View Full CompTIA SY0-701 Exam Dumps and Practice Test Dumps.

 

Question 41

Which security control is designed to prevent unauthorized physical access to a restricted area?

1. Firewall
2. Mantrap
3. Encryption
4. Intrusion prevention system

Correct Answer: 2

Explanation

A mantrap is a physical security control that uses two or more interlocking doors to control access to a restricted area. Typically, one door must close before the second door can open. Mantraps help prevent unauthorized individuals from following an authorized person through a secured entrance and are commonly used in data centers and other sensitive facilities.

Question 42

Which type of authentication factor is represented by a fingerprint scan?

1. Something you know
2. Something you have
3. Something you are
4. Somewhere you are

Correct Answer: 3

Explanation

A fingerprint is an example of a biometric authentication factor, which is categorized as “something you are.” Biometric factors use unique physical or behavioral characteristics to verify a user’s identity. Other examples include facial recognition, iris scans, and voice recognition. Biometrics are commonly combined with other authentication factors to strengthen access controls.

Question 43

Which security mechanism is used to verify that data has not been altered during transmission?

1. Hashing
2. Data compression
3. Steganography
4. Tokenization

Correct Answer: 1

Explanation

Hashing generates a fixed-length value based on the contents of data. If the original data is modified, its resulting hash value will normally change. Comparing the calculated hash with a trusted hash can help determine whether data has been altered. Hashing is commonly used for integrity verification, password storage, and digital security applications.

Question 44

Which type of attack attempts to gain access by trying many possible password combinations?

1. Brute-force attack
2. Phishing attack
3. DDoS attack
4. Tailgating

Correct Answer: 1

Explanation

A brute-force attack attempts to discover a password by systematically trying many possible combinations until the correct one is found. Strong password policies, account lockout mechanisms, rate limiting, and multifactor authentication can make brute-force attacks more difficult. Organizations should also monitor authentication logs for repeated failed login attempts.

Question 45

Which security solution provides centralized collection and analysis of security-related events from multiple systems?

1. SIEM
2. VPN
3. NAC
4. HSM

Correct Answer: 1

Explanation

A security information and event management (SIEM) system collects and analyzes logs and security events from multiple sources such as servers, firewalls, applications, and endpoints. SIEM platforms can correlate events to identify suspicious patterns and provide alerts to security personnel. They also support investigation, monitoring, and compliance requirements.

Question 46

Which technology controls network access by checking the security posture of a device before allowing it to connect?

1. NAC
2. DNS
3. NAT
4. RAID

Correct Answer: 1

Explanation

Network access control (NAC) evaluates devices before or during network access based on defined security requirements. For example, NAC may verify whether a device has current security updates, approved antivirus software, or an appropriate configuration. Noncompliant devices can be denied access or placed into a restricted network segment.

Question 47

Which type of attack uses fraudulent emails or messages to persuade a specific individual to provide confidential information?

1. Spear phishing
2. Wardriving
3. Bluejacking
4. Dumpster diving

Correct Answer: 1

Explanation

Spear phishing is a targeted form of phishing directed at a specific individual or organization. Attackers often research their targets before creating convincing messages that appear to come from trusted sources. The objective may be to steal credentials, deliver malware, obtain sensitive information, or convince the victim to perform an unauthorized action.

Question 48

Which security principle requires an organization to use multiple layers of protection against threats?

1. Defense in depth
2. Least privilege
3. Separation of duties
4. Single sign-on

Correct Answer: 1

Explanation

Defense in depth uses multiple security controls so that the failure of one control does not automatically result in a successful compromise. An organization might combine firewalls, endpoint protection, access controls, encryption, monitoring, and security awareness training. This layered approach increases the difficulty of successfully attacking a system or network.

Question 49

Which type of malware disguises itself as legitimate software to trick a user into installing it?

1. Trojan
2. Worm
3. Virus
4. Adware

Correct Answer: 1

Explanation

A Trojan is malicious software that disguises itself as a legitimate application or file. Unlike a worm, a Trojan does not typically spread by automatically replicating itself. Attackers may use Trojans to establish unauthorized access, steal information, install additional malware, or perform other malicious activities after the user executes the program.

Question 50

Which security technology can isolate a compromised endpoint from the network while allowing security personnel to investigate it?

1. EDR
2. DHCP
3. DNS
4. RAID

Correct Answer: 1

Explanation

Endpoint detection and response (EDR) solutions continuously monitor endpoint activity and can detect suspicious behavior. Many EDR platforms provide response capabilities such as isolating a compromised endpoint from the network while maintaining management connectivity for investigation. This can help security teams contain threats and prevent an attacker from moving further through the environment.

Question 51

Which type of attack attempts to exploit a previously unknown vulnerability in software?

1. Zero-day attack
2. Password spraying
3. Phishing
4. Replay attack

Correct Answer: 1

Explanation

A zero-day attack exploits a vulnerability that is unknown to the vendor or for which no effective patch is yet available. Because defenders may not have had time to develop protections, zero-day vulnerabilities can present significant security risks. Organizations can reduce exposure through layered security controls, application monitoring, threat intelligence, and timely security updates when patches become available.

Question 52

Which access control model assigns permissions based on a user’s job responsibilities within an organization?

1. Role-based access control
2. Discretionary access control
3. Rule-based access control
4. Attribute-based access control

Correct Answer: 1

Explanation

Role-based access control (RBAC) assigns permissions according to predefined organizational roles. Instead of assigning every permission individually, administrators create roles such as administrator, manager, or employee and assign appropriate permissions to each role. Users then receive access based on the roles assigned to them, simplifying permission management.

Question 53

Which security technique replaces sensitive data with a randomly generated value that has no meaningful value outside the authorized system?

1. Tokenization
2. Hashing
3. Encryption
4. Encoding

Correct Answer: 1

Explanation

Tokenization replaces sensitive information with a token that can be used as a substitute for the original data. The token itself generally does not contain the original information and has little value if exposed outside the system that manages the token mapping. Tokenization is commonly used to reduce exposure of sensitive payment and personal information.

Question 54

Which type of social engineering attack involves an attacker creating a fabricated scenario to persuade a victim to reveal information?

1. Pretexting
2. Tailgating
3. Shoulder surfing
4. Dumpster diving

Correct Answer: 1

Explanation

Pretexting occurs when an attacker creates a believable story or scenario to manipulate a victim into providing information or performing an action. For example, an attacker might pretend to be a member of the IT department and request account details. Security awareness training and verification procedures can help employees recognize and resist pretexting attempts.

Question 55

Which cryptographic technology uses a public key and a private key for secure communication?

1. Symmetric encryption
2. Asymmetric encryption
3. Hashing
4. Data masking

Correct Answer: 2

Explanation

Asymmetric encryption uses a mathematically related public key and private key. The public key can be distributed openly, while the private key must be protected by its owner. Asymmetric cryptography is commonly used for secure key exchange, digital signatures, and establishing secure communications. It generally requires more computational resources than symmetric encryption.

Question 56

Which type of vulnerability occurs when two processes access shared resources in an unexpected sequence?

1. Race condition
2. Buffer overflow
3. SQL injection
4. Cross-site scripting

Correct Answer: 1

Explanation

A race condition occurs when the outcome of an operation depends on the timing or sequence of events involving multiple processes or threads. Attackers may attempt to exploit this condition to bypass security controls or manipulate shared resources. Secure synchronization mechanisms and proper programming practices can help prevent race conditions.

Question 57

Which attack attempts to use valid credentials obtained from one breached service to access accounts on other services?

1. Credential stuffing
2. Password spraying
3. Brute-force attack
4. Dictionary attack

Correct Answer: 1

Explanation

Credential stuffing uses previously compromised usernames and passwords to attempt authentication against other systems. This attack takes advantage of password reuse across different services. Multifactor authentication, unique passwords, breached-credential monitoring, and rate-limiting controls can significantly reduce the effectiveness of credential stuffing.

Question 58

Which security control is primarily used to protect sensitive data stored on a lost or stolen laptop?

1. Full-disk encryption
2. Network segmentation
3. Web filtering
4. Intrusion detection

Correct Answer: 1

Explanation

Full-disk encryption protects data stored on a device by encrypting the contents of the storage drive. If a laptop is lost or stolen, an unauthorized person generally cannot access the protected data without the required authentication or encryption key. Full-disk encryption is especially important for mobile devices that may contain sensitive organizational information.

Question 59

Which type of attack attempts to access a wireless network by discovering and exploiting available wireless signals?

1. Wardriving
2. Phishing
3. Pharming
4. Smishing

Correct Answer: 1

Explanation

Wardriving involves searching for wireless networks while moving through a geographic area, often using a vehicle or portable device. Attackers may identify wireless networks, determine their security configurations, and look for opportunities to gain unauthorized access. Organizations can reduce wireless risks through strong encryption, secure authentication, appropriate access points, and proper wireless configuration.

Question 60

Which incident response phase focuses on stopping the spread of a security incident and limiting its impact?

1. Recovery
2. Containment
3. Lessons learned
4. Preparation

Correct Answer: 2

Explanation

Containment is the incident response phase focused on limiting the scope and impact of an ongoing security incident. Actions may include isolating compromised systems, disabling affected accounts, blocking malicious network traffic, or separating affected network segments. Effective containment helps prevent an attacker or malware from spreading while the security team investigates and removes the underlying threat.