How to pass CompTIA SY0-701 exam with the help of dumps?

Question # 1

A cybersecurity incident response team at a large company receives notification that malware is present on several corporate desktops No known Indicators of compromise have been found on the network. Which of the following should the team do first to secure the environment?

A. Contain the Impacted hosts
B. Add the malware to the application blocklist.
C. Segment the core database server.
D. Implement firewall rules to block outbound beaconing

Show Answer

Question # 2

While considering the organization's cloud-adoption strategy, the Chief Information Security Officer sets a goal to outsource patching of firmware, operating systems, and applications to the chosen cloud vendor. Which of the following best meets this goal?

A. Community cloud
B. PaaS
C. Containerization
D. Private cloud
E. SaaS
F. laaS

Show Answer

Question # 3

Which of the following is an algorithm performed to verify that data has not been modified?

A. Hash
B. Code check
C. Encryption
D. Checksum

Show Answer

Question # 4

The Chief Information Security Officer of an organization needs to ensure recovery fromransomware would likely occur within the organization's agreed-upon RPOs end RTOs.Which of the following backup scenarios would best ensure recovery?

A. Hourly differential backups stored on a local SAN array
B. Dally full backups stored on premises in magnetic offline media
C. Daly differential backups maintained by a third-party cloud provider
D. Weekly full backups with daily incremental stored on a NAS drive

Show Answer

Question # 5

Various company stakeholders meet to discuss roles and responsibilities in the event of asecurity breach affecting offshore offices. Which of the following is this an example of?

A. Tabletop exercise
B. Penetration test
C. Geographic dispersion
D. Incident response

Show Answer

Question # 6

An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs should be analyzed to identify the impacted host? (Select two).

A. Application
B. Authentication
C. DHCP
D. Network
E. Firewall
F. Database

Show Answer

Question # 7

A growing company would like to enhance the ability of its security operations center to detect threats but reduce the amount of manual work required tor the security analysts. Which of the following would best enable the reduction in manual work?

A. SOAR
B. SIEM
C. MDM
D. DLP

Show Answer

Question # 8

A systems administrator is auditing all company servers to ensure. They meet the minimum security baseline While auditing a Linux server, the systems administrator observes the /etc/shadow file has permissions beyond the baseline recommendation. Which of the following commands should the systems administrator use to resolve this issue?

A. chmod
B. grep
C. dd
D. passwd

Show Answer

Question # 9

Which of the following is most likely associated with introducing vulnerabilities on acorporate network by the deployment of unapproved software?

A. Hacktivists
B. Script kiddies
C. Competitors
D. Shadow IT

Show Answer

Question # 10

Which of the following is a possible consequence of a VM escape?

A. Malicious instructions can be inserted into memory and give the attacker elevated permissions.
B. An attacker can access the hypervisor and compromise other VMs.
C. Unencrypted data can be read by a user in a separate environment.
D. Users can install software that is not on the manufacturer's approved list.

Show Answer

Question # 11

Which of the following is the best way to prevent an unauthorized user from plugging alaptop into an employee's phone network port and then using tools to scan for databaseservers?

A. MAC filtering
B. Segmentation
C. Certification
D. Isolation

Show Answer

Question # 12

In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to the password. Which of the following best describes this technique?

A. Key stretching
B. Tokenization
C. Data masking
D. Salting

Show Answer

Question # 13

Which of the following is the first step to take when creating an anomaly detection process?

A. Selecting events
B. Building a baseline
C. Selecting logging options
D. Creating an event log

Show Answer

Question # 14

Cadets speaking a foreign language are using company phone numbers to make unsolicited phone calls lo a partner organization. A security analyst validates through phone system logs that the calls are occurring and the numbers are not being spoofed.Which of the following is the most likely explanation?

A. The executive team is traveling internationally and trying to avoid roaming charges
B. The company's SIP server security settings are weak.
C. Disgruntled employees are making calls to the partner organization.
D. The service provider has assigned multiple companies the same numbers

Show Answer

Question # 15

A company is currently utilizing usernames and passwords, and it wants to integrate an MFA method that is seamless, can Integrate easily into a user's workflow, and can utilize employee-owned devices. Which of the following will meet these requirements?

A. Push notifications
B. Phone call
C. Smart card
D. Offline backup codes

Show Answer

Question # 16

Which of the following threat actors would most likely deface the website of a high-profile music group?

A. Unskilled attacker
B. Organized crime
C. Nation-state
D. Insider threat

Show Answer

Question # 17

Which of the following Is a common, passive reconnaissance technique employed by penetration testers in the early phases of an engagement?

A. Open-source intelligence
B. Port scanning
C. Pivoting
D. Exploit validation

Show Answer

Question # 18

A company is implementing a vendor's security tool in the cloud. The security director doesnot want to manage users and passwords specific to this tool but would rather utilize thecompany's standard user directory. Which of the following should the company implement

A. 802.1X
B. SAML
C. RADIUS
D. CHAP

Show Answer

Question # 19

A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of the following would best mitigate this type of attack?

A. Load balancer
B. Port security
C. IPS
D. NGFW

Show Answer

Question # 20

A company is implementing a vendor's security tool in the cloud. The security director does not want to manage users and passwords specific to this tool but would rather utilize the company's standard user directory. Which of the following should the company implement?

A. 802.1X
B. SAML
C. RADIUS
D. CHAP

Show Answer

Question # 21

A security analyst is assessing several company firewalls. Which of the following coolswould The analyst most likely use to generate custom packets to use during theassessment?

A. hping
B. Wireshark
C. PowerShell
D. netstat

Show Answer

Question # 22

Which of the following is an example of a data protection strategy that uses tokenization?

A. Encrypting databases containing sensitive data
B. Replacing sensitive data with surrogate values
C. Removing sensitive data from production systems
D. Hashing sensitive data in critical systems

Show Answer

Question # 23

Which of the following would be the greatest concern for a company that is aware of theconsequences of non-compliance with government regulations?

A. Right to be forgotten
B. Sanctions
C. External compliance reporting
D. Attestation

Show Answer

Question # 24

Which of the following describes the understanding between a company and a client aboutwhat will be provided and the accepted time needed to provide the company with theresources?

A. SLA
B. MOU
C. MOA
D. BPA

Show Answer

Question # 25

The security operations center is researching an event concerning a suspicious IP address A security analyst looks at the following event logs and discovers that a significant portion of the user accounts have experienced faded log-In attempts when authenticating from the same IP address: Which of the following most likely describes attack that took place?

A. Spraying
B. Brute-force
C. Dictionary
D. Rainbow table

Show Answer

Question # 26

Which of the following examples would be best mitigated by input sanitization?

A. <script>alert ("Warning!") ,-</script>
B. nmap - 10.11.1.130
C. Email message: "Click this link to get your free gift card."
D. Browser message: "Your connection is not private."

Show Answer

Question # 27

Which of the following is a common source of unintentional corporate credential leakage incloud environments?

A. Code repositories
B. Dark web
C. Threat feeds
D. State actors
E. Vulnerability databases

Show Answer

Question # 28

Company A jointly develops a product with Company B, which is located in a different country. Company A finds out that their intellectual property is being shared with unauthorized companies. Which of the following has been breached?

A. SLA
B. AUP
C. SOW
D. MOA

Show Answer

Question # 29

A network administrator deployed a DNS logging tool that togs suspicious websites that arevisited and then sends a daily report based on various weighted metrics. Which of thefollowing best describes the type of control the administrator put in place?

A. Preventive
B. Deterrent
C. Corrective
D. Detective

Show Answer

Question # 30

Which of the following is the most effective way to protect an application server runningsoftware that is no longer supported from network threats?

A. Air gap
B. Barricade
C. Port security
D. Screen subnet

Show Answer

Question # 31

An organization has too many variations of a single operating system and needs to standardize the arrangement prior to pushing the system image to users. Which of the following should the organization implement first?

A. Standard naming convention
B. Mashing
C. Network diagrams
D. Baseline configuration

Show Answer

Question # 32

During a recent company safety stand-down, the cyber-awareness team gave apresentation on the importance of cyber hygiene. One topic the team covered was bestpractices for printing centers. Which of the following describes an attack method thatrelates to printing centers?

A. Whaling
B. Credential harvesting
C. Prepending
D. Dumpster diving

Show Answer

Question # 33

A security audit of an organization revealed that most of the IT staff members have domain administrator credentials and do not change the passwords regularly. Which of the following solutions should the security learn propose to resolve the findings in the most complete way?

A. Creating group policies to enforce password rotation on domain administrator credentials
B. Reviewing the domain administrator group, removing all unnecessary administrators, and rotating all passwords
C. Integrating the domain administrator's group with an IdP and requiring SSO with MFA for all access
D. Securing domain administrator credentials in a PAM vault and controlling access with role-based access control

Show Answer

Question # 34

A security analyst needs to propose a remediation plan 'or each item in a risk register. Theitem with the highest priority requires employees to have separate logins for SaaS solutionsand different password complexity requirements for each solution. Which of the followingimplementation plans will most likely resolve this security issue?

A. Creating a unified password complexity standard
B. Integrating each SaaS solution with the Identity provider
C. Securing access to each SaaS by using a single wildcard certificate
D. Configuring geofencing on each SaaS solution

Show Answer

Question # 35

An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following options is the security team most likely to recommend?

A. Tokenization
B. Hashing
C. Obfuscation
D. Segmentation

Show Answer

Question # 36

A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the following should be configured on the existing network infrastructure to best prevent this activity?

A. Port security
B. Web application firewall
C. Transport layer security
D. Virtual private network

Show Answer

Question # 37

A security analyst is assessing several company firewalls. Which of the following coolswould The analyst most likely use to generate custom packets to use during theassessment?

A. hping
B. Wireshark
C. PowerShell
D. netstat

Show Answer

Question # 38

While a user reviews their email, a host gets infected by malware from an external hard drive plugged into the host. The malware steals all the user's credentials stored in the browser. Which of the following training topics should the user review to prevent this situation from reoccurring?

A. Operational security
B. Removable media and cables
C. Password management
D. Social engineering

Show Answer

Question # 39

A legacy device is being decommissioned and is no longer receiving updates or patches.Which of the following describes this scenario?

A. End of business
B. End of testing
C. End of support
D. End of life

Show Answer

Question # 40

An organization implemented cloud-managed IP cameras to monitor building entry points and sensitive areas. The service provider enables direct TCP/IP connection to stream live video footage from each camera. The organization wants to ensure this stream is encrypted and authenticated. Which of the following protocols should be implemented to best meet this objective?

A. SSH
B. SRTP
C. S/MIME
D. PPTP

Show Answer

Question # 41

A company is utilizing an offshore team to help support the finance department. Thecompany wants to keep the data secure by keeping it on a company device but does notwant to provide equipment to the offshore team. Which of the following should the companyimplement to meet this requirement?

A. VDI
B. MDM
C. VPN
D. VPC

Show Answer

Question # 42

Which of the following is a type of vulnerability that involves inserting scripts into webbasedapplications in order to take control of the client's web browser?

A. SQL injection
B. Cross-site scripting
C. Zero-day exploit
D. On-path attack

Show Answer

Question # 43

A security engineer is working to address the growing risks that shadow IT services are introducing to the organization. The organization has taken a cloud-first approach end does not have an on-premises IT infrastructure. Which of the following would best secure the organization?

A. Upgrading to a next-generation firewall
B. Deploying an appropriate in-line CASB solution
C. Conducting user training on software policies
D. Configuring double key encryption in SaaS platforms

Show Answer

Question # 44

A company implemented an MDM policy 10 mitigate risks after repealed instances of employees losing company-provided mobile phones. In several cases. The lost phones were used maliciously to perform social engineering attacks against other employees. Which of the following MDM features should be configured to best address this issue? (Select two).

A. Screen locks
B. Remote wipe
C. Full device encryption
D. Push notifications
E. Application management
F. Geolocation

Show Answer

Question # 45

A company wants to verify that the software the company is deploying came from the vendor the company purchased the software from. Which of the following is the best way for the company to confirm this information?

A. Preparation
B. Recovery
C. Lessons learned
D. Analysis

Show Answer

Question # 46

A company wants to verify that the software the company is deploying came from the vendor the company purchased the software from. Which of the following is the best way for the company to confirm this information?

A. Validate the code signature.
B. Execute the code in a sandbox.
C. Search the executable for ASCII strings.
D. Generate a hash of the files.

Show Answer

Question # 47

A systems administrator is looking for a low-cost application-hosting solution that is cloud- based. Which of the following meets these requirements?

A. Serverless framework
B. Type 1 hvpervisor
C. SD-WAN
D. SDN

Show Answer

Question # 48

An IT security team is concerned about the confidentiality of documents left unattended inMFPs. Which of the following should the security team do to mitigate the situation?

A. Educate users about the importance of paper shredder devices.
B. Deploy an authentication factor that requires ln-person action before printing.
C. Install a software client m every computer authorized to use the MFPs.
D. Update the management software to utilize encryption.

Show Answer

Question # 49

A company recently decided to allow employees to work remotely. The company wants toprotect us data without using a VPN. Which of the following technologies should thecompany Implement?

A. Secure web gateway
B. Virtual private cloud end point
C. Deep packet Inspection
D. Next-gene ration firewall

Show Answer

Question # 50

Which of the following best describes the concept of information being stored outside of itscountry of origin while still being subject to the laws and requirements of the country oforigin?

A. Data sovereignty
B. Geolocation
C. Intellectual property
D. Geographic restrictions

Show Answer

Question # 51

Which of the following should be used to ensure an attacker is unable to read the contents of a mobile device's drive if the device is lost?

A. TPM
B. ECC
C. FDE
D. HSM

Show Answer

Question # 52

An administrator at a small business notices an increase in support calls from employees who receive a blocked page message after trying to navigate to a spoofed website. Which of the following should the administrator do?

A. Deploy multifactor authentication.
B. Decrease the level of the web filter settings
C. Implement security awareness training.
D. Update the acceptable use policy

Show Answer

Question # 53

In a rush to meet an end-of-year business goal, the IT department was told to implement a new business application. The security engineer reviews the attributes of the application and decides the time needed to perform due diligence is insufficient from a cybersecurity perspective. Which of the following best describes the security engineer's response?

A. Risk tolerance
B. Risk acceptance
C. Risk importance
D. Risk appetite

Show Answer

Question # 54

An administrator is Investigating an incident and discovers several users’ computers were Infected with malware after viewing files mat were shared with them. The administrator discovers no degraded performance in the infected machines and an examination of the log files does not show excessive failed logins. Which of the following attacks Is most likely the cause of the malware?

A. Malicious flash drive
B. Remote access Trojan
C. Brute-forced password
D. Cryptojacking

Show Answer

Question # 55

While considering the organization's cloud-adoption strategy, the Chief Information Security Officer sets a goal to outsource patching of firmware, operating systems, and applications to the chosen cloud vendor. Which of the following best meets this goal?

A. Community cloud
B. PaaS
C. Containerization
D. Private cloud
E. SaaS
F. laaS

Show Answer

Question # 56

During a penetration test, a vendor attempts to enter an unauthorized area using an access badge Which of the following types of tests does this represent?

A. Defensive
B. Passive
C. Offensive
D. Physical

Show Answer

Question # 57

A company wants to reduce the time and expense associated with code deployment. Which of the following technologies should the company utilize?

A. Serverless architecture
B. Thin clients
C. Private cloud
D. Virtual machines

Show Answer

Question # 58

Which of the following most accurately describes the order in which a security engineer should implement secure baselines?

A. Deploy, maintain, establish
B. Establish, maintain, deploy
C. Establish, deploy, maintain
D. Deploy, establish, maintain

Show Answer

Question # 59

Which of the following is best used to detect fraud by assigning employees to different roles?

A. Least privilege
B. Mandatory vacation
C. Separation of duties
D. Job rotation

Show Answer

Question # 60

Sine© a recent upgrade (o a WLAN infrastructure, several mobile users have been unable to access the internet from the lobby. The networking team performs a heat map survey of the building and finds several WAPs in the area. The WAPs are using similar frequencies with high power settings. Which of the following installation considerations should the security team evaluate next?

A. Channel overlap
B. Encryption type
C. New WLAN deployment
D. WAP placement

Show Answer

Question # 61

Various stakeholders are meeting to discuss their hypothetical roles and responsibilities in a specific situation, such as a security incident or major disaster. Which of the following best describes this meeting?

A. Penetration test
B. Continuity of operations planning
C. Tabletop exercise
D. Simulation

Show Answer

Question # 62

Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?

A. SIEM
B. WAF
C. Network taps
D. IDS

Show Answer

Question # 63

A security analyst receives an alert from a corporate endpoint used by employees to issue visitor badges. The alert contains the following details: Which of the following best describes the indicator that triggered the alert?

A. Blocked content
B. Brute-force attack
C. Concurrent session usage
D. Account lockout

Show Answer

Question # 64

An important patch for a critical application has just been released, and a systems administrator is identifying all of the systems requiring the patch. Which of the following must be maintained in order to ensure that all systems requiring the patch are updated?

A. Asset inventory
B. Network enumeration
C. Data certification
D. Procurement process

Show Answer

Question # 65

Which of the following describes an executive team that is meeting in a board room and testing the company's incident response plan?

A. Continuity of operations
B. Capacity planning
C. Tabletop exercise
D. Parallel processing

Show Answer

Question # 66

Which of the following would be the best way to test resiliency in the event of a primary power failure?

A. Parallel processing
B. Tabletop exercise
C. Simulation testing
D. Production failover

Show Answer

Question # 67

A company wants to track modifications to the code used to build new virtual servers. Which of the following will the company most likely deploy?

A. Change management ticketing system
B. Behavioral analyzer
C. Collaboration platform
D. Version control tool

Show Answer

Question # 68

Which of the following would be the most appropriate way to protect data in transit?

A. SHA-256
B. SSL 3.0
C. TLS 1.3
D. AES-256

Show Answer

Question # 69

A company is adding a clause to its AUP that states employees are not allowed to modify the operating system on mobile devices. Which of the following vulnerabilities is the organization addressing?

A. Cross-site scripting
B. Buffer overflow
C. Jailbreaking
D. Side loading

Show Answer

Question # 70

The Chief Information Security Officer wants to put security measures in place to protect PlI. The organization needs to use its existing labeling and classification system to accomplish this goal. Which of the following would most likely be configured to meet the requirements?

A. Tokenization
B. S/MIME
C. DLP
D. MFA

Show Answer

Question # 71

An employee recently resigned from a company. The employee was responsible for managing and supporting weekly batch jobs over the past five years. A few weeks after the employee resigned. one of the batch jobs talked and caused a major disruption. Which of the following would work best to prevent this type of incident from reoccurring?

A. Job rotation
B. Retention
C. Outsourcing
D. Separation of duties

Show Answer

Question # 72

Cadets speaking a foreign language are using company phone numbers to make unsolicited phone calls lo a partner organization. A security analyst validates through phone system logs that the calls are occurring and the numbers are not being spoofed. Which of the following is the most likely explanation?

A. The executive team is traveling internationally and trying to avoid roaming charges
B. The company's SIP server security settings are weak.
C. Disgruntled employees are making calls to the partner organization.
D. The service provider has assigned multiple companies the same numbers

Show Answer

Question # 73

An IT security team is concerned about the confidentiality of documents left unattended in MFPs. Which of the following should the security team do to mitigate the situation?

A. Educate users about the importance of paper shredder devices.
B. Deploy an authentication factor that requires ln-person action before printing.
C. Install a software client m every computer authorized to use the MFPs.
D. Update the management software to utilize encryption.

Show Answer

Question # 74

Which of the following is prevented by proper data sanitization?

A. Hackers' ability to obtain data from used hard drives
B. Devices reaching end-of-life and losing support
C. Disclosure of sensitive data through incorrect classification
D. Incorrect inventory data leading to a laptop shortage

Show Answer

Question # 75

A systems administrator is redesigning now devices will perform network authentication. The following requirements need to be met: • An existing Internal certificate must be used. • Wired and wireless networks must be supported • Any unapproved device should be Isolated in a quarantine subnet • Approved devices should be updated before accessing resources Which of the following would best meet the requirements?

A. 802.IX
B. EAP
C. RADIUS
D. WPA2

Show Answer

Question # 76

An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to email these files outside of the organization. Which of the following best describes the tool the administrator is using?

A. DLP
B. SNMP traps
C. SCAP
D. IPS

Show Answer

Question # 77

A company wants to get alerts when others are researching and doing reconnaissance on the company One approach would be to host a part of the Infrastructure online with known vulnerabilities that would appear to be company assets. Which of the following describes this approach?

A. Watering hole
B. Bug bounty
C. DNS sinkhole
D. Honeypot

Show Answer

Question # 78

A new vulnerability enables a type of malware that allows the unauthorized movement of data from a system. Which of the following would detect this behavior?

A. Implementing encryption
B. Monitoring outbound traffic
C. Using default settings
D. Closing all open ports

Show Answer

Question # 79

A company wants to get alerts when others are researching and doing reconnaissance on the company One approach would be to host a part of the Infrastructure online with known vulnerabilities that would appear to be company assets. Which of the following describes this approach?

A. Watering hole
B. Bug bounty
C. DNS sinkhole
D. Honeypot

Show Answer

Question # 80

A systems administrator notices that one of the systems critical for processing customer transactions is running an end-of-life operating system. Which of the following techniques would increase enterprise security?

A. Installing HIDS on the system
B. Placing the system in an isolated VLAN
C. Decommissioning the system
D. Encrypting the system's hard drive

Show Answer

Question # 81

Which of the following is the best way to provide secure remote access for employees while minimizing the exposure of a company's internal network?

A. VPN
B. LDAP
C. FTP
D. RADIUS

Show Answer

Question # 82

A company is currently utilizing usernames and passwords, and it wants to integrate an MFA method that is seamless, can Integrate easily into a user's workflow, and can utilize employee-owned devices. Which of the following will meet these requirements?

A. Push notifications
B. Phone call
C. Smart card
D. Offline backup codes

Show Answer

Question # 83

Which of the following is the primary purpose of a service that tracks log-ins and time spent using the service?

A. Availability
B. Accounting
C. Authentication
D. Authorization

Show Answer