CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 151:

  Which of the following is a preventive physical security control?

  A. Video surveillance system
  B. Bollards
  C. Alarm system
  D. Motion sensors
  B. Bollards

  ---

  Explanation

  Bollards are physical barriers that prevent unauthorized vehicle access to certain areas, helping to protect a facility by physically blocking entry. Unlike detection-focused controls like video surveillance, alarms, and motion sensors, bollards serve as a proactive, preventive measure by stopping threats before they can reach the facility.

• Question 152:

  Which of the following vulnerabilities would likely be mitigated by setting up an MDM platform?

  A. TPM
  B. Buffer overflow
  C. Jailbreaking
  D. SQL injection
  C. Jailbreaking

  ---

  Explanation

  A Mobile Device Management (MDM) platform protects organizational mobile devices by enforcing security policies, restricting unauthorized configuration changes, and detecting compromised devices. One of the major vulnerabilities MDM mitigates is jailbreaking, which occurs when a user removes manufacturer restrictions to gain unrestricted access to the file system and install unapproved apps.

  Security+ SY0-701 explains that jailbroken devices: Bypass built-in security protections

  Are more susceptible to malware

  Can be used for data exfiltration

  Violate corporate mobile security policies

  MDM solutions detect jailbroken or rooted devices and automatically block them from accessing corporate resources, enforce compliance rules, and remotely wipe devices if necessary.

  TPM (A) is a hardware security chip unrelated to MDM. Buffer overflow (B) and SQL injection (D) are software development vulnerabilities, not mobile device policy issues.

  Thus, the correct answer is C: Jailbreaking.

• Question 153:

  Which of the following can be used to compromise a system that is running an RTOS?

  A. Cross-site scripting
  B. Memory injection
  C. Replay attack
  D. Ransomware
  B. Memory injection

  ---

  Explanation

  Memory injection attacks are particularly dangerous for systems running a Real-Time Operating System (RTOS) because these systems often have limited resources and strict timing requirements, making them more susceptible to disruptions caused by injected code. Memory injection can compromise the system's integrity, allowing an attacker to alter its operation or cause it to behave unpredictably.

• Question 154:

  Which of the following would be best suited for constantly changing environments?

  A. RTOS
  B. Containers
  C. Embedded systems
  D. SCADA
  B. Containers

  ---

  Explanation

  Containers are a method of virtualization that allows applications to run in isolated environments with their own dependencies, libraries, and configurations. Containers are best suited for constantly changing environments because they are lightweight, portable, scalable, and easy to deploy and update. Containers can also support microservices architectures, which enable faster and more frequent delivery of software features.

  References:

  CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 10: Mobile Device Security, page 512

• Question 155:

  An organization wants to deploy software in a container environment to increase security.

  Which of the following would limit the organization's ability to achieve this goal?

  A. Regulatory compliance
  B. Patch availability
  C. Kernel version
  D. Monolithic code
  D. Monolithic code

  ---

  Explanation

  A monolithic codebase can limit the deployment of software in a container environment because containers are designed to run lightweight, modular, and independent services. Monolithic applications are large, tightly coupled, and difficult to break into smaller components, which conflicts with the principles of containerization. This makes it harder to achieve the scalability, security, and isolation benefits of containers.

• Question 156:

  A systems administrator is auditing all company servers to ensure they meet the minimum security baseline. While auditing a Linux server, the systems administrator observes the /etc/shadow file has permissions beyond the baseline recommendation.

  Which of the following commands should the systems administrator use to resolve this issue?

  A. chmod
  B. grep
  C. dd
  D. passwd
  A. chmod

  ---

  Explanation

  The chmod command is used to change file permissions on Unix and Linux systems. If the /etc/shadow file has permissions beyond the baseline recommendation, the systems administrator should use chmod to modify the file's permissions, ensuring it adheres to the security baseline and limits access to authorized users only.

  References:

  CompTIA Security+ SY0-701 study materials, focusing on system hardening and file permissions management.

• Question 157:

  Which of the following is most likely associated with introducing vulnerabilities on a corporate network by the deployment of unapproved software?

  A. Hacktivists
  B. Script kiddies
  C. Competitors
  D. Shadow IT
  D. Shadow IT

  ---

  Explanation

  Shadow IT refers to the use of information technology systems, devices, software, applications, and services without explicit IT department approval. This is the most likely cause of introducing vulnerabilities on a corporate network by deploying unapproved software, as such software may not have been vetted for security compliance, increasing the risk of vulnerabilities.

  References:

  CompTIA Security+ SY0-701 Course Content: The concept of Shadow IT is discussed as a significant risk due to the introduction of unapproved and potentially vulnerable software into the corporate network.

• Question 158:

  A company is adding a clause to its AUP that states employees are not allowed to modify the operating system on mobile devices.

  Which of the following vulnerabilities is the organization addressing?

  A. Cross-site scripting
  B. Buffer overflow
  C. Jailbreaking
  D. Side loading
  C. Jailbreaking

  ---

  Explanation

  Jailbreaking is the process of removing the restrictions imposed by the manufacturer or carrier on a mobile device, such as an iPhone or iPad. Jailbreaking allows users to install unauthorized applications, modify system settings, and access root privileges. However, jailbreaking also exposes the device to potential security risks, such as malware, spyware, unauthorized access, data loss, and voided warranty. Therefore, an organization may prohibit employees from jailbreaking their mobile devices to prevent these vulnerabilities and protect the corporate data and network.

  References:

  CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 10: Mobile Device Security, page 507

• Question 159:

  A company is reviewing options to enforce user logins after several account takeovers. The following conditions must be met as part of the solution:

  1. Allow employees to work remotely or from assigned offices around the world.

  2. Provide a seamless login experience.

  3. Limit the amount of equipment required.

  Which of the following best meets these conditions?

  A. Trusted devices
  B. Geotagging
  C. Smart cards
  D. Time-based logins
  A. Trusted devices

• Question 160:

  Which of the following would most likely mitigate the impact of an extended power outage on a company's environment?

  A. Hot site
  B. UPS
  C. Snapshots
  D. SOAR
  B. UPS

  ---

  Explanation

  A UPS (Uninterruptible Power Supply) would most likely mitigate the impact of an extended power outage on a company's environment. A UPS provides backup power and ensures that systems continue to run during short-term power outages, giving enough time to perform an orderly shutdown or switch to a longer-term power solution like a generator.

  Hot site: A fully operational offsite data center that can be used if the primary site becomes unavailable. It's more suitable for disaster recovery rather than mitigating short-term power outages.

  UPS: Provides immediate backup power, protecting against data loss and hardware damage during power interruptions.

  Snapshots: Used for data backup and recovery, not for power outage mitigation.

  SOAR (Security Orchestration, Automation, and Response): A platform for automating security operations, not related to power outage mitigation.

  References:

  CompTIA Security+ SY0-701 Exam Objectives, Domain 3.4 - Importance of resilience and recovery in security architecture (Power: Generators, UPS).