CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 931:

  A company is experiencing issues with employees leaving the company for a competitor and taking customer contact information with them.

  Which of the following tools will help prevent this from reoccurring?

  A. FIM
  B. NAC
  C. IDS
  D. UBA
  D. UBA

• Question 932:

  A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices that the domain's URL points to a suspicious link.

  Which of the following security practices helped the manager to identify the attack?

  A. End user training
  B. Policy review
  C. URL scanning
  D. Plain text email
  A. End user training

  ---

  Explanation

  The security practice that helped the manager identify the suspicious link is end-user training. Training users to recognize phishing attempts and other social engineering attacks, such as hovering over links to check the actual URL, is a critical component of an organization's security awareness program. End user training: Educates employees on how to identify and respond to security threats, including suspicious emails and phishing attempts. Policy review: Ensures that policies are understood and followed but does not directly help in identifying specific attacks.

  URL scanning: Automatically checks URLs for threats, but the manager identified the issue manually.

  Plain text email: Ensures email content is readable without executing scripts, but the identification in this case was due to user awareness.

  References:

  CompTIA Security+ SY0-701 Exam Objectives, Domain 5.6 - Implement security awareness practices (End-user training).

• Question 933:

  Which of the following teams is best suited to determine whether a company has systems that can be exploited by a potential, identified vulnerability?

  A. Purple team
  B. Blue team
  C. Red team
  D. White team
  C. Red team

• Question 934:

  While conducting a business continuity tabletop exercise, the security team becomes concerned by potential impacts if a generator fails during failover.

  Which of the following is the team most likely to consider in regard to risk management activities?

  A. RPO
  B. ARO
  C. BIA
  D. MTTR
  C. BIA

  ---

  Explanation

  In this scenario, the security team is evaluating the potential impact of a generator failure during a failover situation as part of a business continuity tabletop exercise. This is fundamentally an impact analysis activity.

  C. BIA (Business Impact Analysis) - CORRECT A Business Impact Analysis identifies and evaluates the effects of disruptions on business operations. It helps determine critical systems, dependencies (such as generators), and the impact if those components fail. In this case, the team is concerned about what would happen if the generator fails during failover, which directly aligns with BIA activities.

  A. RPO (Recovery Point Objective) - INCORRECT RPO defines the maximum acceptable amount of data loss measured in time. It is focused on data recovery, not infrastructure failure impact.

  B. ARO (Annual Rate of Occurrence) - INCORRECT ARO estimates how often a risk event is expected to occur per year. The scenario is not about frequency, but about impact during a failure.

  D. MTTR (Mean Time to Repair) - INCORRECT MTTR measures the average time required to repair a system after failure. While relevant to recovery operations, it does not address the assessment of business impact. Conclusion: The team is analyzing the consequences of a failure scenario on business operations, which is the purpose of a Business Impact Analysis (BIA).

• Question 935:

  Which of the following best describe why a process would require a two-person integrity security control?

  A. To Increase the chance that the activity will be completed in half of the time the process would take only one user to complete
  B. To permit two users from another department to observe the activity that is being performed by an authorized user
  C. To reduce the risk that the procedures are performed incorrectly or by an unauthorized user
  D. To allow one person to perform the activity while being recorded on the CCTV camera
  C. To reduce the risk that the procedures are performed incorrectly or by an unauthorized user

  ---

  Explanation

  A two-person integrity security control is implemented to minimize the risk of errors or unauthorized actions. This control ensures that at least two individuals are involved in critical operations, which helps to verify the accuracy of the process and prevents unauthorized users from acting alone. It's a security measure commonly used in sensitive operations, like financial transactions or access to critical systems, to ensure accountability and accuracy.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 05 Security Program Management and Oversight.

  CompTIA Security+ SY0-601 Study Guide: Chapter on Security Operations and Management.

• Question 936:

  A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential information.

  Which of the following is the most likely reason the company filed the complaint?

  A. The MOU had basic clauses from a template.
  B. A SOW had not been agreed to by the client.
  C. A WO had not been mutually approved.
  D. A required NDA had not been signed.
  D. A required NDA had not been signed.

• Question 937:

  A remote employee navigates to a shopping website on their company-owned computer. The employee clicks a link that contains a malicious file.

  Which of the following would prevent this file from downloading?

  A. DLP
  B. FIM
  C. NAC
  D. EDR
  D. EDR

• Question 938:

  A systems administrator needs to provide traveling employees with a tool that will protect company devices regardless of where they are working.

  Which of the following should the administrator implement?

  A. Isolation
  B. Segmentation
  C. ACL
  D. HIPS
  D. HIPS

• Question 939:

  An engineer needs to ensure that a script has not been modified before it is launched.

  Which of the following best provides this functionality?

  A. Masking
  B. Obfuscation
  C. Hashing
  D. Encryption
  C. Hashing

  ---

  Explanation

  Hashing generates a unique fixed-size value (hash) based on the contents of a file or script. By comparing the current hash of the script with a previously calculated hash, the engineer can verify that the script has not been modified. Hashing ensures the integrity of the script without encrypting or altering it.

• Question 940:

  Which of the following is a technical security control?

  A. Security guard
  B. Policy
  C. Fence
  D. Firewall
  D. Firewall