CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
A security team is in the process of hardening the network against externally crafted malicious packets. Which of the following is the most secure method to protect the internal network?
Answer: C
An IPS provides comprehensive protection against malicious network traffic by analyzing and filtering packets before they reach the internal network.
Source: Adapted from community discussion — 1f2b013
Which of the following is the best way to prevent an unauthorized user from plugging a laptop into an employee's phone network port and then using tools to scan for database servers?
Answer: A
MAC filtering is a network access control mechanism that allows or blocks devices based on their Media Access Control (MAC) addresses. By implementing MAC filtering, the network can restrict access to authorized devices only, preventing an unauthorized laptop from connecting and conducting scans, even if it is physically plugged into a network port.
Source: Adapted from community discussion — 1f2b013
Which of the following should a systems administrator use to decrease the company's hardware attack surface?
Answer: D
Virtualization reduces a company's hardware attack surface by consolidating multiple physical systems into virtual machines (VMs) running on fewer physical servers. This minimizes the number of physical devices that need to be secured and maintained, reducing potential entry points for attackers.
Source: Adapted from community discussion — ojones888
A company wants to add an MFA solution for all employees who access the corporate network remotely. Log-in requirements include something you know, are, and have. The company wants a solution that does not require purchasing third-party applications or specialized hardware. Which of the following MFA solutions would best meet the company's requirements?
Answer: D
D. Mobile application-generated, one-time passcode with facial recognition Explanation: To meet the requirements of "something you know, are, and have" while avoiding additional costs for third-party apps or hardware: Something you know: Password or PIN. Something you have: A mobile device generating a one-time passcode. Something you are: Facial recognition (biometric verification). Option D leverages mobile devices employees already own, removing the need for specialized hardware or third-party applications while meeting the MFA criteria. Why not the other options? A: Smart cards require specialized hardware. B: Security questions are weak (easily guessed) and do not qualify as “something you are.” C: Voice verification systems often require additional infrastructure and are less practical compared to mobile solutions.
Source: Adapted from community discussion — Anyio
A company is using a legacy FTP server to transfer financial data to a third party. The legacy system does not support SFTP, so a compensating control is needed to protect the sensitive, financial data in transit. Which of the following would be the most appropriate for the company to use?
Answer: B
A security manager wants to reduce the number of steps required to identify and contain basic threats. Which of the following will help achieve this goal?
Answer: A
The Chief Information Officer (CIO) asked a vendor to provide documentation detailing the specific objectives within the compliance framework that the vendor's services meet. The vendor provided a report and a signed letter stating that the services meet 17 of the 21 objectives. Which of the following did the vendor provide to the CIO?
Answer: C
An Attestation of Compliance (AOC) is a formal statement in which a vendor confirms that their services meet certain compliance objectives or requirements within a framework (such as PCI DSS, HIPAA, etc.).
Source: Adapted from community discussion — ojones888
Which of the following describes the most effective way to address OS vulnerabilities after they are identified?
Answer: D
Which of the following is a hardware-specific vulnerability?
Answer: A
the firmware version (option A) is directly related to the hardware and represents a potential point of vulnerability that attackers could exploit. Firmware is the software that controls the basic functionality of hardware devices, and vulnerabilities in firmware can lead to security breaches. Options B, C, and D (buffer overflow, SQL injection, and cross-site scripting) are software vulnerabilities and are not inherently tied to hardware components.
Source: Adapted from community discussion — SHADTECH123
The management team reports that employees are missing features on company-provided tablets, which is causing productivity issues. The management team directs the IT team to resolve the issue within 48 hours. Which of the following would be the best solution for the IT team to leverage in this scenario?
Answer: C
C. MDM (Mobile Device Management) Explanation: Mobile Device Management (MDM) systems allow IT teams to remotely manage, configure, and update company-provided devices, including adding missing features, updating software, and troubleshooting issues. MDM is the best solution for resolving productivity issues with tablets within the 48-hour deadline. Why not the other options? A. EDR (Endpoint Detection and Response): Focuses on detecting and responding to security threats, not managing device features. B. COPE (Corporate-Owned, Personally Enabled): Refers to a policy for managing corporate devices but does not directly address resolving feature issues. D. FDE (Full Disk Encryption): Focuses on securing device data but does not provide device management or feature configuration capabilities.
Source: Adapted from community discussion — Anyio
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 411. 607 questions available.
Version 1.0.0. How we source questions