{"id":11567,"date":"2026-09-14T10:28:47","date_gmt":"2026-09-14T10:28:47","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11567"},"modified":"2026-09-14T11:08:53","modified_gmt":"2026-09-14T11:08:53","slug":"comptia-security-sy0-701-practice-test-questions-and-exam-dumps-part-8-q141-160","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/comptia-security-sy0-701-practice-test-questions-and-exam-dumps-part-8-q141-160\/","title":{"rendered":"CompTIA Security+ SY0-701 Practice Test Questions and Exam Dumps \u2014 Part 8 (Q141\u2013160)"},"content":{"rendered":"

View Full\u00a0CompTIA SY0-701 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/h3>\n

 <\/p>\n

Question 141<\/b><\/h3>\n

Which security control is used to prevent unauthorized users from connecting to a switch port?<\/b><\/p>\n

    \n
  1. Port security<\/span><\/li>\n
  2. Network address translation<\/span><\/li>\n
  3. Load balancing<\/span><\/li>\n
  4. DNS filtering<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    Port security is a network switch feature that controls which devices can connect to individual switch ports. Administrators can restrict access based on MAC addresses and define actions when unauthorized devices are detected. This helps prevent unauthorized endpoints from gaining network access through available switch ports.<\/span><\/p>\n

    Question 142<\/b><\/h3>\n

    Which type of attack attempts to discover valid usernames by analyzing differences in application responses?<\/b><\/p>\n

      \n
    1. Account enumeration<\/span><\/li>\n
    2. Credential stuffing<\/span><\/li>\n
    3. Password spraying<\/span><\/li>\n
    4. Brute-force attack<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Account enumeration occurs when an attacker determines whether specific user accounts exist by observing application responses, error messages, timing, or other differences. Once valid usernames are identified, attackers may use them in subsequent password attacks. Applications should avoid revealing unnecessary information about whether an account exists.<\/span><\/p>\n

      Question 143<\/b><\/h3>\n

      Which security technology provides centralized authentication and authorization for network devices using a dedicated server?<\/b><\/p>\n

        \n
      1. AAA<\/span><\/li>\n
      2. NAT<\/span><\/li>\n
      3. DHCP<\/span><\/li>\n
      4. DNS<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Authentication, authorization, and accounting (AAA) provides centralized control over access to network devices and other resources. Authentication verifies a user’s identity, authorization determines what the user is allowed to do, and accounting records relevant activity. Protocols such as RADIUS and TACACS+ can provide AAA functionality.<\/span><\/p>\n

        Question 144<\/b><\/h3>\n

        Which type of malware remains inactive until a specific condition or event occurs?<\/b><\/p>\n

          \n
        1. Logic bomb<\/span><\/li>\n
        2. Worm<\/span><\/li>\n
        3. Spyware<\/span><\/li>\n
        4. Trojan<\/span><\/li>\n<\/ol>\n

          Correct Answer: 1<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          A logic bomb is malicious code that remains dormant until a predefined condition is met. The trigger could be a particular date, deletion of an account, or another specified event. Once activated, the logic bomb may delete data, disrupt services, or perform other malicious actions.<\/span><\/p>\n

          Question 145<\/b><\/h3>\n

          Which security control can prevent users from connecting unauthorized removable storage devices to company computers?<\/b><\/p>\n

            \n
          1. Device control<\/span><\/li>\n
          2. Network segmentation<\/span><\/li>\n
          3. Web filtering<\/span><\/li>\n
          4. Load balancing<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Device control allows organizations to manage which hardware devices can connect to endpoints. Administrators can restrict or block removable media such as USB storage devices based on organizational policies. This helps reduce risks associated with malware infections, unauthorized data transfers, and data exfiltration.<\/span><\/p>\n

            Question 146<\/b><\/h3>\n

            Which type of attack attempts to exploit weaknesses in an application’s handling of user-supplied file names or paths?<\/b><\/p>\n

              \n
            1. Directory traversal<\/span><\/li>\n
            2. Password spraying<\/span><\/li>\n
            3. Replay attack<\/span><\/li>\n
            4. DDoS attack<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Directory traversal attacks manipulate file paths to access files or directories outside the intended application directory. Attackers may attempt to retrieve sensitive configuration files, credentials, or system information. Input validation, canonicalization, and proper access controls can help prevent unauthorized file access.<\/span><\/p>\n

              Question 147<\/b><\/h3>\n

              Which security technology can identify malicious behavior by analyzing how an application or process normally operates?<\/b><\/p>\n

                \n
              1. Behavioral analysis<\/span><\/li>\n
              2. MAC filtering<\/span><\/li>\n
              3. Data masking<\/span><\/li>\n
              4. Port forwarding<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Behavioral analysis identifies suspicious activity by examining the actions and behavior of applications, processes, users, or devices. Unlike signature-based detection, it can potentially identify previously unknown threats that exhibit abnormal behavior. Behavioral detection is commonly used as part of modern endpoint and network security solutions.<\/span><\/p>\n

                Question 148<\/b><\/h3>\n

                Which type of social engineering involves following an authorized person through a secure entrance without using proper credentials?<\/b><\/p>\n

                  \n
                1. Tailgating<\/span><\/li>\n
                2. Vishing<\/span><\/li>\n
                3. Pretexting<\/span><\/li>\n
                4. Smishing<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Tailgating occurs when an unauthorized person follows an authorized individual through a secured entrance. The attacker may take advantage of courtesy or distraction to bypass physical access controls. Mantraps, badge verification, security guards, and employee awareness can help prevent tailgating.<\/span><\/p>\n

                  Question 149<\/b><\/h3>\n

                  Which security control is designed to ensure that only approved applications and processes can run on a system?<\/b><\/p>\n

                    \n
                  1. Application allowlisting<\/span><\/li>\n
                  2. Password policy<\/span><\/li>\n
                  3. Network segmentation<\/span><\/li>\n
                  4. Data classification<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    Application allowlisting permits only explicitly approved software to execute on a system. Applications not included in the approved list are blocked or prevented from running. This approach can significantly reduce the risk of unauthorized software and malware executing on sensitive systems.<\/span><\/p>\n

                    Question 150<\/b><\/h3>\n

                    Which protocol is commonly used to securely transfer email between mail servers?<\/b><\/p>\n

                      \n
                    1. SMTPS<\/span><\/li>\n
                    2. Telnet<\/span><\/li>\n
                    3. TFTP<\/span><\/li>\n
                    4. HTTP<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      SMTPS uses Transport Layer Security to protect SMTP communications between mail systems. Encryption helps prevent attackers from intercepting email traffic and sensitive authentication information while it is transmitted. Secure email configurations should use modern encryption standards and appropriate certificate validation.<\/span><\/p>\n

                      Question 151<\/b><\/h3>\n

                      Which type of attack attempts to manipulate a user into revealing confidential information by exploiting trust or authority?<\/b><\/p>\n

                        \n
                      1. Social engineering<\/span><\/li>\n
                      2. Buffer overflow<\/span><\/li>\n
                      3. SQL injection<\/span><\/li>\n
                      4. DNS poisoning<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Social engineering attacks manipulate people rather than directly exploiting technical vulnerabilities. Attackers may impersonate trusted individuals, create a sense of urgency, or use authority to persuade victims to disclose information or perform unsafe actions. Security awareness training and verification procedures are important defenses against social engineering.<\/span><\/p>\n

                        Question 152<\/b><\/h3>\n

                        Which security control can automatically block network traffic originating from a known malicious IP address?<\/b><\/p>\n

                          \n
                        1. Firewall rule<\/span><\/li>\n
                        2. File integrity monitoring<\/span><\/li>\n
                        3. Data masking<\/span><\/li>\n
                        4. Password manager<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          A firewall rule can be configured to allow or deny network traffic based on characteristics such as source and destination IP addresses, ports, and protocols. Blocking known malicious addresses can help prevent communication with identified threats. Firewall rules should be carefully managed because attackers may change infrastructure or use compromised legitimate addresses.<\/span><\/p>\n

                          Question 153<\/b><\/h3>\n

                          Which type of attack involves intercepting communication and modifying the information before forwarding it to the intended recipient?<\/b><\/p>\n

                            \n
                          1. Man-in-the-middle<\/span><\/li>\n
                          2. Brute-force<\/span><\/li>\n
                          3. Password spraying<\/span><\/li>\n
                          4. Ransomware<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            A man-in-the-middle attack occurs when an attacker secretly positions themselves between communicating parties. The attacker may intercept and modify data before forwarding it to the destination. Encryption, certificate validation, secure protocols, and strong authentication can help protect communications from this type of attack.<\/span><\/p>\n

                            Question 154<\/b><\/h3>\n

                            Which security technology can identify malicious URLs and prevent users from visiting known phishing websites?<\/b><\/p>\n

                              \n
                            1. DNS filtering<\/span><\/li>\n
                            2. RAID<\/span><\/li>\n
                            3. Network bonding<\/span><\/li>\n
                            4. Disk encryption<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              DNS filtering can block requests for domains associated with malware, phishing, or other prohibited content. When a user attempts to access a blocked domain, the DNS filtering service can prevent the connection from resolving normally. This provides an additional layer of protection against malicious websites.<\/span><\/p>\n

                              Question 155<\/b><\/h3>\n

                              Which security concept ensures that data remains accessible to authorized users when needed?<\/b><\/p>\n

                                \n
                              1. Availability<\/span><\/li>\n
                              2. Confidentiality<\/span><\/li>\n
                              3. Integrity<\/span><\/li>\n
                              4. Non-repudiation<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Availability ensures that systems, applications, and information are accessible to authorized users when required. Redundancy, backups, fault-tolerant infrastructure, disaster recovery plans, and appropriate maintenance can help maintain availability. Availability is one of the three core principles of the CIA triad.<\/span><\/p>\n

                                Question 156<\/b><\/h3>\n

                                Which principle ensures that information is protected from unauthorized modification?<\/b><\/p>\n

                                  \n
                                1. Integrity<\/span><\/li>\n
                                2. Availability<\/span><\/li>\n
                                3. Confidentiality<\/span><\/li>\n
                                4. Authentication<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Integrity ensures that information remains accurate, complete, and protected from unauthorized changes. Hashing, digital signatures, access controls, and file integrity monitoring can help maintain data integrity. Organizations should also use appropriate logging and change-management procedures to detect unauthorized modifications.<\/span><\/p>\n

                                  Question 157<\/b><\/h3>\n

                                  Which principle of the CIA triad ensures that sensitive information is accessible only to authorized individuals?<\/b><\/p>\n

                                    \n
                                  1. Confidentiality<\/span><\/li>\n
                                  2. Availability<\/span><\/li>\n
                                  3. Integrity<\/span><\/li>\n
                                  4. Accountability<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Confidentiality protects information from unauthorized disclosure. Access controls, encryption, authentication, authorization, and data classification are commonly used to maintain confidentiality. The goal is to ensure that sensitive information is available only to individuals or systems that have appropriate authorization.<\/span><\/p>\n

                                    Question 158<\/b><\/h3>\n

                                    Which security control provides an isolated copy of data that can be used after ransomware encrypts production files?<\/b><\/p>\n

                                      \n
                                    1. Offline backup<\/span><\/li>\n
                                    2. Load balancer<\/span><\/li>\n
                                    3. Proxy server<\/span><\/li>\n
                                    4. Access control list<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      An offline backup is disconnected from the production environment and therefore is less likely to be affected by malware that compromises connected systems. If ransomware encrypts production data, an isolated backup can provide a recovery source. Organizations should regularly test backups to ensure that data can actually be restored when needed.<\/span><\/p>\n

                                      Question 159<\/b><\/h3>\n

                                      Which type of assessment evaluates the potential impact and likelihood of identified security threats?<\/b><\/p>\n

                                        \n
                                      1. Risk assessment<\/span><\/li>\n
                                      2. Vulnerability scan<\/span><\/li>\n
                                      3. Penetration test<\/span><\/li>\n
                                      4. Code review<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        A risk assessment evaluates threats, vulnerabilities, likelihood, and potential impact to determine the level of risk facing an organization. The results can help security teams prioritize controls and remediation efforts. Risk assessments may consider technical, operational, financial, legal, and business factors.<\/span><\/p>\n

                                        Question 160<\/b><\/h3>\n

                                        Which security process determines how sensitive information should be handled based on its importance and potential impact if exposed?<\/b><\/p>\n

                                          \n
                                        1. Data classification<\/span><\/li>\n
                                        2. Network segmentation<\/span><\/li>\n
                                        3. Patch management<\/span><\/li>\n
                                        4. Incident containment<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          Data classification categorizes information according to its sensitivity, value, and security requirements. Common classifications may include public, internal, confidential, and restricted. Classification helps organizations determine appropriate access controls, encryption requirements, retention policies, and handling procedures for different types of information.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full\u00a0CompTIA SY0-701 Exam Dumps\u00a0and Practice Test Dumps.   Question 141 Which security control is used to prevent unauthorized users from connecting to a switch port? Port security Network address translation Load balancing DNS filtering Correct Answer: 1 Explanation Port security is a network switch feature that controls which devices can connect to individual switch […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11567"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11567"}],"version-history":[{"count":3,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11567\/revisions"}],"predecessor-version":[{"id":11636,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11567\/revisions\/11636"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11567"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11567"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11567"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}