CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 291:

  SIMULATION

  A recent black-box penetration test of http://example.com discovered that external

  website vulnerabilities exist, such as directory traversals, cross-site scripting, cross-site forgery, and insecure protocols.

  You are tasked with reducing the attack space and enabling secure protocols.

  INSTRUCTIONS

  Part 1

  Use the drop-down menus to select the appropriate technologies for each location to implement a secure and resilient web architecture. Not all technologies will be used, and technologies may be used multiple times.

  Part 2

  Use the drop-down menus to select the appropriate command snippets from the drop-down menus. Each command section must be filled.

  

  

  A. Check the anser below.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. Check the anser below.

  ---

  Explanation

  Answer: See the solution in explanation below.

  

  

• Question 292:

  Which of the following is the best resource to consult for information on the most common application exploitation methods?

  A. OWASP
  B. STIX
  C. OVAL
  D. Threat intelligence feed
  E. Common Vulnerabilities and Exposures
  A. OWASP

• Question 293:

  A manufacturing organization receives the results from a penetration test. According to the results, legacy devices that are critical to continued business function display vulnerabilities. The devices have minimal vendor support and should be segmented and monitored closely.

  Which of the following devices were most likely identified?

  A. Workstations
  B. Embedded systems
  C. Core router
  D. DNS server
  B. Embedded systems

  ---

  Explanation

  The scenario describes legacy, business-critical devices with minimal vendor support that must be segmented and closely monitored. This strongly matches embedded systems commonly found in manufacturing environments (e.g., industrial machinery controllers, sensors, ICS/SCADA components). The Study Guide defines embedded systems as: "Embedded systems are computer systems that are built into other devices. Industrial machinery, appliances, and cars are all places where you may have encountered embedded systems." Manufacturing organizations often can't easily replace or patch these systems because they have long lifecycles and may depend on specialized firmware/RTOS and proprietary integrations. The same guide warns that legacy/unsupported platforms create risk due to lack of vendor security patches and recommends compensating controls: "Lack of support implies that no new security patches... will be released... In cases where the organization simply must continue using an unsupported operating system, best practice dictates isolating the system as much as possible... and applying as many compensating security controls as possible, such as increased monitoring and implementing strict network firewall rules."

  That guidance directly supports the question's "segmented and monitored closely" language. Workstations typically have stronger patch/support options; core routers and DNS servers are important, but they are not usually described as embedded legacy devices with minimal vendor support in a manufacturing context.

  References:

  Embedded systems definition and manufacturing examples

  legacy/unsupported systems require isolation/monitoring compensating controls.

• Question 294:

  A company has a website in a server cluster. One server is experiencing very high usage, while others are nearly unused.

  Which of the following should the company configure to help distribute traffic quickly?

  A. Server multiprocessing
  B. Warm site
  C. Load balancer
  D. Proxy server
  C. Load balancer

  ---

  Explanation

  A load balancer distributes incoming traffic evenly across multiple servers to prevent any single server from becoming overloaded. This ensures high availability, scalability, and optimal performance of the company's website. Server multiprocessing (A) refers to the use of multiple processors within a single server but does not distribute traffic across multiple servers.

  A warm site (B) is a disaster recovery strategy, not a method for balancing real-time traffic.

  A proxy server (D) acts as an intermediary between users and web services but does not distribute server load.

  Using a load balancer allows for efficient traffic management and prevents server overload.

• Question 295:

  A company needs to keep the fewest records possible, meet compliance needs, and ensure destruction of records that are no longer needed.

  Which of the following best describes the policy that meets these requirements?

  A. Security policy
  B. Classification policy
  C. Retention policy
  D. Access control policy
  C. Retention policy

• Question 296:

  Which of the following best ensures minimal downtime and data loss for organizations with critical computing equipment located in earthquake-prone areas?

  A. Generators and UPS
  B. Off-site replication
  C. Redundant cold sites
  D. High availability networking
  B. Off-site replication

• Question 297:

  A penetration tester was able to gain unauthorized access to a hypervisor platform.

  Which of the following vulnerabilities was most likely exploited?

  A. Cross-site scripting
  B. SQL injection
  C. Race condition
  D. VM escape
  D. VM escape

• Question 298:

  Which of the following tools can assist with detecting an employee who has accidentally emailed a file containing a customer's PII?

  A. SCAP
  B. NetFlow
  C. Antivirus
  D. DLP
  D. DLP

  ---

  Explanation

  DLP stands for Data Loss Prevention, which is a tool that can assist with detecting and preventing the unauthorized transmission or leakage of sensitive data, such as a customer's PII (Personally Identifiable Information). DLP can monitor, filter, and block data in motion (such as emails), data at rest (such as files), and data in use (such as applications). DLP can also alert the sender, the recipient, or the administrator of the data breach, and apply remediation actions, such as encryption, quarantine, or deletion. DLP can help an organization comply with data protection regulations, such as GDPR, HIPAA, or PCI DSS, and protect its reputation and assets.

  References:

  CompTIA Security+ Study Guide with over 500 Practice Test Questions: Exam SY0-701, 9th Edition, Chapter 2, page 78. CompTIA Security+ SY0-701 Exam Objectives, Domain 2.5, page 11.

• Question 299:

  Which of the following activities uses OSINT?

  A. Social engineering testing
  B. Data analysis of logs
  C. Collecting evidence of malicious activity
  D. Producing IOC for malicious artifacts
  A. Social engineering testing

• Question 300:

  Which of the following should a security operations center use to improve its incident response procedure?

  A. Playbooks
  B. Frameworks
  C. Baselines
  D. Benchmarks
  A. Playbooks

  ---

  Explanation

  A playbook is a documented set of procedures that outlines the step-by-step response to specific types of cybersecurity incidents. Security Operations Centers (SOCs) use playbooks to improve consistency, efficiency, and accuracy during incident response. Playbooks help ensure that the correct procedures are followed based on the type of incident, ensuring swift and effective remediation. Frameworks provide general guidelines for implementing security but are not specific enough for incident response procedures.

  Baselines represent normal system behavior and are used for anomaly detection, not incident response guidance.

  Benchmarks are performance standards and are not directly related to incident response.