CompTIA SY0-701 Exam Practice Test Instant Access

Question 1

A growing organization, which hosts an externally accessible application, adds multiple virtual servers to improve application performance and decrease the resource usage on individual servers Which of the following solutions is the organization most likely to employ to further increase performance and availability?

ALoad balancer

BJump server

CProxy server

DSD-WAN

Answer : A

Question 2

A business uses Wi-Fi with content filleting enabled. An employee noticed a coworker accessed a blocked sue from a work computer and repotted the issue. While Investigating the issue, a security administrator found another device providing internet access to certain employees. Which of the following best describes the security risk?

AThe host-based security agent Is not running on all computers.

BA rogue access point Is allowing users to bypass controls.

CEmployees who have certain credentials are using a hidden SSID.

DA valid access point is being jammed to limit availability.

Answer : B

The presence of another device providing internet access that bypasses the content filtering system indicates the existence of a rogue access point. Rogue access points are unauthorized devices that can create a backdoor into the network, allowing users to bypass security controls like content filtering. This presents a significant security risk as it can expose the network to unauthorized access and potential data breaches.

Reference =

CompTIA Security+ SY0-701 Course Content: Rogue access points are highlighted as a major security risk, allowing unauthorized access to the network and bypassing security measures.

Question 3

An administrator needs to perform server hardening before deployment. Which of the following steps should the administrator take? (Select two).

ADisable default accounts.

BAdd the server to the asset inventory.

CRemove unnecessary services.

DDocument default passwords.

ESend server logs to the SIEM.

FJoin the server to the corporate domain.

Answer : A, C

Question 4

A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO's report?

AInsider threat

BHacktivist

CNation-state

DOrganized crime

Answer : D

Ransomware-as-a-service is a type of cybercrime where hackers sell or rent ransomware tools or services to other criminals who use them to launch attacks and extort money from victims. This is a typical example of organized crime, which is a group of criminals who work together to conduct illegal activities for profit.Organized crime is different from other types of threat actors, such as insider threats, hacktivists, or nation-states, who may have different motives, methods, or targets.Reference:CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 171

Question 5

A company wants to get alerts when others are researching and doing reconnaissance on the company One approach would be to host a part of the Infrastructure online with known vulnerabilities that would appear to be company assets. Which of the following describes this approach?

AWatering hole

BBug bounty

CDNS sinkhole

DHoneypot

Answer : D

A honeypot is a security mechanism set up to attract and detect potential attackers by simulating vulnerable assets. By hosting a part of the infrastructure online with known vulnerabilities that appear to be company assets, the company can observe and analyze the behavior of attackersconducting reconnaissance. This approach allows the company to get alerts and gather intelligence on potential threats.

Reference = CompTIA Security+ SY0-701 study materials, particularly on threat detection techniques such as honeypots.

Question 6

Various stakeholders are meeting to discuss their hypothetical roles and responsibilities in a specific situation, such as a security incident or major disaster. Which of the following best describes this meeting?

APenetration test

BContinuity of operations planning

CTabletop exercise

DSimulation

Answer : C

A tabletop exercise is a discussion-based exercise where stakeholders gather to walk through the roles and responsibilities they would have during a specific situation, such as a security incident or disaster. This type of exercise is designed to identify gaps in planning and improve coordination among team members without the need for physical execution.

Reference = CompTIA Security+ SY0-701 study materials, particularly in the domain of security operations and disaster recovery planning.

Question 7

A cybersecurity incident response team at a large company receives notification that malware is present on several corporate desktops No known Indicators of compromise have been found on the network. Which of the following should the team do first to secure the environment?

AContain the Impacted hosts

BAdd the malware to the application blocklist.

CSegment the core database server.

DImplement firewall rules to block outbound beaconing

Answer : A

The first step in responding to a cybersecurity incident, particularly when malware is detected, is to contain the impacted hosts. This action prevents the spread of malware to other parts of the network, limiting the potential damage while further investigation and remediation actions are planned.

Reference = CompTIA Security+ SY0-701 study materials, particularly on incident response procedures and the importance of containment in managing security incidents.

CompTIA Security+ Certification SY0-701 Exam Practice Test