CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 901:

  The Chief Information Security Officer (CISO) has determined the company is non-compliant with local data privacy regulations. The CISO needs to justify the budget request for more resources.

  Which of the following should the CISO present to the board as the direct consequence of non-compliance?

  A. Fines
  B. Reputational damage
  C. Sanctions
  D. Contractual implications
  A. Fines

• Question 902:

  A security analyst is reviewing logs and discovers the following:

  

  Which of the following should be used to best mitigate this type of attack?

  A. Input sanitization
  B. Secure cookies
  C. Static code analysis
  D. Sandboxing
  A. Input sanitization

  ---

  Explanation

  Input sanitization ensures that any user-supplied data is properly filtered and cleaned before being processed by the application. By sanitizing inputs, the system can prevent malicious command injection attempts like the one shown in the log entry.

• Question 903:

  A security analyst at an organization observed several user logins from outside the organization's network. The analyst determined that these logins were not performed by individuals within the organization.

  Which of the following recommendations would reduce the likelihood of future attacks? (Choose two.)

  A. Disciplinary actions for users
  B. Conditional access policies
  C. More regular account audits
  D. Implementation of additional authentication factors
  E. Enforcement of content filtering policies
  F. A review of user account permissions
  B. Conditional access policies
  D. Implementation of additional authentication factors

• Question 904:

  A company wants to implement MFA.

  Which of the following enables the additional factor while using a smart card?

  A. PIN
  B. Hardware token
  C. User ID
  D. SMS
  A. PIN

• Question 905:

  Which of the following should be used to ensure an attacker is unable to read the contents of a mobile device's drive if the device is lost?

  A. TPM
  B. ECC
  C. FDE
  D. HSM
  C. FDE

  ---

  Explanation

  Full Disk Encryption (FDE) ensures that all data on the drive is encrypted, preventing unauthorized access even if the device is lost.

• Question 906:

  Which of the following describes the difference between encryption and hashing?

  A. Encryption protects data in transit, while hashing protects data at rest.
  B. Encryption replaces cleartext with ciphertext, while hashing calculates a checksum.
  C. Encryption ensures data integrity, while hashing ensures data con dentiality.
  D. Encryption uses a public-key exchange, while hashing uses a private key.
  B. Encryption replaces cleartext with ciphertext, while hashing calculates a checksum.

• Question 907:

  Which of the following solutions would most likely be used in the financial industry to mask sensitive data?

  A. Tokenization
  B. Hashing
  C. Salting
  D. Steganography
  A. Tokenization

  ---

  Explanation

  Tokenization replaces sensitive data, such as credit card numbers, with non-sensitive equivalents (tokens) that have no exploitable value outside the system. It is widely used in the financial industry to protect data while maintaining functionality for processing and analysis.

• Question 908:

  Which of the following is the best way to secure an on-site data center against intrusion from an insider?

  A. Bollards
  B. Access badge
  C. Motion sensor
  D. Video surveillance
  B. Access badge

• Question 909:

  An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates.

  Which of the following best describes the type of information the analyst is trying to extract from the image files?

  A. Log data
  B. Metadata
  C. Encrypted data
  D. Sensitive data
  B. Metadata

• Question 910:

  Which of the following describes effective change management procedures?

  A. Approving the change after a successful deployment
  B. Having a backout plan when a patch fails
  C. Using a spreadsheet for tracking changes
  D. Using an automatic change control bypass for security updates
  B. Having a backout plan when a patch fails