CompTIA Security+607 questions across 61 pages are complete and free, with no account or card.
607 questions in this bank
Free access · progress saved on this device
During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following types of tests does this represent?
Answer: D
o The scenario specifically involves testing the ability to physically enter a secure area, which aligns perfectly with the definition of a physical penetration test.
Source: Adapted from community discussion — dbrowndiver
A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then uses the same key to decrypt the message. Which of the following describes this example?
Answer: A
A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the following should be configured on the existing network infrastructure to best prevent this activity?
Answer: A
Port security is a feature available on network switches that helps secure access to the physical network by restricting which devices can connect to each network port based on their MAC address. Port Security: This is a network security feature that restricts input to an interface by limiting and identifying MAC addresses of the devices allowed to access the port. It can be configured to block devices that do not match the allowed list. -Control Over Physical Access: By enabling port security on the network jacks, the organization can ensure that only authorized devices with specific MAC addresses are allowed to connect. Any unauthorized devices, such as a visitor's laptop, would be blocked from accessing the network. -Dynamic or Static Configuration: Port security can dynamically learn and store allowed MAC addresses or use a predefined list, providing flexibility in securing physical network ports. This why it is the best answer: Port security directly addresses the issue of unauthorized access through physical network connections by controlling which devices can use the network ports. It prevents unauthorized devices from gaining network access, making it the most appropriate solution for this scenario.
Source: Adapted from community discussion — dbrowndiver
A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data handling activities for the administrator to perform? (Choose two.)
Answer: BE
When reissuing a laptop, it's crucial to ensure that all previous data is irretrievably removed, and the device is clean and secure for the next user. Destruction and Sanitization are two key processes involved in handling data securely in this context. Opt. C. Destruction: This process involves permanently destroying data so it cannot be recovered. It is often used when data is no longer needed and must be securely eliminated. Destruction is crucial to prevent data leakage or unauthorized access to old data. It provides peace of mind that the data is gone and cannot be retrieved. Opt.E. Sanitization: This process involves cleaning a device to remove data and make it safe for reuse. Techniques include overwriting, degaussing, and cryptographic erasure. Preparing for Reuse: Sanitization makes sure that all traces of previous data are removed, and the device is in a clean state, ready for new usage. Sanitization ensures that any residual data from the former employee is thoroughly erased, making the laptop safe and secure for the next user.
Source: Adapted from community discussion — dbrowndiver
A systems administrator would like to deploy a change to a production system. Which of the following must the administrator submit to demonstrate that the system can be restored to a working state in the event of a performance issue?
Answer: A
What is a backout plan? A backout plan is a predefined strategy to reverse and recover from changes made to a system if the changes produce undesirable results. It's a safety measure that ensures data integrity and system availability. See also: backup, recovery time objective, mean time to recovery.
Source: Adapted from community discussion — Abcd123321
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the following architectures is best suited for this goal?
Answer: C
C. Virtualization Virtualization is the architecture best suited for reducing the number of physical servers in use. It allows multiple virtual machines (VMs) to run on a single physical server, maximizing the utilization of hardware resources and reducing the need for multiple physical servers. Therefore, the correct answer is: C. Virtualization
Source: Adapted from community discussion — Etc_Shadow28000
A bank set up a new server that contains customers' PII. Which of the following should the bank use to make sure the sensitive data is not modified?
Answer: C
File Integrity Monitoring is the correct answer because it specifically addresses the need to monitor and detect unauthorized modifications to sensitive data. FIM ensures that any changes to files containing PII are identified and alerted, maintaining data integrity and protecting against unauthorized alterations.
Source: Adapted from community discussion — dbrowndiver
Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gambling and is being blocked. Which of the following changes would allow users to access the site?
Answer: D
Updating the categorization in the content filter is the correct answer because it directly addresses the misclassification of the retail website as a gambling site. By correcting the categorization, users will be able to access the site without further issues, resolving the problem efficiently and effectively.
Source: Adapted from community discussion — dbrowndiver
A security analyst is reviewing the following logs:
Which of the following attacks is most likely occurring?
Answer: A
Password spraying is a type of brute-force attack used to gain unauthorized access to user accounts by systematically attempting a small number of commonly used passwords against many user accounts. Unlike traditional brute-force attacks, which attempt many different passwords against a single user account, password spraying involves trying a few commonly used passwords against a large number of accounts.
Source: Adapted from community discussion — Luchis_69
Which of the following most impacts an administrator's ability to address CVEs discovered on a server?
Answer: B
B. Patch availability Patch availability most impacts an administrator's ability to address Common Vulnerabilities and Exposures (CVEs) discovered on a server. If patches are not available to fix the vulnerabilities, the administrator cannot remediate the issues, regardless of other factors. Therefore, the correct answer is: B. Patch availability
Source: Adapted from community discussion — Etc_Shadow28000
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SY0-701 practice, question 71. 607 questions available.
Version 1.0.0. How we source questions