Question 381 · 607 in bank
Which of the following is the best security reason for closing service ports that are not needed?
Show answer
Answer: C
SY0-701AssociateCompTIAAll questions freePage 39 of 61
SY0-701 practice questions 381–390
CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
Official study references
607 questions in this bank
Free access · progress saved on this device
Question 382 · 607 in bank
Which of the following would a security administrator use to comply with a secure baseline during a patch update?
Show answer
Answer: C
Explanation
A Standard Operating Procedure (SOP) provides detailed, step-by-step instructions on how to perform specific tasks or operations, such as patch updates. It ensures that patch updates are done consistently and securely, in line with the organization's established secure baseline.
Source: Adapted from community discussion — chasingsummer
Question 383 · 607 in bank
A malicious actor conducted a brute-force attack on a company's web servers and eventually gained access to the company's customer information database. Which of the following is the most effective way to prevent similar attacks?
Show answer
Answer: C
Explanation
C. Multifactor authentication Brute-force attacks involve attempting many combinations of usernames and passwords to gain unauthorized access. Multifactor authentication (MFA) adds an additional layer of security by requiring a second form of authentication (e.g., a one-time password, biometric verification, or a hardware token) in addition to a password. Even if the attacker successfully brute-forces a password, MFA would prevent unauthorized access without the second factor. A WAF can block some brute-force attempts by detecting unusual traffic patterns, but it is not foolproof. MFA is a more direct and effective solution for authentication protection.
Source: Adapted from community discussion — saba263
Question 384 · 607 in bank
Which of the following options will provide the lowest RTO and RPO for a database?
Show answer
Answer: D
Explanation
A hot site is a fully operational and continuously updated replica of the primary site, including servers, data, and applications. It allows for the quickest recovery (lowest RTO, Recovery Time Objective) and the least data loss (lowest RPO, Recovery Point Objective) because the data is synchronized in near real-time with the primary site. If the primary site fails, operations can resume almost immediately from the hot site
Source: Adapted from community discussion — Fourgehan
Question 385 · 607 in bank
Which of the following is a possible consequence of a VM escape?
Show answer
Answer: B
Explanation
VM Escape: This occurs when an attacker breaks out of a virtual machine (VM) and gains access to the hypervisor, which manages multiple VMs. This can lead to the compromise of other VMs running on the same hypervisor, allowing the attacker to potentially access sensitive data or disrupt services across multiple virtual environments
Source: Adapted from community discussion — Fourgehan
Question 386 · 607 in bank
Which of the following is the most likely outcome if a large bank fails an internal PCI DSS compliance assessment?
Show answer
Answer: B
Explanation
B. Audit findings While fines, sanctions, and reputation damage can be potential consequences of failing to meet PCI DSS compliance, the most immediate and likely outcome of failing an internal PCI DSS compliance assessment is the generation of audit findings. These findings will detail the areas of non-compliance and typically result in the organization needing to take corrective actions to address the identified issues. If the findings are not addressed, this could lead to further consequences such as fines, sanctions, or reputation damage. Therefore, the correct answer is: B. Audit findings
Source: Adapted from community discussion — Etc_Shadow28000
Question 387 · 607 in bank
A security team at a large, global company needs to reduce the cost of storing data used for performing investigations. Which of the following types of data should have its retention length reduced?
Show answer
Answer: A
Explanation
This is the most detailed type of network data, capturing all traffic on a network segment. It can quickly accumulate large volumes of data, making it the most expensive to store, especially when considering long retention periods
Source: Adapted from community discussion — e2ba0ff
Question 388 · 607 in bank
Which of the following is a type of vulnerability that involves inserting scripts into web-based applications in order to take control of the client's web browser?
Show answer
Answer: B
Explanation
This vulnerability occurs when malicious scripts are injected into a website or web application. When a user visits the compromised website, the injected script executes in the user's browser, potentially stealing cookies, redirecting the user to malicious websites, or performing other harmful actions
Source: Adapted from community discussion — Fourgehan
Question 389 · 607 in bank
While investigating a possible incident, a security analyst discovers the following:
Which of the following should the analyst do first?
Show answer
Answer: D
Explanation
D. Check the users table for new accounts. This step will provide immediate insight into whether the incident has led to unauthorized access or account creation, allowing for a more informed response to the situation
Source: Adapted from community discussion — Fourgehan
Question 390 · 607 in bank
Due to a cyberattack, a company's IT systems were not operational for an extended period of time. The company wants to measure how quickly the systems must be restored in order to minimize business disruption. Which of the following would the company most likely use?
Show answer
Answer: D
Explanation
A recovery time objective (RTO) is a time limit for how long a system, network, computer, or application can be down after a disaster or failure. RTOs are a key part of disaster recovery and data protection plans. They are based on the potential risks and impacts to a business, such as customer dissatisfaction, financial losses, regulatory compliance, and reputation damage.
Source: Adapted from community discussion — jennyka76
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 381. 607 questions available.
About this question bank
Version 1.0.0. How we source questions