CompTIA Security+Exam (SY0-701) Free Questions - Part 25

Question No : 361) A customer has reported that an organization's website displayed an image of a smiley (ace rather than the expected web page for a short time two days earlier. A security analyst reviews log tries and sees the following around the lime of the incident:

Which of the following is MOST likely occurring?

A. Invalid trust chain

B. Domain hijacking

C. DNS poisoning

D. URL redirection.

Question No : 362) A systems administrator is considering different backup solutions for the IT infrastructure. The company is looking for a solution that offers the fastest recovery time while also saving the most amount of storage used to maintain the backups. Which of the following recovery solutions would be the BEST option to meet these requirements?

A. Snapshot

B. Differential

C. Full

D. Tape

Question No : 363) Developers are writing code and merging it into shared repositories several times a day, where it is tested automatically. Which of the following concepts does this BEST represent?

A. Functional testing

B. Stored procedures

C. Elasticity

D. Continuous integration

Question No : 364) Which of the following will Increase cryptographic security?

A. High data entropy

B. Algorithms that require less computing power

C. Longer key longevity

D. Hashing

Question No : 365) A systems administrator needs to install a new wireless network for authenticated guest access. The wireless network should support 802. IX using the most secure encryption and protocol available. Perform the following steps:

1. Configure the RADIUS server.

2. Configure the WiFi controller.

3. Preconfigure the client for an incoming guest. The guest AD credentials are:

User: guest01
Password: guestpass

A systems administrator needs to install a new wireless network for authenticated guest access.

The wireless network should support 802.

IX using the most secure encryption and protocol available.

Question No : 366) An attacker was eavesdropping on a user who was shopping online. The attacker was able to spoof the IP address associated with the shopping site. Later, the user received an email regarding the credit card statement with unusual purchases. Which of the following attacks took place?

A. On-path attack

B. Protocol poisoning

C. Domain hijacking

D. Bluejacking

Question No : 367) Which of the following authentication methods sends out a unique password to be used within a specific number of seconds?

A. TOTP

B. B. Biometrics

C. Kerberos

D. LDAP

Question No : 368) To further secure a company’s email system, an administrator is adding public keys to DNS records in the company’s domain Which of the following is being used?

A. PFS

B. SPF

C. DMARC

D. DNSSEC

Question No : 369) A large financial services firm recently released information regarding a security breach within its corporate network that began several years before. During the time frame in which the breach occurred, indicators show an attacker gained administrative access to the network through a file download from a social media site and subsequently installed it without the user's knowledge. Since the compromise, the attacker was able to take command and control of the computer systems anonymously while obtaining sensitive corporate and personal employee information. Which of the following methods did the attacker MOST likely use to gam access?

A. A bot

B. A fileless virus

C. A logic bomb

D. A RAT

Question No : 370) While reviewing an alert that shows a malicious request on one web application, a cybersecurity analyst is alerted to a subsequent token reuse moments later on a different service using the same single sign-on method. Which of the following would BEST detect a malicious actor?

A. Utilizing SIEM correlation engines

B. Deploying Netflow at the network border

C. Disabling session tokens for all sites

D. Deploying a WAF for the web server

Question No : 371) A company recently suffered a breach in which an attacker was able to access the internal mail servers and directly access several user inboxes. A large number of email messages were later posted online. Which of the following would BEST prevent email contents from being released should another breach occur?

A. Implement S/MIME to encrypt the emails at rest

B. Enable full disk encryption on the mail servers.

C. Use digital certificates when accessing email via the web

D. Configure web traffic to only use TLS-enabled channels

Question No : 372) A cyberthreat intelligence analyst is gathering data about a specific adversary using OSINT techniques. Which of the following should the analyst use?

A. Internal log files

B. Government press releases

C. Confidential reports

D. Proprietary databases

Question No : 373) A web server administrator has redundant servers and needs to ensure failover to the secondary server when the primary server goes down. Which of the following should the administrator implement to avoid disruption?

A. NIC teaming

B. High availability

C. Dual power supply

D. laaS

Question No : 374) Which of the following is an example of risk avoidance?

A. Installing security updates directly in production to expedite vulnerability fixes

B. Buying insurance to prepare for financial loss associated with exploits

C. Not installing new software to prevent compatibility errors

D. Not taking preventive measures to stop the theft of equipment

Question No : 375) A recent security breach exploited software vulnerabilities in the firewall and within the network management solution. Which of the following will MOST likely be used to identify when the breach occurred through each device?

A. SIEM correlation dashboards

B. Firewall syslog event logs

C. Network management solution login audit logs

D. Bandwidth monitors and interface sensors