CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
Which of the following methods can be used to detect attackers who have successfully infiltrated a network? (Choose two.)
Answer: CE
C&E Honeypot attracts and traps attacker and DNS sinkhole redirects malicious domain name queries to a controlled server to detect and block communication between compromised host and their C2 servers.
Source: Adapted from community discussion — a4e15bd
A company wants to ensure that the software it develops will not be tampered with after the final version is completed. Which of the following should the company most likely use?
Answer: A
An organization completed a project to deploy SSO across all business applications last year. Recently, the finance department selected a new cloud-based accounting software vendor. Which of the following should most likely be configured during the new software deployment?
Answer: B
B SAML is widely used protocol for enabling SSO across different applications and systems, particularly in enterprise environments. It allows users to authentication once and gain access to multiple application, including cloud based services. RADUIS is typically used for network access authentication and is not generally used for SSO with cloud based applications. EAP is used for network authentication protocols particularly in wireless networks and does not apply to SSO. OpenID is an identity layer on top of OAuth 2.0 for authentication but is less commonly used in enterprise environments compared to SAML for SSO.
Source: Adapted from community discussion — a4e15bd
A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a security warning and purchases an upgraded seat. When the flight lands, the user finds unauthorized credit card charges. Which of the following attacks most likely occurred?
Answer: D
On-path attack. Public Wi-Fi: Public Wi-Fi networks are often unsecured and can be easily compromised by attackers. Man-in-the-middle: An on-path attack involves an attacker intercepting communication between the user and the airline website, potentially capturing sensitive information like credit card details. Security warning: The ignored security warning likely indicated that the connection was not secure, making the user vulnerable to an on-path attack. Replay attacks, memory leaks, and buffer overflow attacks are less likely in this scenario. Replay attacks involve reusing captured data, but it's not clear how that would have led to unauthorized charges. Memory leaks and buffer overflow attacks are typically associated with software vulnerabilities, not network-based attacks.
Source: Adapted from community discussion — Glacier88
A network engineer deployed a redundant switch stack to increase system availability. However, the budget can only cover the cost of one ISP connection. Which of the following best describes the potential risk factor?
Answer: D
Even though the switch stack is redundant, having only one ISP connection means that if the ISP connection fails, the entire network could go down, creating a single point of failure. This undermines the redundancy provided by the switch stack.
Source: Adapted from community discussion — dhewa
A cyber operations team informs a security analyst about a new tactic malicious actors are using to compromise networks. SIEM alerts have not yet been configured. Which of the following best describes what the security analyst should do to identify this behavior?
Answer: D
Threat hunting: Threat hunting involves proactively searching for and identifying potential security threats or indicators of compromise (IOCs) within an organization's network environment. It typically involves the use of advanced analytics, threat intelligence, and specialized tools to detect suspicious behavior or anomalies that may indicate the presence of a threat actor. In the scenario described, where SIEM alerts have not yet been configured to detect the new tactic malicious actors are using, the most appropriate action for the security analyst is Threat hunting. By engaging in threat hunting activities, the security analyst can proactively search for signs of the new tactic within the network environment, helping to identify and mitigate potential security risks before they escalate into full-blown incidents.
Source: Adapted from community discussion — metzen227
A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but cannot be reached by the perimeter network. Which of the following best describe the controls the team implemented? (Choose two.)
Answer: EF
E. Compensating and F. Technical. Compensating: The segmentation serves as a compensating control, mitigating the risk associated with using an end-of-life server by isolating it from the perimeter network. Technical: The VLAN configuration is a technical control, implementing a network-based security measure to restrict access to the critical server. The other options are not applicable in this scenario: Managerial: Managerial controls are policies, procedures, and guidelines established by management. Physical: Physical controls are physical barriers or safeguards, such as locks, fences, or security guards. Corrective: Corrective controls are implemented to address a security incident or vulnerability after it has occurred. Detective: Detective controls are designed to detect security incidents or vulnerabilities. Deterrent: Deterrent controls are designed to discourage unauthorized access or malicious activity.
Source: Adapted from community discussion — Glacier88
A threat actor was able to use a username and password to log in to a stolen company mobile device. Which of the following provides the best solution to increase mobile data security on all employees' company mobile devices?
Answer: C
I would go with B. Here is the reasoning, for an immediate response to a compromised device, remote swipe may be the best option. But the question asks "What is the best solution to increase mobile data security on all employee's devices?" Implementing FDE across all company devices raises the baseline security for the entire organization ensuring that data on all devices is protected. With compromised credentials a remote swipe might even be too late, if you don't find out fast enough that the device has been stolen.
Source: Adapted from community discussion — a4e15bd
Which of the following best describes the risk present after controls and mitigating factors have been applied?
Answer: A
A software development team asked a security administrator to recommend techniques that should be used to reduce the chances of the software being reverse engineered. Which of the following should the security administrator recommend?
Answer: B
B Performing code obfuscation Code obfuscation deliberately makes the code more difficult to understand. This involves renaming variables, methods etc. Altering the code structure in ways that do not affect functionality but make reverse engineering much harder. Attacker use reverse engineering to find vulnerabilities that can be exploited or remove or bypass security protections such as encryption or anti tamper mechanisms.
Source: Adapted from community discussion — a4e15bd
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 151. 607 questions available.
Version 1.0.0. How we source questions