CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 911:

  The security team notices that the Always On VPN solution sometimes fails to connect. This leaves remote users unprotected because they cannot connect to the on-premises web proxy.

  Which of the following changes will best provide web protection in this scenario?

  A. Implement network access control.
  B. Configure the local gateway to point to the VPN.
  C. Create a public NAT to the on-premises proxy.
  D. Install a host-based content filtering solution.
  D. Install a host-based content filtering solution.

• Question 912:

  While reviewing a recent compromise, a forensics team discovers that there are hard-coded credentials in the database connection strings.

  Which of the following assessment types should be performed during software development to prevent this from reoccurring?

  A. Vulnerability scan
  B. Penetration test
  C. Static analysis
  D. Quality assurance
  C. Static analysis

  ---

  Explanation

  Static analysis, also known as Static Application Security Testing (SAST), analyzes source code without executing it to identify security weaknesses such as hard-coded passwords, insecure API calls, and improper credential handling. This aligns exactly with the issue described-credentials embedded directly in code.

  CompTIA Security+ SY0-701 stresses that secure software development practices must include automated static code analysis tools that scan for credential exposure, insecure dependencies, injection risks, and coding standards violations.

  Static analysis detects these issues early in the SDLC, long before deployment.

  A vulnerability scan (A) examines running systems, not source code. A penetration test (B) actively exploits vulnerabilities but cannot reliably detect embedded secrets. Quality assurance (D) checks functional requirements, not security flaws in code.

  Therefore, static analysis is the correct and most effective assessment to prevent reoccurrence of hard-coded credentials in software systems.

• Question 913:

  A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of individual operating systems.

  Which of the following strategies should the company use to achieve this security requirement?

  A. Microservices
  B. Containerization
  C. Virtualization
  D. Infrastructure as code
  B. Containerization

  ---

  Explanation

  Containerization allows multiple applications or services to run in isolated environments on the same underlying OS. Unlike, virtualization where each VM runs its own OS, containers share the host OS kernel but keep the applications isolated from one another. This significantly reduces the number of operating systems required while maintaining security and isolation between applications.

• Question 914:

  After creating a contract for IT contractors, the human resources department changed several clauses. The contract has gone through three revisions.

  Which of the following processes should the human resources department follow to track revisions?

  A. Version validation
  B. Version changes
  C. Version updates
  D. Version control
  D. Version control

• Question 915:

  Which of the following describes the category of data that is most impacted when it is lost?

  A. Confidential
  B. Public
  C. Private
  D. Critical
  D. Critical

  ---

  Explanation

  The category of data that is most impacted when it is lost is "Critical." Critical data is essential to the organization's operations and often includes sensitive information such as financial records, proprietary business information, and vital operational data. The loss of critical data can severely disrupt business operations and have significant financial, legal, and reputational consequences.

  Confidential: Refers to data that must be protected from unauthorized access to maintain privacy and security.

  Public: Refers to data that is intended for public disclosure and whose loss does not have severe consequences.

  Private: Typically refers to personal data that needs to be protected to ensure privacy.

  Critical: Refers to data that is essential for the operation and survival of the organization, and its loss can have devastating impacts.

  References:

  CompTIA Security+ SY0-701 Exam Objectives, Domain 5.2 - Risk management (Critical data identification and impact analysis).

• Question 916:

  A security analyst developed a script to automate a trivial and repeatable task.

  Which of the following best describes the benefits of ensuring other team members understand how the script works?

  A. To reduce implementation cost
  B. To identify complexity
  C. To remediate technical debt
  D. To prevent a single point of failure
  D. To prevent a single point of failure

  ---

  Explanation

  Ensuring that other team members understand how a script works is essential to prevent a single point of failure. If only one person knows how the script operates, the organization risks being unable to maintain or troubleshoot it if that person is unavailable. Sharing knowledge ensures continuity and reduces dependence on one individual.

  Reducing implementation cost and remediating technical debt are secondary considerations in this context.

  Identifying complexity is important, but the main benefit is to avoid a single point of failure.

• Question 917:

  Which of the following security controls would best guard a payroll system against insider manipulation threats?

  A. Compensating
  B. Deterrent
  C. Detective
  D. Corrective
  C. Detective

• Question 918:

  Executives at a company are concerned about employees accessing systems and information about sensitive company projects unrelated to the employees' normal job duties.

  Which of the following enterprise security capabilities will the security team most likely deploy to detect that activity?

  A. UBA
  B. EDR
  C. NAC
  D. DLP
  A. UBA

  ---

  Explanation

  UBA helps detect unusual or unauthorized access patterns by analyzing user behavior and identifying deviations from typical access patterns. It can alert the security team when employees attempt to access systems or data unrelated to their job duties, which addresses the executives' concern about potential insider threats or policy violations related to sensitive projects.

• Question 919:

  A utility company is designing a new platform that will host all the virtual machines used by business applications. The requirements include:

  1. A starting baseline of 50% memory utilization

  2. Storage scalability

  3. Single circuit failure resilience

  Which of the following best meets all of these requirements?

  A. Connecting dual PDUs to redundant power supplies
  B. Transitioning the platform to an IaaS provider
  C. Configuring network load balancing for multiple paths
  D. Deploying multiple large NAS devices for each host
  B. Transitioning the platform to an IaaS provider

• Question 920:

  Which of the following documents details how to accomplish a technical security task?

  A. Standard
  B. Policy
  C. Guideline
  D. Procedure
  D. Procedure