CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 631:

  Which of the following is a reason environmental variables are a concern when reviewing potential system vulnerabilities?

  A. The contents of environmental variables could affect the scope and impact of an exploited vulnerability.
  B. In-memory environmental variable values can be overwritten and used by attackers to insert malicious code.
  C. Environmental variables de ne cryptographic standards for the system and could create vulnerabilities if deprecated algorithms are used.
  D. Environmental variables will determine when updates are run and could mitigate the likelihood of vulnerability exploitation.
  A. The contents of environmental variables could affect the scope and impact of an exploited vulnerability.

• Question 632:

  The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIRT found that the recruiter was able to use HTTP over port 53 to upload documents to a web server.

  Which of the following security infrastructure devices could have identified and blocked this activity?

  A. WAF utilizing SSL decryption
  B. NGFW utilizing application inspection
  C. UTM utilizing a threat feed
  D. SD-WAN utilizing IPSec
  B. NGFW utilizing application inspection

• Question 633:

  Which of the following could potentially be introduced at the time of side loading?

  A. User impersonation
  B. Rootkit
  C. On-path attack
  D. Buffer overflow
  B. Rootkit

• Question 634:

  An analyst is reviewing job postings to ensure sensitive company information is not being shared with the general public.

  Which of the following is the analyst most likely looking for?

  A. Office addresses
  B. Software versions
  C. List of board members
  D. Government identification numbers
  B. Software versions

• Question 635:

  Employees in the research and development business unit receive extensive training to ensure they understand how to best protect company data.

  Which of the following is the type of data these employees are most likely to use in day-to-day work activities?

  A. Encrypted
  B. Intellectual property
  C. Critical
  D. Data in transit
  B. Intellectual property

  ---

  Explanation

  Intellectual property is a type of data that consists of ideas, inventions, designs, or other creative works that have commercial value and are protected by law. Employees in the research and development business unit are most likely to use intellectual property data in their day-to-day work activities, as they are involved in creating new products or services for the company. Intellectual property data needs to be protected from unauthorized use, disclosure, or theft, as it can give the company a competitive advantage in the market. Therefore, these employees receive extensive training to ensure they understand how to best protect this type of data.

  References:

  CompTIA Security+ SY0-701 Certification Study Guide, page 90

  Professor Messer's CompTIA SY0-701 Security+ Training Course, video 1.2 - Security Concepts, 7:57 - 9:03.

• Question 636:

  An administrator wants to perform a risk assessment without using proprietary company information.

  Which of the following methods should the administrator use to gather information?

  A. Network scanning
  B. Penetration testing
  C. Open-source intelligence
  D. Configuration auditing
  C. Open-source intelligence

  ---

  Explanation

  Open-source intelligence (OSINT) involves collecting information from publicly available sources, such as websites, social media, news articles, and other publicly accessible databases. OSINT allows an administrator to gather valuable information about potential risks without using any proprietary or internal company information.

• Question 637:

  Drag Drop

  A security analyst is creating the first draft of a network diagram for the company's new customer-facing payment application that will be hosted by a third-party cloud service provider.

  INSTRUCTIONS

  Click the ? to select the appropriate icons to create a secure, redundant web application. Then use the dropdown menu to select the appropriate subnet type. Every space in the diagram must be filled.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  Select and Place:

  

  

  Explanation

  The diagram should be filled in the way shown below.

  

  WAF (Web Application Firewall) at the top to handle incoming traffic from the Internet Gateway. Load Balancer for distributing traffic between instances. Instances for handling the application workloads, ensuring multiple instances for redundancy. Autoscaling Instance to adjust the number of instances based on demand dynamically.

  In the middle of the diagram, you should select Private Subnet in the dropdown menu.

  This choice is appropriate because the elements in the lower section, especially the Database instances, are part of the private subnet. Placing databases in a private subnet adds an additional layer of security, as it prevents direct internet access to sensitive data. The private subnet is also typically used for backend resources that don't need to be exposed publicly.

• Question 638:

  Which of the following security concepts is accomplished with the installation of a RADIUS server?

  A. CIA
  B. AAA
  C. ACL
  D. PEM
  B. AAA

  ---

  Explanation

  The installation of a RADIUS server (Remote Authentication Dial-In User Service) is primarily associated with the security concept of AAA, which stands for Authentication, Authorization, and Accounting. RADIUS servers are used to manage user credentials and permissions centrally, ensuring that only authenticated and authorized users can access network resources, and tracking user activity for accounting purposes.

  Authentication: Verifies the identity of a user or device.

  When a user tries to access a network, the RADIUS server checks their credentials (username and password) against a database.

  Authorization: Determines what an authenticated user is allowed to do. After authentication, the RADIUS server grants permissions based on predefined policies.

  Accounting: Tracks the consumption of network resources by users. This involves logging session details such as the duration of connections and the amount of data transferred.

  References:

  CompTIA Security+ SY0-701 Exam Objectives, Domain 4.6 - Implement and maintain identity and access management.

• Question 639:

  Since a recent upgrade to a WLAN infrastructure, several mobile users have been unable to access the internet from the lobby. The networking team performs a heat map survey of the building and finds several WAPs in the area. The WAPs are using similar frequencies with high power settings.

  Which of the following installation considerations should the security team evaluate next?

  A. Channel overlap
  B. Encryption type
  C. New WLAN deployment
  D. WAP placement
  A. Channel overlap

  ---

  Explanation

  When multiple Wireless Access Points (WAPs) are using similar frequencies with high power settings, it can cause channel overlap, leading to interference and connectivity issues. This is likely the reason why mobile users are unable to access the internet in the lobby. Evaluating and adjusting the channel settings on the WAPs to avoid overlap is crucial to resolving the connectivity problems.

  References:

  CompTIA Security+ SY0-701 study materials, particularly the domain on Wireless and Mobile Security, which covers WLAN deployment considerations.

• Question 640:

  A coffee shop owner wants to restrict internet access to only paying customers by prompting them for a receipt number.

  Which of the following is the best method to use given this requirement?

  A. WPA3
  B. Captive portal
  C. PSK
  D. IEEE 802.1X
  B. Captive portal

  ---

  Explanation