{"id":11573,"date":"2026-09-14T10:31:06","date_gmt":"2026-09-14T10:31:06","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11573"},"modified":"2026-09-14T11:08:31","modified_gmt":"2026-09-14T11:08:31","slug":"comptia-security-sy0-701-practice-test-questions-and-exam-dumps-part-11-q201-220","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/comptia-security-sy0-701-practice-test-questions-and-exam-dumps-part-11-q201-220\/","title":{"rendered":"CompTIA Security+ SY0-701 Practice Test Questions and Exam Dumps \u2014 Part 11 (Q201\u2013220)"},"content":{"rendered":"

View Full\u00a0CompTIA SY0-701 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/h3>\n

 <\/p>\n

Question 201<\/b><\/h3>\n

Which security concept ensures that a user cannot deny having performed a particular action?<\/b><\/p>\n

    \n
  1. Availability<\/span><\/li>\n
  2. Non-repudiation<\/span><\/li>\n
  3. Confidentiality<\/span><\/li>\n
  4. Redundancy<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation<\/b>
    \n<\/b> Non-repudiation provides evidence that a specific party performed an action. Digital signatures are commonly used to support non-repudiation.<\/span><\/p>\n

    Question 202<\/b><\/h3>\n

    Which security solution analyzes user and entity behavior to identify unusual activity?<\/b><\/p>\n

      \n
    1. UEBA<\/span><\/li>\n
    2. NAC<\/span><\/li>\n
    3. DLP<\/span><\/li>\n
    4. FIM<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b>
      \n<\/b> User and Entity Behavior Analytics (UEBA) establishes normal behavioral patterns and identifies unusual activities that may indicate compromised accounts or insider threats.<\/span><\/p>\n

      Question 203<\/b><\/h3>\n

      Which attack attempts to overwhelm a service by sending it an excessive amount of traffic or requests?<\/b><\/p>\n

        \n
      1. DDoS<\/span><\/li>\n
      2. Phishing<\/span><\/li>\n
      3. Directory traversal<\/span><\/li>\n
      4. Credential stuffing<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b>
        \n<\/b> A Distributed Denial-of-Service (DDoS) attack uses multiple systems or sources to overwhelm a target with traffic or requests, potentially making the service unavailable to legitimate users.<\/span><\/p>\n

        Question 204<\/b><\/h3>\n

        Which security practice removes unnecessary services, applications, and ports from a system to reduce its attack surface?<\/b><\/p>\n

          \n
        1. System hardening<\/span><\/li>\n
        2. Data masking<\/span><\/li>\n
        3. Tokenization<\/span><\/li>\n
        4. Federation<\/span><\/li>\n<\/ol>\n

          Correct Answer: 1<\/b><\/p>\n

          Explanation<\/b>
          \n<\/b> System hardening reduces attack opportunities by disabling unnecessary services, removing unused software, closing unnecessary ports, and applying secure configurations.<\/span><\/p>\n

          Question 205<\/b><\/h3>\n

          Which attack tricks a user into visiting a malicious website by manipulating DNS information?<\/b><\/p>\n

            \n
          1. DNS poisoning<\/span><\/li>\n
          2. Smishing<\/span><\/li>\n
          3. Vishing<\/span><\/li>\n
          4. Shoulder surfing<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b>
            \n<\/b> DNS poisoning corrupts DNS information so that users can be redirected to an attacker-controlled destination instead of the legitimate website.<\/span><\/p>\n

            Question 206<\/b><\/h3>\n

            Which security control can automatically block known malicious network traffic based on detected attack signatures?<\/b><\/p>\n

              \n
            1. IPS<\/span><\/li>\n
            2. IDS<\/span><\/li>\n
            3. Passive tap<\/span><\/li>\n
            4. Syslog server<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b>
              \n<\/b> An Intrusion Prevention System (IPS) monitors traffic and can actively block malicious activity. Signature-based detection is commonly used to identify known threats.<\/span><\/p>\n

              Question 207<\/b><\/h3>\n

              Which type of vulnerability occurs when an application allows a user to access resources belonging to another user by changing an identifier in a request?<\/b><\/p>\n

                \n
              1. IDOR<\/span><\/li>\n
              2. XSS<\/span><\/li>\n
              3. SQL injection<\/span><\/li>\n
              4. Buffer overflow<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b>
                \n<\/b> Insecure Direct Object Reference (IDOR) occurs when an application exposes references to objects without properly verifying authorization. An attacker may modify an identifier to access another user’s data.<\/span><\/p>\n

                Question 208<\/b><\/h3>\n

                Which security mechanism uses cryptographic hashes to detect whether a file has been modified?<\/b><\/p>\n

                  \n
                1. File Integrity Monitoring<\/span><\/li>\n
                2. Network Address Translation<\/span><\/li>\n
                3. Single Sign-On<\/span><\/li>\n
                4. Network Access Control<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b>
                  \n<\/b> File Integrity Monitoring (FIM) can calculate and compare cryptographic hashes to detect unauthorized changes to files.<\/span><\/p>\n

                  Question 209<\/b><\/h3>\n

                  Which type of encryption uses a public key to encrypt information and a corresponding private key to decrypt it?<\/b><\/p>\n

                    \n
                  1. Symmetric encryption<\/span><\/li>\n
                  2. Asymmetric encryption<\/span><\/li>\n
                  3. Hashing<\/span><\/li>\n
                  4. Tokenization<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2<\/b><\/p>\n

                    Explanation<\/b>
                    \n<\/b> Asymmetric encryption uses a key pair consisting of a public key and a private key. Data encrypted with the appropriate public key can be decrypted using the corresponding private key.<\/span><\/p>\n

                    Question 210<\/b><\/h3>\n

                    Which attack attempts to exploit a newly discovered vulnerability before a security patch is available?<\/b><\/p>\n

                      \n
                    1. Zero-day attack<\/span><\/li>\n
                    2. Replay attack<\/span><\/li>\n
                    3. Password spraying<\/span><\/li>\n
                    4. Phishing attack<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b>
                      \n<\/b> A zero-day attack exploits a vulnerability before the vendor has released an effective patch or before defenders have had sufficient opportunity to address it.<\/span><\/p>\n

                      Question 211<\/b><\/h3>\n

                      Which security control is intended to discourage attackers by making them believe that an attack will be detected or prevented?<\/b><\/p>\n

                        \n
                      1. Deterrent control<\/span><\/li>\n
                      2. Corrective control<\/span><\/li>\n
                      3. Recovery control<\/span><\/li>\n
                      4. Detective control<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b>
                        \n<\/b> Deterrent controls discourage unwanted behavior. Warning signs, security cameras, and visible security personnel can discourage potential attackers.<\/span><\/p>\n

                        Question 212<\/b><\/h3>\n

                        Which type of control restores a system to normal operation after a security incident?<\/b><\/p>\n

                          \n
                        1. Preventive<\/span><\/li>\n
                        2. Detective<\/span><\/li>\n
                        3. Corrective<\/span><\/li>\n
                        4. Deterrent<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3<\/b><\/p>\n

                          Explanation<\/b>
                          \n<\/b> Corrective controls are designed to fix or restore systems after an incident. Examples include restoring data from backups and removing malware from affected systems.<\/span><\/p>\n

                          Question 213<\/b><\/h3>\n

                          Which cloud security model requires the customer to secure their data, identities, and configurations while the provider secures the underlying infrastructure?<\/b><\/p>\n

                            \n
                          1. Shared responsibility model<\/span><\/li>\n
                          2. Zero trust model<\/span><\/li>\n
                          3. Bell-LaPadula model<\/span><\/li>\n
                          4. Open access model<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b>
                            \n<\/b> The shared responsibility model divides security responsibilities between the cloud provider and customer. The exact responsibilities vary depending on the cloud service being used.<\/span><\/p>\n

                            Question 214<\/b><\/h3>\n

                            Which wireless security standard provides stronger protection than WPA and uses AES-based encryption?<\/b><\/p>\n

                              \n
                            1. WEP<\/span><\/li>\n
                            2. WPA2<\/span><\/li>\n
                            3. Open authentication<\/span><\/li>\n
                            4. TKIP<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2<\/b><\/p>\n

                              Explanation<\/b>
                              \n<\/b> WPA2 uses the stronger AES-based CCMP encryption mechanism and provides significantly better security than older WEP and WPA configurations.<\/span><\/p>\n

                              Question 215<\/b><\/h3>\n

                              Which attack occurs when malicious input is inserted into an operating system command executed by an application?<\/b><\/p>\n

                                \n
                              1. Command injection<\/span><\/li>\n
                              2. SQL injection<\/span><\/li>\n
                              3. XSS<\/span><\/li>\n
                              4. Pharming<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b>
                                \n<\/b> Command injection occurs when an attacker manipulates application input so that unintended operating system commands are executed by the underlying system.<\/span><\/p>\n

                                Question 216<\/b><\/h3>\n

                                Which authentication method requires a user to provide two or more different types of authentication factors?<\/b><\/p>\n

                                  \n
                                1. SSO<\/span><\/li>\n
                                2. MFA<\/span><\/li>\n
                                3. Federation<\/span><\/li>\n
                                4. LDAP<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2<\/b><\/p>\n

                                  Explanation<\/b>
                                  \n<\/b> Multi-Factor Authentication (MFA) requires multiple authentication factors, such as a password combined with a hardware security key or biometric factor.<\/span><\/p>\n

                                  Question 217<\/b><\/h3>\n

                                  Which attack captures valid authentication data and later retransmits it to gain unauthorized access?<\/b><\/p>\n

                                    \n
                                  1. Replay attack<\/span><\/li>\n
                                  2. DDoS<\/span><\/li>\n
                                  3. Tailgating<\/span><\/li>\n
                                  4. Dumpster diving<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b>
                                    \n<\/b> A replay attack captures valid authentication information, such as a session token or authentication exchange, and retransmits it later in an attempt to gain access.<\/span><\/p>\n

                                    Question 218<\/b><\/h3>\n

                                    Which security technique isolates potentially malicious software from the rest of a system while it executes?<\/b><\/p>\n

                                      \n
                                    1. Sandboxing<\/span><\/li>\n
                                    2. Port forwarding<\/span><\/li>\n
                                    3. Tokenization<\/span><\/li>\n
                                    4. Data classification<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b>
                                      \n<\/b> Sandboxing runs applications or files in an isolated environment. This limits their ability to affect the underlying operating system or other resources.<\/span><\/p>\n

                                      Question 219<\/b><\/h3>\n

                                      Which process involves reviewing system configurations to ensure they remain consistent with approved security settings?<\/b><\/p>\n

                                        \n
                                      1. Configuration monitoring<\/span><\/li>\n
                                      2. Password spraying<\/span><\/li>\n
                                      3. Data destruction<\/span><\/li>\n
                                      4. Credential stuffing<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b>
                                        \n<\/b> Configuration monitoring checks systems against approved baselines and can identify unauthorized or potentially insecure configuration changes.<\/span><\/p>\n

                                        Question 220<\/b><\/h3>\n

                                        Which security principle requires an organization to maintain multiple independent layers of protection?<\/b><\/p>\n

                                          \n
                                        1. Defense in depth<\/span><\/li>\n
                                        2. Least privilege<\/span><\/li>\n
                                        3. Separation of duties<\/span><\/li>\n
                                        4. Need to know<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1<\/b><\/p>\n

                                          Explanation<\/b>
                                          \n<\/b> Defense in depth uses multiple security layers, such as firewalls, endpoint protection, access controls, monitoring, and encryption, so that failure of one control does not completely compromise the environment.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full\u00a0CompTIA SY0-701 Exam Dumps\u00a0and Practice Test Dumps.   Question 201 Which security concept ensures that a user cannot deny having performed a particular action? Availability Non-repudiation Confidentiality Redundancy Correct Answer: 2 Explanation Non-repudiation provides evidence that a specific party performed an action. Digital signatures are commonly used to support non-repudiation. Question 202 Which security […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11573"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11573"}],"version-history":[{"count":3,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11573\/revisions"}],"predecessor-version":[{"id":11633,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11573\/revisions\/11633"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}