CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 681:

  Which of the following enables the use of an input field to run commands that can view or manipulate data?

  A. Cross-site scripting
  B. Side loading
  C. Buffer overflow
  D. SQL injection
  D. SQL injection

  ---

  Explanation

  SQL injection is a type of attack that enables the use of an input field to run commands that can view or manipulate data in a database. SQL stands for Structured Query Language, which is a language used to communicate with databases.

  By injecting malicious SQL statements into an input field, an attacker can bypass authentication, access sensitive information, modify or delete data, or execute commands on the server. SQL injection is one of the most common and dangerous web application vulnerabilities.

  References:

  CompTIA Security+ Study Guide with over 500 Practice Test Questions: Exam SY0-701, 9th Edition, Chapter 5, page 195. CompTIA Security+ SY0-701 Exam Objectives, Domain 1.1, page 8.

• Question 682:

  Which of the following techniques can be used to sanitize the data contained on a hard drive while allowing for the hard drive to be repurposed?

  A. Degaussing
  B. Drive shredder
  C. Retention platform
  D. Wipe tool
  D. Wipe tool

  ---

  Explanation

  A wipe tool can be used to securely erase all data on a hard drive without physically damaging it, making it suitable for repurposing. Wiping overwrites the data on the drive multiple times, ensuring that previously stored information cannot be recovered. This approach allows the hard drive to be reused safely, as opposed to degaussing or physical destruction, which renders the drive unusable.

• Question 683:

  Which of the following cryptographic solutions is used to hide the fact that communication is occurring?

  A. Steganography
  B. Data masking
  C. Tokenization
  D. Private key
  A. Steganography

• Question 684:

  A security analyst receives alerts about an internal system sending a large amount of unusual DNS queries to systems on the internet over short periods of time during non-business hours.

  Which of the following is most likely occurring?

  A. A worm is propagating across the network.
  B. Data is being exfiltrated.
  C. A logic bomb is deleting data.
  D. Ransomware is encrypting files.
  B. Data is being exfiltrated.

  ---

  Explanation

  Data exfiltration is a technique that attackers use to steal sensitive data from a target system or network by transmitting it through DNS queries and responses. This method is often used in advanced persistent threat (APT) attacks, in which attackers seek to persistently evade detection in the target environment. A large amount of unusual DNS queries to systems on the internet over short periods of time during non-business hours is a strong indicator of data exfiltration. A worm, a logic bomb, and ransomware would not use DNS queries to communicate with their command and control servers or perform their malicious actions.

  References:

  CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 487

  Introduction to DNS Data Exfiltration

  Identifying a DNS Exfiltration Attack That Wasn't Real -- This Time

• Question 685:

  The internal audit team determines a software application is no longer in scope for external reporting requirements.

  Which of the following will confirm management's perspective that the application is no longer applicable?

  A. Data inventory and retention
  B. Right to be forgotten
  C. Due care and due diligence
  D. Acknowledgement and attestation
  D. Acknowledgement and attestation

  ---

  Explanation

  Acknowledgement and attestation involve formal confirmation that an application is no longer in scope for compliance, auditing, or reporting requirements. This typically includes documentation signed by relevant stakeholders confirming that the software no longer processes, stores, or transmits relevant data.

  Data inventory and retention (A) is related to managing data assets, not software scope confirmation.

  Right to be forgotten (B) pertains to privacy laws (e.g., GDPR), allowing individuals to request data deletion.

  Due care and due diligence (C) focus on security best practices rather than software applicability.

  References:

  CompTIA Security+ SY0-701 Official Study Guide, Security Program Management and Oversight domain.

• Question 686:

  A company wants to ensure that the software it develops will not be tampered with after the final version is completed.

  Which of the following should the company most likely use?

  A. Hashing
  B. Encryption
  C. Baselines
  D. Tokenization
  A. Hashing

• Question 687:

  A security team is setting up a new environment for hosting the organization's on-premises software application as a cloud-based service.

  Which of the following should the team ensure is in place in order for the organization to follow security best practices?

  A. Virtualization and isolation of resources
  B. Network segmentation
  C. Data encryption
  D. Strong authentication policies
  A. Virtualization and isolation of resources

  ---

  Explanation

  When hosting an on-premises software application as a cloud-based service, ensuring virtualization and isolation of resources is essential for maintaining security best practices. This involves using virtualization technologies to create isolated environments (e.g., virtual machines or containers) for different applications and services, reducing the risk of cross-tenant attacks and resource leakage.

  Network segmentation, data encryption, and strong authentication policies are also important security controls, but they do not directly address the core requirement of isolating computing resources in a multi-tenant cloud environment.

• Question 688:

  Which of the following considerations is the most important regarding cryptography used in an IoT device?

  A. Resource constraints
  B. Available bandwidth
  C. The use of block ciphers
  D. The compatibility of the TLS version
  A. Resource constraints

• Question 689:

  A company is currently utilizing usernames and passwords, and it wants to integrate an MFA method that is seamless, can integrate easily into a user's workflow, and can utilize employee-owned devices.

  Which of the following will meet these requirements?

  A. Push notifications
  B. Phone call
  C. Smart card
  D. Offline backup codes
  A. Push notifications

  ---

  Explanation

  Push notifications offer a seamless and user-friendly method of multi-factor authentication (MFA) that can easily integrate into a user's workflow. This method leverages employee-owned devices, like smartphones, to approve authentication requests through a push notification. It's convenient, quick, and doesn't require the user to input additional codes, making it a preferred choice for seamless integration with existing workflows.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 04 Security Operations. CompTIA Security+ SY0-601 Study Guide: Chapter on Identity and Access Management.

• Question 690:

  An organization is required to provide assurance that its controls are properly designed and operating effectively.

  Which of the following reports will best achieve the objective?

  A. Red teaming
  B. Penetration testing
  C. Independent audit
  D. Vulnerability assessment
  C. Independent audit