CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 891:

  A new security regulation was announced that will take effect in the coming year. A company must comply with it to remain in business.

  Which of the following activities should the company perform next?

  A. Gap analysis
  B. Policy review
  C. Security procedure evaluation
  D. Threat scope reduction
  A. Gap analysis

  ---

  Explanation

  A gap analysis will help the company identify the differences between its current security practices and the requirements of the new regulation. This analysis provides a clear understanding of what needs to be addressed to achieve compliance, allowing the company to prioritize and implement necessary changes before the regulation takes effect.

• Question 892:

  For an upcoming product launch, a company hires a marketing agency whose owner is a close relative of the Chief Executive Officer.

  Which of the following did the company violate?

  A. Independent assessments
  B. Supply chain analysis
  C. Right-to-audit clause
  D. Conflict of interest policy
  D. Conflict of interest policy

  ---

  Explanation

  A conflict of interest policy ensures that decisions are made in the best interests of the company and not influenced by personal relationships or benefits. Hiring a marketing agency owned by a close relative of the CEO without appropriate disclosures or procedures would violate such a policy, as it creates a potential bias or unfair advantage.

• Question 893:

  A company is implementing a policy to allow employees to use their personal equipment for work. However, the company wants to ensure that only company-approved applications can be installed.

  Which of the following addresses this concern?

  A. MDM
  B. Containerization
  C. DLP
  D. FIM
  A. MDM

• Question 894:

  A Chief Security Officer signs off on a request to allow inbound SMB and RDP from the internet to a single VLAN.

  Which of the following is the most likely explanation for this activity?

  A. The company built a new file-sharing site.
  B. The organization is preparing for a penetration test.
  C. The security team is integrating with an SASE platform.
  D. The security team created a honeynet.
  D. The security team created a honeynet.

• Question 895:

  Which of the following is the MOST effective control against zero-day vulnerabilities?

  A. Network segmentation
  B. Patch management
  C. Intrusion prevention system
  D. Multiple vulnerability scanners
  A. Network segmentation

  ---

  Explanation

  IPS can only protect against known host and application-based attacks and exploits. IPS inspects traffic against signatures and anomalies, it does cover a broad spectrum of attack types, most of them signature-based, and signatures alone cannot protect against zero-day attacks. (www.rawcode7.medium.com) However, with network segmentation, you're able to isolate critical assets into different segments. And when a zero-day attack occurs, you're not at risk of losing all and are able to isolate the attack's effect to one segment.

• Question 896:

  A company is considering an expansion of access controls for an application that contractors and internal employees use to reduce costs.

  Which of the following risk elements should the implementation team understand before granting access to the application?

  A. Threshold
  B. Appetite
  C. Avoidance
  D. Register
  B. Appetite

• Question 897:

  A security administrator documented the following records during an assessment of network services:

  

  Two weeks later, the administrator performed a log review and noticed the records were changed as follows:

  

  When consulting the service owner, the administrator validated that the new address was not part of the company network.

  Which of the following was the company most likely experiencing?

  A. DDoS attack
  B. DNS poisoning
  C. Ransomware compromise
  D. Spyware infection
  B. DNS poisoning

  ---

  Explanation

  DNS poisoning (also known as DNS cache poisoning) involves an attacker manipulating DNS records, redirecting traffic to malicious destinations. In this case, the change in the DNS records to an IP address outside the company's network suggests that the attacker may have poisoned the DNS cache or altered the DNS records to reroute traffic, potentially leading to a malicious site or server.

  This is not a DDoS attack, ransomware compromise, or spyware infection as the primary issue appears to be manipulation of DNS records, which is characteristic of DNS poisoning.

• Question 898:

  Which of the following types of identification methods can be performed on a deployed application during runtime?

  A. Dynamic analysis
  B. Code review
  C. Package monitoring
  D. Bug bounty
  A. Dynamic analysis

  ---

  Explanation

  Dynamic analysis is performed on software during execution to identify vulnerabilities based on how the software behaves in real-world scenarios. It is useful in detecting security issues that only appear when the application is running.

  References:

  CompTIA SY0-701 Course Content.

• Question 899:

  Which of the following tasks is typically included in the BIA process?

  A. Estimating the recovery time of systems
  B. Identifying the communication strategy
  C. Evaluating the risk management plan
  D. Establishing the backup and recovery procedures
  E. Developing the incident response plan
  A. Estimating the recovery time of systems

  ---

  Explanation

  Estimating the recovery time of systems is a task typically included in the Business Impact Analysis (BIA) process. BIA involves identifying the critical functions of a business and determining the impact of a disruption. This includes estimating how long it will take to recover systems and resume normal operations. Estimating the recovery time of systems: A key component of BIA, which helps in understanding the time needed to restore systems and services after a disruption.

  Identifying the communication strategy: Typically part of the incident response plan, not BIA.

  Evaluating the risk management plan: Part of risk management, not specifically BIA.

  Establishing the backup and recovery procedures: Important for disaster recovery, not directly part of BIA.

  Developing the incident response plan: Focuses on responding to security incidents, not on the impact analysis.

  References:

  CompTIA Security+ SY0-701 Exam Objectives, Domain 5.2 - Risk management process (Business Impact Analysis - BIA).

• Question 900:

  A company is experiencing a web services outage on the public network. The services are up and available but inaccessible. The network logs show a sudden increase in network traffic that is causing the outage.

  Which of the following attacks is the organization experiencing?

  A. ARP poisoning
  B. Brute force
  C. Buffer overflow
  D. DDoS
  D. DDoS