CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 961:

  An organization wants to limit potential impact to its log-in database in the event of a breach.

  Which of the following options is the security team most likely to recommend?

  A. Tokenization
  B. Hashing
  C. Obfuscation
  D. Segmentation
  B. Hashing

• Question 962:

  An administrator implements web-filtering products but still sees that users are visiting malicious links.

  Which of the following configuration items does the security administrator need to review?

  A. Intrusion prevention system
  B. Content categorization
  C. Encryption
  D. DNS service
  B. Content categorization

  ---

  Explanation

  Content categorization defines how websites are classified (e.g., gambling, malicious, social media) within the web-filtering product. If users are still accessing malicious links, it likely means the categorization settings need to be reviewed or updated to block those sites effectively.

• Question 963:

  Which of the following alert types is the most likely to be ignored over time?

  A. True positive
  B. True negative
  C. False positive
  D. False negative
  C. False positive

  ---

  Explanation

  A false positive is an alert that incorrectly identifies benign activity as malicious. Over time, if an alerting system generates too many false positives, security teams are likely to ignore these alerts, resulting in "alert fatigue." This increases the risk of missing genuine threats.

  True positives and true negatives are accurate and should be acted upon. False negatives are more dangerous because they fail to identify real threats, but they are not "ignored" since they do not trigger alerts.

• Question 964:

  Which of the following is best to use when determining the severity of a vulnerability?

  A. CVE
  B. OSINT
  C. SOAR
  D. CVSS
  D. CVSS

• Question 965:

  An alert references attacks associated with a zero-day exploit. An analyst places a bastion host in the network to reduce the risk of the exploit.

  Which of the following types of controls is the analyst implementing?

  A. Compensating
  B. Detective
  C. Operational
  D. Physical
  A. Compensating

• Question 966:

  A company installed cameras and added signs to alert visitors that they are being recorded.

  Which of the following controls did the company implement? (Choose two.)

  A. Directive
  B. Deterrent
  C. Preventive
  D. Detective
  E. Corrective
  F. Technical
  A. Directive
  B. Deterrent

  ---

  Explanation

  Directive: The signs serve as a directive control by informing and guiding people about the surveillance measures in place.

  Deterrent: Both the cameras and signs act as deterrents by discouraging unauthorized or undesirable behavior due to the awareness of surveillance.

• Question 967:

  Which of the following is a common data removal option for companies that want to wipe sensitive data from hard drives in a repeatable manner but allow the hard drives to be reused?

  A. Sanitization
  B. Formatting
  C. Degaussing
  D. Defragmentation
  A. Sanitization

• Question 968:

  An organization purchased a critical business application containing sensitive data. The organization would like to ensure that the application is not exploited by common data exfiltration attacks.

  Which of the following approaches would best help to fulfill this requirement?

  A. URL scanning
  B. WAF
  C. Reverse proxy
  D. NAC
  B. WAF

  ---

  Explanation

  A Web Application Firewall (WAF) is specifically designed to protect web applications by filtering and monitoring HTTP traffic. It helps prevent common data exfiltration attacks, such as SQL injection, cross-site scripting (XSS), and other web-based threats, by inspecting incoming traffic and blocking malicious requests. A WAF would be an effective choice for safeguarding the sensitive data in the application and ensuring it is not exploited by attackers attempting data exfiltration.

• Question 969:

  A security administrator notices numerous unused, non-compliant desktops are connected to the network.

  Which of the following actions would the administrator most likely recommend to the management team?

  A. Monitoring
  B. Decommissioning
  C. Patching
  D. Isolating
  B. Decommissioning

• Question 970:

  Which of the following architectures is most suitable to provide redundancy for critical business processes?

  A. Network-enabled
  B. Server-side
  C. Cloud-native
  D. Multitenant
  C. Cloud-native

  ---

  Explanation

  Cloud-native architectures are designed with scalability, redundancy, and resilience in mind. They leverage the distributed nature of cloud infrastructure, allowing for automatic failover, load balancing, and redundancy across multiple geographic regions. This ensures high availability and continuous operation for critical business processes, even in the event of hardware or regional failures.