CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 791:

  A network engineer is increasing the overall security of network devices and needs to harden the devices.

  Which of the following will best accomplish this task?

  A. Con guring centralized logging
  B. Generating local administrator accounts
  C. Replacing Telnet with SSH
  D. Enabling HTTP administration
  C. Replacing Telnet with SSH

• Question 792:

  Which of the following can be used to identify potential attacker activities without affecting production servers?

  A. Honey pot
  B. Video surveillance
  C. Zero Trust
  D. Geofencing
  A. Honey pot

  ---

  Explanation

  A honey pot is a system or a network that is designed to mimic a real production server and attract potential attackers. A honey pot can be used to identify the attacker's methods, techniques, and objectives without affecting the actual production servers. A honey pot can also divert the attacker's attention from the real targets and waste their time and resources.

  The other options are not effective ways to identify potential attacker activities without affecting production servers: Video surveillance: This is a physical security technique that uses cameras and monitors to record and observe the activities in a certain area. Video surveillance can help to deter, detect, and investigate physical intrusions, but it does not directly identify the attacker's activities on the network or the servers.

  Zero Trust: This is a security strategy that assumes that no user, device, or network is trustworthy by default and requires strict verification and validation for every request and transaction. Zero Trust can help to improve the security posture and reduce the attack surface of an organization, but it does not directly identify the attacker's activities on the network or the servers.

  Geofencing: This is a security technique that uses geographic location as a criterion to restrict or allow access to data or resources. Geofencing can help to protect the data sovereignty and compliance of an organization, but it does not directly identify the attacker's activities on the network or the servers.

  References:

  1: CompTIA Security+ SY0-701 Certification Study Guide, page 54

  2: Honeypots and Deception -SY0-601 CompTIA Security+ : 2.1, video by Professor Messer

  3: CompTIA Security+ SY0-701 Certification Study Guide, page 97

  4: CompTIA Security+ SY0-701 Certification Study Guide, page

  985: CompTIA Security+ SY0-701 Certification Study Guide, page 99.

• Question 793:

  During a recent company safety stand-down, the cyber-awareness team gave a presentation on the importance of cyber hygiene. One topic the team covered was best practices for printing centers.

  Which of the following describes an attack method that relates to printing centers?

  A. Whaling
  B. Credential harvesting
  C. Prepending
  D. Dumpster diving
  D. Dumpster diving

  ---

  Explanation

  Dumpster diving is an attack method where attackers search through physical waste, such as discarded documents and printouts, to find sensitive information that has not been properly disposed of. In the context of printing centers, this could involve attackers retrieving printed documents containing confidential data that were improperly discarded without shredding or other secure disposal methods. This emphasizes the importance of proper disposal and physical security measures in cyber hygiene practices.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 04 Security Operations. CompTIA Security+ SY0-601 Study Guide: Chapter on Physical Security and Cyber Hygiene.

• Question 794:

  A security analyst must prevent remote users from accessing malicious URLs. The sites need to be checked inline for reputation, content, or categorization.

  Which of the following technologies will help secure the enterprise?

  A. VPN
  B. SASE
  C. IDS
  D. SD-WAN
  B. SASE

  ---

  Explanation

  Secure Access Service Edge (SASE) is the technology best suited for preventing remote users from accessing malicious URLs. According to the CompTIA Security+ SY0-701 framework, SASE integrates cloud-native security capabilities such as DNS filtering, secure web gateways, CASB, and URL categorization, all delivered inline. This means every URL request from a remote user is checked in real time for reputation, content, and category before access is granted.

  This solution is specifically designed for remote workforces because security enforcement happens in the cloud, regardless of user location-eliminating reliance on on-premise proxies or VPN routing. SASE also enables consistent policy application and real-time enforcement across distributed networks.

  A VPN (A) only encrypts traffic; it does not perform URL reputation checks. IDS (C) detects malicious activity but does not block URL access. SD-WAN (D) optimizes WAN routing but is not focused on content filtering or URL reputation.

  Therefore, SASE is the correct and most effective solution for inline URL inspection and preventing remote users from reaching malicious sites.

• Question 795:

  A web application for a bank displays the following output when showing details about a customer's bank account:

  

  Which of the following techniques is most likely implemented in this web application?

  A. Data minimization
  B. Data scrambling
  C. Data masking
  D. Anonymization
  C. Data masking

  ---

  Explanation

  The application is hiding part of the account number and client name while still showing enough information for recognition. That is data masking. Data minimization means collecting or displaying only the minimum necessary data, data scrambling means transforming data into an unreadable or altered form, and anonymization means removing identifying elements so the person can no longer be identified.

• Question 796:

  A company wants to protect a specialized legacy platform that controls the physical flow of gas inside of pipes.

  Which of the following environments does the company need to secure to best achieve this goal?

  A. IaaS
  B. SCADA
  C. SDN
  D. IoT
  B. SCADA

  ---

  Explanation

  Systems that control physical industrial processes-such as pumping gas, water control, electrical grids, or manufacturing lines-fall under SCADA (Supervisory Control and Data Acquisition) environments. SCADA systems are part of larger OT (Operational Technology) infrastructures and manage sensors, actuators, valves, flow controls, and telemetry.

  CompTIA Security+ SY0-701 explains that SCADA environments typically:

  Use legacy protocols (e.g., Modbus, DNP3)

  Require high availability

  Often run outdated operating systems

  Have control systems that cannot easily be patched

  Require specialized segmentation and monitoring

  This exactly matches the scenario describing a "specialized legacy platform controlling gas flow inside pipes."

  IaaS (A) is cloud infrastructure and unrelated to industrial control. SDN (C) relates to software-defined networking, not physical industrial controls. IoT (D) includes smart devices but is not typically used for large-scale industrial gas control.

  Thus, securing SCADA is the correct answer.

• Question 797:

  An enterprise security team is researching a new security architecture to better protect the company's networks and applications against the latest cyberthreats. The company has a fully remote workforce. The solution should be highly redundant and enable users to connect to a VPN with an integrated, software-based firewall.

  Which of the following solutions meets these requirements?

  A. IPS
  B. SIEM
  C. SASE
  D. CASB
  C. SASE

  ---

  Explanation

  SASE combines network and security functions, including VPN, software-based firewalls, secure web gateways, and more, into a single cloud-delivered service. It is well-suited for a fully remote workforce as it provides secure, scalable, and redundant access to company resources from any location, while protecting networks and applications against the latest cyberthreats.

• Question 798:

  An organization experiences a cybersecurity incident involving a command-and-control server.

  Which of the following logs should be analyzed to identify the impacted host? (Choose two.)

  A. Application
  B. Authentication
  C. DHCP
  D. Network
  E. Firewall
  F. Database
  D. Network
  E. Firewall

• Question 799:

  Which of the following penetration testing teams is focused only on trying to compromise an organization using an attacker's tactics?

  A. White
  B. Red
  C. Purple
  D. Blue
  B. Red

  ---

  Explanation

  Red teams are focused only on trying to compromise an organization using an attacker's tactics. They simulate real-world attacks to test the effectiveness of the organization's security defenses and identify vulnerabilities. Red team: Acts as adversaries to simulate attacks and find security weaknesses. White team: Oversees and ensures the rules of engagement are followed during the penetration test.

  Purple team: Facilitates collaboration between the red team and the blue team to improve security.

  Blue team: Defends against attacks and responds to security incidents.

  References:

  CompTIA Security+ SY0-701 Exam Objectives, Domain 5.5 - Types and purposes of audits and assessments (Penetration testing: Red team).

• Question 800:

  A security officer is implementing a security awareness program and has placed security-themed posters around the building and assigned online user training.

  Which of the following will the security officer most likely implement?

  A. Password policy
  B. Access badges
  C. Phishing campaign
  D. Risk assessment
  C. Phishing campaign