SY0-701 practice questions 11–20

1. Question 11 · 607 in bank

   A company is working with a vendor to perform a penetration test. Which of the following includes an estimate about the number of hours required to complete the engagement?

   • ASOW
   • BBPA
   • CSLA
   • DNDA

   Show answer

   Answer: A

   Explanation

   In the context of a penetration test, the SOW would include an estimate of the number of hours required to conduct the test, along with detailed descriptions of the testing methodologies, deliverables, and any other project-related expectations.

   Source: Adapted from community discussion — dbrowndiver

   Next question

2. Question 12 · 607 in bank

   A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO’s report?

   • AInsider threat
   • BHacktivist
   • CNation-state
   • DOrganized crime

   Show answer

   Answer: D

   Explanation

   Ransomware is blackmailing for monetary gain which is a CRIME. It also does not fit the criteria for any other threat actor listed.

   Source: Adapted from community discussion — MAKOhunter33333333

   Next question

3. Question 13 · 607 in bank

   Select 2

   Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated: “I’m in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address.” Which of the following are the best responses to this situation? (Choose two).

   • ACancel current employee recognition gift cards.
   • BAdd a smishing exercise to the annual company training.
   • CIssue a general email warning to the company.
   • DHave the CEO change phone numbers.
   • EConduct a forensic investigation on the CEO’s phone.
   • FImplement mobile device management.

   Show answer

   Answer: BC

   Explanation

   It is already known that the message is not being sent from the CEO, & awareness of this attack should be known among the company by using the proper training to identify when an attacker is smishing using employee likeness. It is not known if devices are compromised, but if employees are aware of the situation, then that can be figured out as well.

   Source: Adapted from community discussion — Mehsotopes

   Next question

4. Question 14 · 607 in bank

   Which of the following practices would be best to prevent an insider from introducing malicious code into a company's development process?

   • ACode scanning for vulnerabilities
   • BOpen-source component usage
   • CQuality assurance testing
   • DPeer review and approval

   Show answer

   Answer: D

   Explanation

   Correct Answer: D Peer review and approval is a practice that involves having other developers or experts review the code before it is deployed or released. Peer review and approval can help detect and prevent malicious code, errors, bugs, vulnerabilities, and poor quality in the development process. Peer review and approval can also enforce coding standards, best practices, and compliance requirements. Peer review and approval can be done manually or with the help of tools, such as code analysis, code review, and code signing. References: CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 11: Secure Application Development, page 543 2

   Source: Adapted from community discussion — geocis

   Next question

5. Question 15 · 607 in bank

   Which of the following can best protect against an employee inadvertently installing malware on a company system?

   • AHost-based firewall
   • BSystem isolation
   • CLeast privilege
   • DApplication allow list

   Show answer

   Answer: D

   Explanation

   By using an application allow list, employees cannot inadvertently install or run unauthorized software, including malware, because only approved applications are permitted to execute. This approach minimizes the risk of malware introduction through accidental downloads or installations.

   Source: Adapted from community discussion — dbrowndiver

   Next question

6. Question 16 · 607 in bank

   A company is adding a clause to its AUP that states employees are not allowed to modify the operating system on mobile devices. Which of the following vulnerabilities is the organization addressing?

   • ACross-site scripting
   • BBuffer overflow
   • CJailbreaking
   • DSide loading

   Show answer

   Answer: C

   Explanation

   My first thought was: D - because jailbreaking only relates to iOS and rooting is Android. They didn't specify a device. However... The question relates to modifying the OS, not installing unofficial apps. So, although no OS is specified, answer C does seem most logical. It pays to take a little more time to dissect the wording of the question as much as possible.

   Source: Adapted from community discussion — leedsbarber

   Next question

7. Question 17 · 607 in bank

   Select 2

   Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? (Choose two.)

   • AFencing
   • BVideo surveillance
   • CBadge access
   • DAccess control vestibule
   • ESign-in sheet
   • FSensor

   Show answer

   Answer: CD

   Explanation

   Fencing of this type is not in the sense of physical chain-link/picket fences, but the appliances to keep intruders out like firewalls and IPS.

   Source: Adapted from community discussion — jsmthy

   Next question

8. Question 18 · 607 in bank

   An organization would like to store customer data on a separate part of the network that is not accessible to users on the main corporate network. Which of the following should the administrator use to accomplish this goal?

   • ASegmentation
   • BIsolation
   • CPatching
   • DEncryption

   Show answer

   Answer: A

   Explanation

   Further notes: Isolation is a security measure that can be used to protect sensitive data which typically involves creating a completely separate environment, such as a different physical server or a standalone network, which can be more restrictive than segmentation. The question has the data still on the network, just in a separate part. So, Option A is still the best answer.

   Source: Adapted from community discussion — AutoroTink

   Next question

9. Question 19 · 607 in bank

   Which of the following is the most common data loss path for an air-gapped network?

   • ABastion host
   • BUnsecured Bluetooth
   • CUnpatched OS
   • DRemovable devices

   Show answer

   Answer: D

   Explanation

   In an air-gapped network, which is physically isolated from other networks, the most common data loss path would typically be through removable devices (option D). These can include USB drives, external hard drives, or other storage devices that could be introduced into the network, intentionally or unintentionally, by users or external entities. This is because such devices can bypass the physical isolation of the air gap and introduce potential security vulnerabilities.

   Source: Adapted from community discussion — Yoez

   Next question

10. Question 20 · 607 in bank

    Malware spread across a company's network after an employee visited a compromised industry blog. Which of the following best describes this type of attack?

    • AImpersonation
    • BDisinformation
    • CWatering-hole
    • DSmishing

    Show answer

    Answer: C

    Explanation

    Watering-hole is the correct answer because it describes the method used by the attacker to compromise a legitimate website frequented by the target group (in this case, the industry blog) and spread malware to visitors. This strategic targeting and delivery mechanism is characteristic of a watering-hole attack.

    Source: Adapted from community discussion — dbrowndiver

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SY0-701 practice, question 11. 607 questions available.