CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 991:

  Which of the following environments utilizes a subset of customer data and is most likely to be used to assess the impacts of major system upgrades and demonstrate system features?

  A. Development
  B. Test
  C. Production
  D. Staging
  D. Staging

  ---

  Explanation

  A staging environment is a controlled setting that closely mirrors the production environment but uses a subset of customer data. It is used to test major system upgrades, assess their impact, and demonstrate new features before they are rolled out to the live production environment. This ensures that any issues can be identified and addressed in a safe environment before affecting end-users.

  References:

  CompTIA Security+ SY0-701 study materials, particularly in the domain of secure system development and testing environments.

• Question 992:

  Malware spread across a company's network after an employee visited a compromised industry blog.

  Which of the following best describes this type of attack?

  A. Impersonation
  B. Disinformation
  C. Watering-hole
  D. Smishing
  C. Watering-hole

  ---

  Explanation

  A watering-hole attack is a type of cyberattack that targets groups of users by infecting websites that they commonly visit. The attackers exploit vulnerabilities to deliver a malicious payload to the organization's network. The attack aims to infect users' computers and gain access to a connected corporate network. The attackers target websites known to be popular among members of a particular organization or demographic. The attack differs from phishing and spear-phishing attacks, which typically attempt to steal data or install malware onto users' devices In this scenario, the compromised industry blog is the watering hole that the attackers used to spread malware across the company's network. The attackers likely chose this blog because they knew that the employees of the company were interested in its content and visited it frequently. The attackers may have injected malicious code into the blog or redirected the visitors to a spoofed website that hosted the malware. The malware then infected the employees' computers and propagated to the network.

  References:

  Watering Hole Attacks: Stages, Examples, Risk Factors & Defense ...

• Question 993:

  A company prepares for an upcoming regulatory audit. The company wants to perform a gap analysis in the most cost-effective way.

  Which of the following will help the company achieve this goal?

  A. Internal self-assessment
  B. Active reconnaissance
  C. Red team penetration test
  D. Tabletop exercise
  A. Internal self-assessment

  ---

  Explanation

  The best answer is A. Internal self-assessment. A gap analysis is used to compare the organization's current security, compliance, or control posture against a required standard, framework, or regulatory requirement. If the company wants to do this in the most cost-effective way, an internal self-assessment is the best choice because it allows the organization to review its own policies, procedures, controls, and documentation without the added expense of external testing or specialized attack simulations. Why the other options are incorrect:

  B. Active reconnaissanceActive reconnaissance involves directly interacting with systems to gather information, often as part of security testing or attack emulation. It is not the best option for a compliance-focused gap analysis.

  C. Red team penetration testA red team exercise is more advanced and expensive. It simulates real-world attacks to test detection and response capabilities. This is valuable for security maturity, but it is not the most cost-effective method for identifying compliance gaps before an audit.

  D. Tabletop exerciseA tabletop exercise is a discussion-based activity used to test incident response plans, communication, and decision-making. It does not primarily identify regulatory compliance gaps. From a Security+ perspective, self-assessments, audits, and gap analyses are part of governance, risk, and compliance activities. For a low-cost review against regulatory requirements, internal self-assessment is the most appropriate answer.

• Question 994:

  A legal department must maintain a backup from all devices that have been shredded and recycled by a third party.

  Which of the following best describes this requirement?

  A. Data retention
  B. Certification
  C. Sanitization
  D. Destruction
  A. Data retention

  ---

  Explanation

  Data retention refers to the practice of keeping copies or backups of data for a specific period, even after the original devices have been disposed of or destroyed. In this case, the legal department requires a backup to be maintained from devices that have been shredded and recycled, ensuring that necessary data is preserved in compliance with legal or regulatory requirements.

• Question 995:

  Which of the following are cases in which an engineer should recommend the decommissioning of a network device? (Select two).

  A. The device has been moved from a production environment to a test environment.
  B. The device is configured to use cleartext passwords.
  C. The device is moved to an isolated segment on the enterprise network.
  D. The device is moved to a different location in the enterprise.
  E. The device's encryption level cannot meet organizational standards.
  F. The device is unable to receive authorized updates.
  E. The device's encryption level cannot meet organizational standards.
  F. The device is unable to receive authorized updates.

  ---

  Explanation

  An engineer should recommend the decommissioning of a network device when the device poses a security risk or a compliance violation to the enterprise environment. A device that cannot meet the encryption standards or receive authorized updates is vulnerable to attacks and breaches, and may expose sensitive data or compromise network integrity. Therefore, such a device should be removed from the network and replaced with a more secure and updated one.

  References CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 2, Section 2.2, page 671

  CompTIA Security+ Practice Tests: Exam SY0-701, 3rd Edition, Chapter 2, Question16, page 512

• Question 996:

  An incident response specialist must stop a malicious attack from expanding to other parts of an organization.

  Which of the following should the incident response specialist perform first?

  A. Eradication
  B. Recovery
  C. Containment
  D. Simulation
  C. Containment

• Question 997:

  A threat actor was able to use a username and password to log in to a stolen company mobile device.

  Which of the following provides the best solution to increase mobile data security on all employees' company mobile devices?

  A. Application management
  B. Full disk encryption
  C. Remote wipe
  D. Containerization
  C. Remote wipe

• Question 998:

  An organization failed to account for the right-to-be-forgotten regulations.

  Which of the following impacts might this action have on the company?

  A. Fines
  B. Data breaches
  C. Revenue loss
  D. Blackmail
  A. Fines

• Question 999:

  Which of the following cryptographic methods is preferred for securing communications with limited computing resources?

  A. Hashing algorithm
  B. Public key infrastructure
  C. Symmetric encryption
  D. Elliptic curve cryptography
  D. Elliptic curve cryptography

  ---

  Explanation

  ECC provides strong security with shorter key lengths, making it more efficient for devices with limited processing power and memory. It is ideal for securing communications on resource-constrained devices, such as IoT devices, as it offers the same level of security as traditional public-key cryptography (like RSA) but with significantly reduced computational overhead.

• Question 1000:

  Which of the following objectives is best achieved by a tabletop exercise?

  A. Familiarizing participants with the incident response process
  B. Deciding red and blue team rules of engagement
  C. Quickly determining the impact of an actual security breach
  D. Conducting multiple security investigations in parallel
  A. Familiarizing participants with the incident response process

  ---

  Explanation

  A tabletop exercise is a discussion-based exercise where participants walk through different scenarios to better understand and familiarize themselves with the incident response process. This type of exercise allows teams to review roles, procedures, and potential responses to various incidents in a low-stress environment, enhancing preparedness and coordination.