CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 951:

  After completing an annual external penetration test, a company receives the following guidance:

  Decommission two unused web servers currently exposed to the internet.

  Close 18 open and unused ports found on its existing production web servers.

  Remove company email addresses and contact information from public domain registration records.

  Which of the following does this represent?

  A. Attack surface reduction
  B. Vulnerability assessment
  C. Tabletop exercise
  D. Business impact analysis
  A. Attack surface reduction

• Question 952:

  A development team is launching a new public-facing web product. The Chief Information Security Officer has asked that the product be protected from attackers who use malformed or invalid inputs to destabilize the system.

  Which of the following practices should the development team implement?

  A. Fuzzing
  B. Continuous deployment
  C. Static code analysis
  D. Manual peer review
  A. Fuzzing

• Question 953:

  An organization would like to calculate the time needed to resolve a hardware issue with a server.

  Which of the following risk management processes describes this example?

  A. Recovery point objective
  B. Mean time between failures
  C. Recovery time objective
  D. Mean time to repair
  D. Mean time to repair

• Question 954:

  The Chief Information O cer (CIO) asked a vendor to provide documentation detailing the specific objectives within the compliance framework that the vendor's services meet. The vendor provided a report and a signed letter stating that the services meet 17 of the 21 objectives.

  Which of the following did the vendor provide to the CIO?

  A. Penetration test results
  B. Self-assessment findings
  C. Attestation of compliance
  D. Third-party audit report
  C. Attestation of compliance

• Question 955:

  Which of the following is the most likely motivation for a hacktivist?

  A. Financial gain
  B. Service disruption
  C. Philosophical beliefs
  D. Corporate espionage
  C. Philosophical beliefs

• Question 956:

  Which of the following technologies can achieve microsegmentation?

  A. Next-generation firewalls
  B. Software-defined networking
  C. Embedded systems
  D. Air-gapped
  B. Software-defined networking

• Question 957:

  A network administrator is working on a project to deploy a load balancer in the company's cloud environment.

  Which of the following fundamental security requirements does this project fulfil?

  A. Privacy
  B. Integrity
  C. Confidentiality
  D. Availability
  D. Availability

• Question 958:

  The help desk receives multiple calls that machines with an outdated OS version are running slowly. Several users are seeing virus detection alerts.

  Which of the following mitigation techniques should be reviewed first?

  A. Patching
  B. Segmentation
  C. Monitoring
  D. Isolation
  A. Patching

• Question 959:

  During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile.

  Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account?

  (Select two).

  A. Federation
  B. Identity proofing
  C. Password complexity
  D. Default password changes
  E. Password manager
  F. Open authentication
  A. Federation
  C. Password complexity

  ---

  Explanation

  Federation is an access management concept that allows users to authenticate once and access multiple resources or services across different domains or organizations. Federation relies on a trusted third party that stores the user's credentials and provides them to the requested resources or services without exposing them. Password complexity is a security measure that requires users to create passwords that meet certain criteria, such as length, character types, and uniqueness. Password complexity can help prevent brute-force attacks, password guessing, and credential stuffing by making passwords harder to crack or guess.

  References:

  CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 308-309 and 312-313

• Question 960:

  When trying to access an internal website, an employee reports that a prompt displays, stating that the site is insecure.

  Which of the following certificate types is the site most likely using?

  A. Wildcard
  B. Root of trust
  C. Third-party
  D. Self-signed
  D. Self-signed

  ---

  Explanation

  A self-signed certificate is not issued by a trusted certificate authority, which often causes browsers to flag it as insecure. When accessing a site with a self-signed certificate, users typically receive a warning about the site's security since the certificate cannot be automatically trusted, making it likely that the internal website is using a self-signed certificate.