CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 321:

  A security engineer would like to enhance the use of automation and orchestration within the SIEM.

  Which of the following would be the primary benefit of this enhancement?

  A. It increases complexity.
  B. It removes technical debt.
  C. It adds additional guard rails.
  D. It acts as a workforce multiplier.
  D. It acts as a workforce multiplier.

  ---

  Explanation

  By automating repetitive tasks and orchestrating responses to common security incidents, the SIEM can handle more work without requiring additional personnel. This enhancement allows the security team to be more efficient, respond faster, and focus on more complex tasks, effectively multiplying the impact of the existing workforce.

• Question 322:

  A small business initially plans to open common communications ports (21, 22, 25, 80, 443) on its firewall to allow broad access to its screened subnet. However, their security consultant advises against this action.

  Which of the following security principles is the consultant addressing?

  A. Secure access service edge
  B. Attack surface
  C. Least privilege
  D. Separation of duties
  B. Attack surface

  ---

  Explanation

  The correct answer is Attack surface because opening multiple common service ports unnecessarily increases the number of potential entry points an attacker can target. In the Security+ SY0-701 exam objectives, the attack surface is defined as the total number of exposed interfaces, services, ports, protocols, and access points that an attacker could attempt to exploit. Each open port corresponds to a listening service, and every exposed service represents an opportunity for reconnaissance, exploitation, or abuse.

  In this scenario, the business intends to open ports for FTP, SSH, SMTP, HTTP, and HTTPS without clearly limiting access. While some of these services may be required, opening all of them broadly-especially to a screened subnet-significantly expands the attack surface. If any of these services are misconfigured, unpatched, or vulnerable, attackers could exploit them to gain unauthorized access. The SY0-701 study guide emphasizes minimizing exposed services as a foundational defensive strategy, often referred to as reducing attack surface area.

  Option C, least privilege, is related but not the best answer. Least privilege focuses on granting users or systems only the minimum access required, whereas this question specifically concerns exposed network services rather than access rights. Option A, secure access service edge (SASE), is a cloud-based architecture model and is unrelated to basic firewall port exposure decisions. Option D, separation of duties, applies to role and responsibility distribution, not network exposure.

  By advising against opening multiple common ports, the consultant is recommending a reduction in exposed services to limit opportunities for attack. This aligns directly with SY0-701 guidance on secure network design, firewall hardening, and minimizing externally accessible services.

  In summary, limiting open ports reduces the organization's attack surface, making Attack surface the correct and best answer.

• Question 323:

  In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to the password.

  Which of the following best describes this technique?

  A. Key stretching
  B. Tokenization
  C. Data masking
  D. Salting
  D. Salting

• Question 324:

  A systems administrator creates a script that validates OS version, patch levels, and installed applications when users log in.

  Which of the following examples best describes the purpose of this script?

  A. Resource scaling
  B. Policy enumeration
  C. Baseline enforcement
  D. Guardrails implementation
  C. Baseline enforcement

  ---

  Explanation

  Baseline enforcement ensures that all systems adhere to predefined security configurations, such as approved OS versions and patch levels, improving compliance and reducing vulnerabilities.

  References:

  CompTIA Security+ SY0-701 Study Guide, Domain 4:Security Operations, Section: "System Baselines and Monitoring".

• Question 325:

  An administrator wants to perform a risk assessment without using proprietary company information.

  Which of the following methods should the administrator use to gather information?

  A. Network scanning
  B. Penetration testing
  C. Open-source intelligence
  D. Configuration auditing
  C. Open-source intelligence

  ---

  Explanation

  Open-source intelligence (OSINT) involves collecting information from publicly available sources, such as websites, social media, news articles, and other publicly accessible databases. OSINT allows an administrator to gather valuable information about potential risks without using any proprietary or internal company information.

• Question 326:

  A business uses Wi-Fi with content filleting enabled. An employee noticed a coworker accessed a blocked sue from a work computer and reported the issue. While investigating the issue, a security administrator found another device providing internet access to certain employees.

  Which of the following best describes the security risk?

  A. The host-based security agent Is not running on all computers.
  B. A rogue access point Is allowing users to bypass controls.
  C. Employees who have certain credentials are using a hidden SSID.
  D. A valid access point is being jammed to limit availability.
  B. A rogue access point Is allowing users to bypass controls.

  ---

  Explanation

  The presence of another device providing internet access that bypasses the content filtering system indicates the existence of a rogue access point. Rogue access points are unauthorized devices that can create a backdoor into the network, allowing users to bypass security controls like content filtering. This presents a significant security risk as it can expose the network to unauthorized access and potential data breaches.

  References:

  CompTIA Security+ SY0-701 Course Content: Rogue access points are highlighted as a major security risk, allowing unauthorized access to the network and bypassing security measures.

• Question 327:

  A company wants to ensure secure remote access to its internal network. The company has only one public IP and would like to avoid making any changes to the current network setup.

  Which of the following solutions would best accomplish this goal?

  A. PAT
  B. IPSec VPN
  C. Perimeter network
  D. Reverse proxy
  B. IPSec VPN

• Question 328:

  An organization experienced a security breach that allowed an attacker to send fraudulent wire transfers from a hardened PC exclusively to the attacker's bank through remote connections. A security analyst is creating a timeline of events and has found a different PC on the network containing malware. Upon reviewing the command history, the analyst finds the following:

  PS>.

  \mimikatz.exe "sekurlsa::pth /user:localadmin /domain:corp-domain.com/ntlm:B4B9B02E1F29A3CF193EAB28C8D617D3F327 Which of the following best describes how the attacker gained access to the hardened PC?

  A. The attacker created fileless malware that was hosted by the banking platform.
  B. The attacker performed a pass-the-hash attack using a shared support account.
  C. The attacker utilized living-off-the-land binaries to evade endpoint detection and response software.
  D. The attacker socially engineered the accountant into performing bad transfers.
  B. The attacker performed a pass-the-hash attack using a shared support account.

• Question 329:

  Which of the following describes the understanding between a company and a client about what will be provided and the accepted time needed to provide the company with the resources?

  A. SLA
  B. MOU
  C. MOA
  D. BPA
  A. SLA

  ---

  Explanation

  A Service Level Agreement (SLA) is a formal document between a service provider and a client that defines the expected level of service, including what resources will be provided and the agreed-upon time frames. It typically includes metrics to evaluate performance, uptime guarantees, and response times. MOU (Memorandum of Understanding) and MOA (Memorandum of Agreement) are less formal and may not specify the exact level of service. BPA (Business Partners Agreement) focuses more on the long-term relationship between partners.

• Question 330:

  Which of the following is a possible factor for MFA?

  A. Something you exhibit
  B. Something you have
  C. Somewhere you are
  D. Someone you know
  B. Something you have