CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
A security engineer at a large company needs to enhance IAM in order to ensure that employees can only access corporate systems during their shifts. Which of the following access controls should the security engineer implement?
Answer: B
A company wants to ensure employees are allowed to copy files from a virtual desktop during the workday but are restricted during non-working hours. Which of the following security measures should the company set up?
Answer: C
A company requires hard drives to be securely wiped before sending decommissioned systems to recycling. Which of the following best describes this policy?
Answer: B
B. Sanitization Explanation: Sanitization involves securely erasing data from hard drives to ensure that it cannot be recovered or accessed by unauthorized individuals. This process is essential before decommissioned systems are sent to recycling to protect sensitive information. Enumeration, destruction, and inventory do not specifically refer to the secure erasure of data from hard drives.
Source: Adapted from community discussion — SHADTECH123
Employees sign an agreement that restricts specific activities when leaving the company. Violating the agreement can result in legal consequences. Which of the following agreements does this best describe?
Answer: C
A non-disclosure agreement (NDA) is a legal contract that limits how confidential information can be used and shared. NDAs are also known as confidentiality agreements, proprietary information agreements, or secrecy agreements.
Source: Adapted from community discussion — jennyka76
A systems administrator just purchased multiple network devices. Which of the following should the systems administrator perform to prevent attackers from accessing the devices by using publicly available information?
Answer: C
A CVE in a key back-end component of an application has been disclosed. The systems administrator is identifying all of the systems in the environment that are susceptible to this risk. Which of the following should the systems administrator perform?
Answer: B
Which of the following activities uses OSINT?
Answer: A
Hacker collect finds the target victim, and it's info in the open sources, eventually attacking. OSINT for Social Engineering Testing: Information Gathering: Employee names from LinkedIn Company structure from websites Email formats from public posts Phone numbers from directories Office locations from Google Maps
Source: Adapted from community discussion — 9149f41
Which of the following are the best security controls for controlling on-premises access? (Choose two.)
Answer: AD
A. Swipe Card ✔ Provides physical access control to restricted areas. ✔ Can be integrated with access logs to track entries and exits. ✔ Easy to revoke or deactivate if lost or stolen. D. Biometric Scanner ✔ Verifies identity using unique physical traits (e.g., fingerprint, iris, or facial recognition). ✔ Cannot be shared or stolen like swipe cards or PIN codes. ✔ Adds an extra layer of security by ensuring the person entering is the authorized individual.
Source: Adapted from community discussion — test_arrow
A company is considering an expansion of access controls for an application that contractors and internal employees use to reduce costs. Which of the following risk elements should the implementation team understand before granting access to the application?
Answer: B
Answer: B. Appetite Risk appetite refers to the level of risk an organization is willing to accept to achieve its objectives. Before granting access to contractors and employees, the implementation team should understand the company's risk appetite to ensure the expansion of access controls aligns with the organization's tolerance for risk. Why the other options are not correct: A. Threshold A risk threshold is the specific level of risk that an organization is unwilling to exceed. While thresholds are important, they are more granular than risk appetite and are typically derived from it. Understanding risk appetite is more critical at this stage. C. Avoidance Risk avoidance involves eliminating risk by not engaging in the activity that creates it. This is not relevant to the scenario, as the company is considering expanding access, not avoiding it.
Source: Adapted from community discussion — Anyio
Which of the following is the act of proving to a customer that software developers are trained on secure coding?
Answer: D
Attestation is the act of formally proving or certifying that a specific requirement or standard has been met. In this case, it would involve providing evidence or documentation to a customer that software developers have been trained in secure coding practices
Source: Adapted from community discussion — 1eccfc0
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 451. 607 questions available.
Version 1.0.0. How we source questions