CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
Which of the following is a possible factor for MFA?
Answer: B
Very tricky with the the D option, which says "someone" instead of something you know, which will be the password option.
Source: Adapted from community discussion — EfaChux
Easy-to-guess passwords led to an account compromise. The current password policy requires at least 12 alphanumeric characters, one uppercase character, one lowercase character, a password history of two passwords, a minimum password age of one day, and a maximum password age of 90 days. Which of the following would reduce the risk of this incident from happening again? (Choose two.)
Answer: AF
Since the issue is with the passwords being easy to guess, the solution would be one that addresses password complexity (and not password history or age necessarily). Increasing the minimum length of the password and introducing a special character would be the best options for this.
Source: Adapted from community discussion — b82faaf
A user downloaded software from an online forum. After the user installed the software, the security team observed external network traffic connecting to the user's computer on an uncommon port. Which of the following is the most likely explanation of this unauthorized connection?
Answer: D
A utility company is designing a new platform that will host all the virtual machines used by business applications. The requirements include: • A starting baseline of 50% memory utilization • Storage scalability • Single circuit failure resilience Which of the following best meets all of these requirements?
Answer: B
B. Transitioning the platform to an IaaS provider This option addresses the 50% memory utilization baseline, provides scalable storage, and typically includes built-in redundancy to handle single circuit failures. IaaS providers offer flexible resource allocation, easy scalability, and robust infrastructure with multiple layers of redundancy.
Source: Adapted from community discussion — pokii1992
Which of the following best describes a use case for a DNS sinkhole?
Answer: C
Answer C is correct DNS sinkhole intercepts attempts to visit harmful websites and redirects them so you don't end up reaching a malicious website and keeps your computer safe.
Source: Adapted from community discussion — a4e15bd
An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which of the following best describes the type of information the analyst is trying to extract from the image files?
Answer: B
A company purchased cyber insurance to address items listed on the risk register. Which of the following strategies does this represent?
Answer: B
Transfer: Transferring a risk involves shifting some or all of the risk to another party, such as an insurance provider, through contractual agreements or financial arrangements. If the company purchases cyber insurance to address items listed on the risk register, it represents a risk transfer strategy. The company is transferring the financial burden of potential cyber incidents to the insurance provider, who will compensate the company for covered losses. Given the scenario described, the strategy represented by the company's purchase of cyber insurance to address items listed on the risk register is Transfer. The company is transferring some of the financial consequences of potential cyber incidents to the insurance provider through the purchase of insurance coverage.
Source: Adapted from community discussion — metzen227
Which of the following most likely describes why a security engineer would configure all outbound emails to use S/MIME digital signatures?
Answer: D
Answer D is correct. S/MIME digital signatures provides a way to ensure that the email has not been altered and that it genuinely comes from the sender (Non-repudiation)
Source: Adapted from community discussion — a4e15bd
During a recent company safety stand-down, the cyber-awareness team gave a presentation on the importance of cyber hygiene. One topic the team covered was best practices for printing centers. Which of the following describes an attack method that relates to printing centers?
Answer: D
D is correct. In a printing center, sensitive documents that are improperly disposed of could be retrieved from the trash by attackers.
Source: Adapted from community discussion — a4e15bd
Which of the following considerations is the most important regarding cryptography used in an IoT device?
Answer: A
A. Resource constraints Resource constraints are critical in IoT devices because these devices often have limited processing power, memory, and battery life. Cryptographic operations can be resource-intensive, so it's essential to choose algorithms and protocols that are efficient and suitable for the device's capabilities. Failing to consider resource constraints can lead to performance issues or even render the device unable to perform necessary cryptographic operations. The other options are important but generally secondary to ensuring the cryptography can operate within the device's resource limitations: B. Available bandwidth: This is relevant for data transmission but is not a primary concern for the cryptography itself. C. The use of block ciphers: Choosing between block ciphers and stream ciphers depends on the specific use case, but resource constraints take precedence. D. The compatibility of the TLS version: This is important for secure communications, but resource constraints must first be addressed to ensure that the device can support any chosen protocol.
Source: Adapted from community discussion — baronvon
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 161. 607 questions available.
Version 1.0.0. How we source questions