CompTIA CompTIA Certifications SY0-701 Questions & Answers

• Question 51:

  A company is currently utilizing usernames and passwords, and it wants to integrate an MFA method that is seamless, can integrate easily into a user's workflow, and can utilize employee-owned devices. Which of the following will meet these requirements?

  A. Push notifications

  B. Phone call

  C. Smart card

  D. Offline backup codes

  Correct Answer: A

  Push notifications offer a seamless and user-friendly method of multi-factor authentication (MFA) that can easily integrate into a user's workflow. This method leverages employee-owned devices, like smartphones, to approve authentication

  requests through a push notification. It's convenient, quick, and doesn't require the user to input additional codes, making it a preferred choice for seamless integration with existing workflows.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 04 Security Operations. CompTIA Security+ SY0-601 Study Guide: Chapter on Identity and Access Management.

• Question 52:

  Which of the following is most likely associated with introducing vulnerabilities on a corporate network by the deployment of unapproved software?

  A. Hacktivists

  B. Script kiddies

  C. Competitors

  D. Shadow IT

  Correct Answer: D

  Shadow IT refers to the use of information technology systems, devices, software, applications, and services without explicit IT department approval. This is the most likely cause of introducing vulnerabilities on a corporate network by

  deploying unapproved software, as such software may not have been vetted for security compliance, increasing the risk of vulnerabilities.

  References:

  CompTIA Security+ SY0-701 Course Content: The concept of Shadow IT is discussed as a significant risk due to the introduction of unapproved and potentially vulnerable software into the corporate network.

• Question 53:

  A security manager is implementing MFA and patch management. Which of the following would best describe the control type and category? (Select two).

  A. Physical

  B. Managerial

  C. Detective

  D. Administrator

  E. Preventative

  F. Technical

  Correct Answer: EF

  Multi-Factor Authentication (MFA) and patch management are both examples of preventative and technical controls. MFA prevents unauthorized access by requiring multiple forms of verification, and patch management ensures that systems

  are protected against vulnerabilities by applying updates. Both of these controls are implemented using technical methods, and they work to prevent security incidents before they occur.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 1: General Security Concepts, and Domain 4: Identity and Access Management, which cover the implementation of preventative and technical controls.

• Question 54:

  A company wants to verify that the software it is deploying came from the vendor it purchased the software from. Which of the following is the best way for the company to confirm this information?

  A. Validate the code signature.

  B. Execute the code in a sandbox.

  C. Search the executable for ASCII strings.

  D. Generate a hash of the files.

  Correct Answer: A

  Validating the code signature is the best way to verify software authenticity, as it ensures that the software has not been tampered with and that it comes from a verified source. Code signatures are digital signatures applied by the software vendor, and validating them confirms the software's integrity and origin.References: CompTIA Security+ SY0-701 course content and official CompTIA study resources.

• Question 55:

  In which of the following scenarios is tokenization the best privacy technique 10 use?

  A. Providing pseudo-anonymization tor social media user accounts

  B. Serving as a second factor for authentication requests

  C. Enabling established customers to safely store credit card Information

  D. Masking personal information inside databases by segmenting data

  Correct Answer: C

  Tokenization is a process that replaces sensitive data, such as credit card information, with a non-sensitive equivalent (token) that can be used in place of the actual data. This technique is particularly useful in securely storing payment

  information because the token can be safely stored and transmitted without exposing the original credit card number.

  References:

  CompTIA Security+ SY0-701 Course Content: Domain 03 Security Architecture. CompTIA Security+ SY0-601 Study Guide: Chapter on Cryptography and Data Protection.

• Question 56:

  n administrator is investigating an incident and discovers several users' computers were infected with malware after viewing files that were shared with them. The administrator discovers no degraded performance in the infected machines and an examination of the log files does not show excessive failed logins. Which of the following attacks is most likely the cause of the malware?

  A. Malicious flash drive

  B. Remote access Trojan

  C. Brute-forced password

  D. Cryptojacking

  Correct Answer: D

  Cryptojacking is the likely cause in this scenario. It involves malware that hijacks the resources of infected computers to mine cryptocurrency, usually without the user's knowledge. This type of attack doesn't typically degrade performance

  significantly or result in obvious system failures, which matches the situation described, where the machines showed no signs of degraded performance or excessive failed logins.

  References:

  CompTIA Security+ SY0-701 Course Content: Cryptojacking is covered under types of malware attacks, highlighting its stealthy nature and impact on infected systems.

• Question 57:

  Which of the following security controls is most likely being used when a critical legacy server is segmented into a private network?

  A. Deterrent

  B. Corrective

  C. Compensating

  D. Preventive

  Correct Answer: C

  When a critical legacy server is segmented into a private network, the security control being used is compensating. Compensating controls are alternative measures put in place to satisfy a security requirement when the primary control is not

  feasible or practical. In this case, segmenting the legacy server into a private network serves as a compensating control to protect it from potential vulnerabilities that cannot be mitigated directly.

  Compensating: Provides an alternative method to achieve the desired security outcome when the primary control is not possible.

  Deterrent: Aims to discourage potential attackers but does not directly address segmentation.

  Corrective: Used to correct or mitigate the impact of an incident after it has occurred.

  Preventive: Aims to prevent security incidents but is not specific to the context of segmentation.

  Reference: CompTIA Security+ SY0-701 Exam Objectives, Domain 1.1 - Compare and contrast various types of security controls (Compensating controls).

• Question 58:

  Various stakeholders are meeting to discuss their hypothetical roles and responsibilities in a specific situation, such as a security incident or major disaster. Which of the following best describes this meeting?

  A. Penetration test

  B. Continuity of operations planning

  C. Tabletop exercise

  D. Simulation

  Correct Answer: C

  A tabletop exercise is a discussion-based exercise where stakeholders gather to walk through the roles and responsibilities they would have during a specific situation, such as a security incident or disaster. This type of exercise is designed

  to identify gaps in planning and improve coordination among team members without the need for physical execution.

  References: CompTIA Security+ SY0-701 study materials, particularly in the domain of security operations and disaster recovery planning.

• Question 59:

  Two companies are in the process of merging. The companies need to decide how to standardize their information security programs. Which of the following would best align the security programs?

  A. Shared deployment of CIS baselines

  B. Joint cybersecurity best practices

  C. Both companies following the same CSF

  D. Assessment of controls in a vulnerability report

  Correct Answer: C

  A Cybersecurity Framework (CSF) provides a structured approach to standardizing and aligning security programs across different organizations. By both companies adopting the same CSF, they can ensure that their security measures,

  policies, and practices are consistent, which is essential during a merger when aligning two different security programs.

  References:

  CompTIA Security+ SY0-701 Course Content: The course discusses the importance of adopting standardized cybersecurity frameworks (CSF) for aligning security programs during mergers and acquisitions.

• Question 60:

  A systems administrator is redesigning how devices will perform network authentication. The following requirements need to be met:

  1.

  An existing internal certificate must be used.

  2.

  Wired and wireless networks must be supported.

  3.

  Any unapproved device should be isolated in a quarantine subnet.

  4.

  Approved devices should be updated before accessing resources.

  Which of the following would best meet the requirements?

  A. 802.IX

  B. EAP

  C. RADIUS

  D. WPA2

  Correct Answer: A

  802.1X is a network access control protocol that provides an authentication mechanism to devices trying to connect to a LAN or WLAN. It supports the use of certificates for authentication, can quarantine unapproved devices, and ensures that only approved and updated devices can access network resources. This protocol best meets the requirements of securing both wired and wireless networks with internal certificates. References: CompTIA Security+ SY0-701 study materials, particularly in the domain of network security and authentication protocols.