can automatically block or prevent that traffic from reaching protected systems. An IDS can detect and alert on suspicious activity but typically does not block it automatically. SIEM collects and analyzes security logs from multiple sources, while Syslog is a protocol used to transmit and store system messages. Therefore, IPS is the correct answer.

Question 297

Which type of attack occurs when an attacker follows an authorized person through a secured entrance without using their own credentials?

1. Phishing
2. Pharming
3. Tailgating
4. Credential stuffing

Correct Answer: 3

Explanation

Tailgating is a physical security attack in which an unauthorized person follows an authorized individual through a secured entrance without providing their own credentials. The attacker may take advantage of courtesy or distraction to gain access to a restricted area. Phishing uses deceptive messages to steal information, pharming redirects users to fraudulent websites, and credential stuffing uses stolen username and password combinations to access accounts. Physical access controls, security personnel, and user awareness can help prevent tailgating. Therefore, Tailgating is the correct answer.

Question 298

Which security practice ensures that an organization’s critical data can be restored after ransomware or another destructive incident?

1. Backup and recovery
2. Port scanning
3. Traffic shaping
4. Account enumeration

Correct Answer: 1

Explanation

Backup and recovery practices help organizations restore critical data after ransomware attacks, system failures, accidental deletion, or other destructive incidents. Regular backups should be stored securely and recovery procedures should be tested to ensure data can be restored when needed. Offline or immutable backups provide additional protection because attackers may be unable to modify or encrypt them. Port scanning identifies open ports, traffic shaping manages network bandwidth, and account enumeration identifies valid accounts. Therefore, Backup and recovery is the correct answer.

Question 299

Which security assessment identifies systems, services, or applications that may contain known vulnerabilities?

1. Data classification
2. Incident containment
3. Account provisioning
4. Vulnerability scanning

Correct Answer: 4

Explanation

Vulnerability scanning is a security assessment that uses automated tools to identify known weaknesses in systems, applications, network services, and devices. The results can help security teams determine which vulnerabilities require attention and prioritize remediation based on risk. Data classification organizes information according to sensitivity, incident containment limits the impact of a security incident, and account provisioning creates or manages user accounts and access permissions. Therefore, Vulnerability scanning is the correct answer.

Question 300

Which security control is primarily responsible for recording events such as successful and failed user logins?

1. Data masking
2. Tokenization
3. Audit logging
4. Network segmentation

Correct Answer: 3

Explanation

Audit logging records security-relevant events such as successful and failed login attempts, administrative activities, system changes, and access requests. These records help security teams monitor user activity, investigate suspicious behavior, identify potential incidents, and meet compliance requirements. Data masking hides sensitive information, tokenization replaces sensitive data with tokens, while network segmentation separates networks or systems to limit unauthorized access. Audit logs therefore provide an important record of authentication and other security-related activities. Therefore, Audit logging is the correct answer.