CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 601:

  A security analyst is creating base for the server team to follow when hardening new devices for deployment.

  Which of the following beet describes what the analyst is creating?

  A. Change management procedure
  B. Information security policy
  C. Cybersecurity framework
  D. Secure configuration guide
  D. Secure configuration guide

  ---

  Explanation

  The security analyst is creating a "secure configuration guide," which is a set of instructions or guidelines used to configure devices securely before deployment. This guide ensures that the devices are set up according to best practices to minimize vulnerabilities and protect against potential security threats.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 03 Security Architecture. CompTIA Security+ SY0-601 Study Guide: Chapter on System Hardening and Secure Configuration.

• Question 602:

  A network manager wants to protect the company's VPN by implementing multifactor authentication that uses:

  1. Something you know

  2. Something you have

  3. Something you are

  Which of the following would accomplish the manager's goal?

  A. Domain name, PKI, GeolP lookup
  B. VPN IP address, company ID, facial structure
  C. Password, authentication token, thumbprint
  D. Company URL, TLS certificate, home address
  C. Password, authentication token, thumbprint

  ---

  Explanation

  The correct answer is C. Password, authentication token, thumbprint. This combination of authentication factors satisfies the manager's goal of implementing multifactor authentication that uses something you know, something you have, and something you are.

  Something you know is a type of authentication factor that relies on the user's knowledge of a secret or personal information, such as a password, a PIN, or a security question. A password is a common example of something you know that can be used to access a VPN Something you have is a type of authentication factor that relies on the user's possession of a physical object or device, such as a smart card, a token, or a smartphone. An authentication token is a common example of something you have that can be used to generate a one-time password (OTP) or a code that can be used to access a VPN Something you are is a type of authentication factor that relies on the user's biometric characteristics, such as a fingerprint, a face, or an iris. A thumbprint is a common example of something you are that can be used to scan and verify the user's identity to access a VPN

  References:

  1: CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter

  4: Identity and Access Management, page 177

  2: CompTIA Security+ Certification Kit: Exam SY0-701, 7th Edition, Chapter

  4: Identity and Access Management, page

• Question 603:

  Which of the following threat actors is the most likely to seek financial gain through the use of ransomware attacks?

  A. Organized crime
  B. Insider threat
  C. Nation-state
  D. Hacktivists
  A. Organized crime

  ---

  Explanation

  Organized crime groups are primarily motivated by financial gain. Ransomware attacks are a popular tool for these groups because they can encrypt a victim's data and demand a ransom payment (often in cryptocurrency) to restore access.

  This form of attack can yield a high financial return if victims choose to pay.

• Question 604:

  Which of the following is the best safeguard to protect against an extended power failure?

  A. Off-site backups
  B. Batteries
  C. Uninterruptible power supplies
  D. Generators
  D. Generators

  ---

  Explanation

  For extended power failures, the best safeguard is a generator. CompTIA Security+ SY0-701 emphasizes that generators are designed to provide long-term, sustained power, unlike UPS systems, which only supply temporary emergency power.

  Generators ensure that critical operations-including data centers, communication systems, and security infrastructure-stay online for hours or days, depending on fuel capacity. This matches the requirement for mitigating "extended" outages.

  UPS units (C) protect against short-term outages and provide time for graceful shutdown or generator startup, but cannot support prolonged power consumption. Batteries (B) provide the least protection and run out quickly. Off-site backups (A) do not maintain operational continuity; they simply preserve data.

  Disaster recovery and business continuity planning in SY0-701 highlights generators as essential components for maintaining availability, a core principle of the CIA triad. Generators prevent downtime, maintain productivity, and keep essential systems functioning throughout prolonged outages, making D the best answer.

• Question 605:

  Which of the following is best used to detect fraud by assigning employees to different roles?

  A. Least privilege
  B. Mandatory vacation
  C. Separation of duties
  D. Job rotation
  D. Job rotation

  ---

  Explanation

  Job rotation is a strategy used in organizations to detect and prevent fraud by periodically assigning employees to different roles within the organization. This approach helps ensure that no single employee has exclusive control over a specific process or set of tasks for an extended period, thereby reducing the opportunity for fraudulent activities to go unnoticed. By rotating roles, organizations can uncover irregularities and discrepancies that might have been concealed by an employee who had prolonged access to sensitive functions. Job rotation also promotes cross-training, which can enhance the organization's overall resilience and flexibility.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 05 Security Program Management and Oversight.

  CompTIA Security+ SY0-601 Study Guide: Chapter on Risk Management and Compliance.

• Question 606:

  Which of the following techniques would attract the attention of a malicious attacker in an insider threat scenario?

  A. Creating a false text file in /docs/salaries
  B. Setting weak passwords in /etc/shadow
  C. Scheduling vulnerable jobs in /etc/crontab
  D. Adding a fake account to /etc/passwd
  A. Creating a false text file in /docs/salaries

  ---

  Explanation

  A file with a name like "salaries" suggests sensitive information, which would likely draw the attention of an insider threat looking for valuable or confidential data. This technique is often used as part of a honeypot strategy to monitor and detect suspicious activity by insiders attempting unauthorized access.

• Question 607:

  Which of the following is the fastest and most cost-effective way to confirm a third-party supplier's compliance with security obligations?

  A. Attestation report
  B. Third-party audit
  C. Vulnerability assessment
  D. Penetration testing
  A. Attestation report

• Question 608:

  Which of the following definitions best describes the concept of log correlation?

  A. Combining relevant logs from multiple sources into one location
  B. Searching and processing data to identify patterns of malicious activity
  C. Making a record of the events that occur in the system
  D. Analyzing the log files of the system components
  B. Searching and processing data to identify patterns of malicious activity

  ---

  Explanation

  Log correlation involves analyzing and linking data from multiple sources to identify patterns, trends, or sequences of events that indicate potential security incidents or malicious activity. This process helps security teams detect complex threats that may not be evident from individual logs alone.

• Question 609:

  A help desk employee receives a call from someone impersonating the Chief Executive Officer. The caller asks for assistance with resetting a password.

  Which of the following best describes this event?

  A. Vishing
  B. Hacktivism
  C. Blackmail
  D. Misinformation
  A. Vishing

  ---

  Explanation

  Vishing (voice phishing) is a social engineering attack conducted over the phone. In this scenario, the attacker impersonates the CEO to manipulate the help desk employee into resetting a password, which is a classic example of a vishing attempt.

• Question 610:

  Which of the following provides guidelines for the management and reduction of information security risk?

  A. CIS
  B. NIST CSF
  C. ISO
  D. PCI DSS
  B. NIST CSF