{"id":11569,"date":"2026-09-14T10:29:23","date_gmt":"2026-09-14T10:29:23","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11569"},"modified":"2026-09-14T11:08:46","modified_gmt":"2026-09-14T11:08:46","slug":"comptia-security-sy0-701-practice-test-questions-and-exam-dumps-part-9-q161-180","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/comptia-security-sy0-701-practice-test-questions-and-exam-dumps-part-9-q161-180\/","title":{"rendered":"CompTIA Security+ SY0-701 Practice Test Questions and Exam Dumps \u2014 Part 9 (Q161\u2013180)"},"content":{"rendered":"

View Full\u00a0CompTIA SY0-701 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/h3>\n

 <\/p>\n

Question 161<\/b><\/h3>\n

Which security control is designed to prevent unauthorized users from accessing a restricted physical area?<\/b><\/p>\n

    \n
  1. Firewall<\/span><\/li>\n
  2. Access badge<\/span><\/li>\n
  3. SIEM<\/span><\/li>\n
  4. DLP<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    \u00a0An access badge is a physical security control that restricts entry to authorized personnel. Badges can also provide audit trails by recording when users enter or leave secured areas.<\/span><\/p>\n

    Question 162<\/b><\/h3>\n

    An administrator wants to ensure that users can access only the files and applications required for their jobs. Which principle should be implemented?<\/b><\/p>\n

      \n
    1. Least privilege<\/span><\/li>\n
    2. Open access<\/span><\/li>\n
    3. Job rotation<\/span><\/li>\n
    4. Data sovereignty<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      \u00a0The principle of least privilege gives users only the permissions necessary to perform their assigned tasks. This limits the potential impact of compromised accounts or accidental misuse.<\/span><\/p>\n

      Question 163<\/b><\/h3>\n

      Which technology is commonly used to securely connect remote employees to an organization’s internal network?<\/b><\/p>\n

        \n
      1. VPN<\/span><\/li>\n
      2. Hub<\/span><\/li>\n
      3. Proxy ARP<\/span><\/li>\n
      4. VLAN trunk<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        \u00a0A VPN creates an encrypted connection between a remote user and the organization’s network. This helps protect data from interception while traveling across untrusted networks.<\/span><\/p>\n

        Question 164<\/b><\/h3>\n

        A security analyst notices that an attacker is attempting to authenticate to many different accounts using the same password. What type of attack is occurring?<\/b><\/p>\n

          \n
        1. Credential stuffing<\/span><\/li>\n
        2. Password spraying<\/span><\/li>\n
        3. Brute-force attack<\/span><\/li>\n
        4. Rainbow table attack<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          \u00a0Password spraying uses a small number of commonly used passwords against many accounts. Unlike brute-force attacks, it typically avoids repeatedly attempting many passwords against a single account.<\/span><\/p>\n

          Question 165<\/b><\/h3>\n

          Which security technology can detect suspicious behavior on an endpoint and provide automated response capabilities?<\/b><\/p>\n

            \n
          1. EDR<\/span><\/li>\n
          2. DNS server<\/span><\/li>\n
          3. Load balancer<\/span><\/li>\n
          4. Network switch<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            \u00a0Endpoint Detection and Response (EDR) monitors endpoint activity, detects suspicious behavior, and can provide response actions such as isolating a compromised device.<\/span><\/p>\n

            Question 166<\/b><\/h3>\n

            Which attack attempts to inject malicious SQL statements into an application’s database query?<\/b><\/p>\n

              \n
            1. XSS<\/span><\/li>\n
            2. SQL injection<\/span><\/li>\n
            3. CSRF<\/span><\/li>\n
            4. Directory traversal<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              \u00a0SQL injection occurs when an attacker inserts malicious SQL commands into application input fields. Successful attacks can expose, modify, or delete database information.<\/span><\/p>\n

              Question 167<\/b><\/h3>\n

              Which authentication factor is represented by a fingerprint?<\/b><\/p>\n

                \n
              1. Something you know<\/span><\/li>\n
              2. Something you have<\/span><\/li>\n
              3. Something you are<\/span><\/li>\n
              4. Somewhere you are<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                \u00a0A fingerprint is a biometric characteristic, making it an example of \u201csomething you are.\u201d Other examples include facial recognition, iris scans, and voice recognition.<\/span><\/p>\n

                Question 168<\/b><\/h3>\n

                Which backup type copies all selected data every time the backup is performed?<\/b><\/p>\n

                  \n
                1. Incremental<\/span><\/li>\n
                2. Differential<\/span><\/li>\n
                3. Full<\/span><\/li>\n
                4. Snapshot<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  \u00a0A full backup copies all selected data regardless of whether it changed since the previous backup. Full backups simplify restoration but generally require more storage and backup time.<\/span><\/p>\n

                  Question 169<\/b><\/h3>\n

                  Which security device is specifically designed to inspect and control traffic entering or leaving a network?<\/b><\/p>\n

                    \n
                  1. Firewall<\/span><\/li>\n
                  2. Patch panel<\/span><\/li>\n
                  3. NAS<\/span><\/li>\n
                  4. KVM switch<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    A firewall controls network traffic based on configured rules. It can allow or block traffic according to factors such as source, destination, port, protocol, or application.<\/span><\/p>\n

                    Question 170<\/b><\/h3>\n

                    A company requires users to authenticate once and then access multiple authorized applications without signing in again. Which technology provides this capability?<\/b><\/p>\n

                      \n
                    1. SSO<\/span><\/li>\n
                    2. NAC<\/span><\/li>\n
                    3. MFA<\/span><\/li>\n
                    4. FIM<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Single Sign-On (SSO) allows users to authenticate once and then access multiple applications or services without repeatedly entering credentials.<\/span><\/p>\n

                      Question 171<\/b><\/h3>\n

                      Which technique involves placing a fake system on a network to attract and study attackers?<\/b><\/p>\n

                        \n
                      1. Sandboxing<\/span><\/li>\n
                      2. Honeypot<\/span><\/li>\n
                      3. Tokenization<\/span><\/li>\n
                      4. Geofencing<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        A honeypot is a deliberately deployed system designed to attract attackers. Security teams can monitor interactions with it to gain intelligence about attack methods and indicators of compromise.<\/span><\/p>\n

                        Question 172<\/b><\/h3>\n

                        Which security principle assumes that no user or device should automatically be trusted based solely on network location?<\/b><\/p>\n

                          \n
                        1. Defense in depth<\/span><\/li>\n
                        2. Zero trust<\/span><\/li>\n
                        3. Separation of duties<\/span><\/li>\n
                        4. Data minimization<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 2<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Zero trust follows the concept of continuously verifying users, devices, and access requests rather than automatically trusting entities because they are inside the corporate network.<\/span><\/p>\n

                          Question 173<\/b><\/h3>\n

                          Which type of malware provides an attacker with privileged access while attempting to hide its presence on a system?<\/b><\/p>\n

                            \n
                          1. Rootkit<\/span><\/li>\n
                          2. Worm<\/span><\/li>\n
                          3. Adware<\/span><\/li>\n
                          4. Logic bomb<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            A rootkit is designed to maintain unauthorized access while hiding malicious processes, files, or system modifications from normal detection mechanisms.<\/span><\/p>\n

                            Question 174<\/b><\/h3>\n

                            Which security control monitors files and alerts administrators when unauthorized changes occur?<\/b><\/p>\n

                              \n
                            1. FIM<\/span><\/li>\n
                            2. VPN<\/span><\/li>\n
                            3. NAC<\/span><\/li>\n
                            4. Proxy<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              File Integrity Monitoring (FIM) tracks files and detects unauthorized modifications. It is useful for identifying tampering with important system or configuration files.<\/span><\/p>\n

                              Question 175<\/b><\/h3>\n

                              An employee receives a text message claiming to be from a bank and asking the employee to click a link to verify an account. What type of attack is this?<\/b><\/p>\n

                                \n
                              1. Vishing<\/span><\/li>\n
                              2. Smishing<\/span><\/li>\n
                              3. Pharming<\/span><\/li>\n
                              4. Tailgating<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Smishing is phishing performed through SMS or text messages. Attackers commonly use urgent messages and malicious links to steal credentials or other sensitive information.<\/span><\/p>\n

                                Question 176<\/b><\/h3>\n

                                Which security solution is designed to prevent sensitive information from being improperly transmitted outside an organization?<\/b><\/p>\n

                                  \n
                                1. DLP<\/span><\/li>\n
                                2. IDS<\/span><\/li>\n
                                3. DHCP<\/span><\/li>\n
                                4. NTP<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Data Loss Prevention (DLP) identifies and protects sensitive information. It can monitor and restrict activities such as copying confidential files to unauthorized devices or sending sensitive data externally.<\/span><\/p>\n

                                  Question 177<\/b><\/h3>\n

                                  Which protocol provides encrypted remote command-line access to a server?<\/b><\/p>\n

                                    \n
                                  1. FTP<\/span><\/li>\n
                                  2. Telnet<\/span><\/li>\n
                                  3. SSH<\/span><\/li>\n
                                  4. HTTP<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 3<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Secure Shell (SSH) provides encrypted remote administration and command-line access. It is preferred over Telnet because Telnet transmits credentials and data without encryption.<\/span><\/p>\n

                                    Question 178<\/b><\/h3>\n

                                    A security team separates a public-facing web server from the internal corporate network using an isolated network segment. What is this segment commonly called?<\/b><\/p>\n

                                      \n
                                    1. DMZ<\/span><\/li>\n
                                    2. SAN<\/span><\/li>\n
                                    3. VLAN trunk<\/span><\/li>\n
                                    4. Intranet<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      A Demilitarized Zone (DMZ) is a segmented network designed to host systems that need to be accessible from untrusted networks while reducing direct exposure of the internal network.<\/span><\/p>\n

                                      Question 179<\/b><\/h3>\n

                                      Which security objective ensures that information remains accurate and has not been improperly altered?<\/b><\/p>\n

                                        \n
                                      1. Confidentiality<\/span><\/li>\n
                                      2. Integrity<\/span><\/li>\n
                                      3. Availability<\/span><\/li>\n
                                      4. Non-repudiation<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Integrity ensures that data remains accurate, complete, and protected from unauthorized modification. Hashing, digital signatures, and file integrity monitoring can help support integrity.<\/span><\/p>\n

                                        Question 180<\/b><\/h3>\n

                                        Which metric identifies the maximum acceptable amount of data loss measured in time?<\/b><\/p>\n

                                          \n
                                        1. RTO<\/span><\/li>\n
                                        2. RPO<\/span><\/li>\n
                                        3. MTTR<\/span><\/li>\n
                                        4. MTBF<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          The Recovery Point Objective (RPO) defines the maximum acceptable amount of data loss expressed as a period of time. For example, an RPO of one hour means the organization aims to lose no more than approximately one hour of data.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full\u00a0CompTIA SY0-701 Exam Dumps\u00a0and Practice Test Dumps.   Question 161 Which security control is designed to prevent unauthorized users from accessing a restricted physical area? Firewall Access badge SIEM DLP Correct Answer: 2 Explanation \u00a0An access badge is a physical security control that restricts entry to authorized personnel. Badges can also provide audit trails […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11569"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11569"}],"version-history":[{"count":3,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11569\/revisions"}],"predecessor-version":[{"id":11635,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11569\/revisions\/11635"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}