SY0-701 Exam Questions and Answers | Exam-Dumps (Page: 11)

QUESTION: 81

A security analyst recently read a report about a flaw in several of the organization's printer models that causes credentials to be sent over the network in cleartext, regardless of the encryption settings. Which of the following would be best to use to validate this finding?

Wireshark
netcat
Nessus
Nmap

Answer(s): A

Reveal Solution Next Question

QUESTION: 82

A development team is launching a new public-facing web product. The Chief Information Security Officer has asked that the product be protected from attackers who use malformed or invalid inputs to destabilize the system. Which of the following practices should the development team implement?

Fuzzing
Continuous deployment
Static code analysis
Manual peer review

Answer(s): A

Reveal Solution Next Question

QUESTION: 83

During an annual review of the system design, an engineer identified a few issues with the currently released design. Which of the following should be performed next according to best practices?

Risk management process
Product design process
Design review process
Change control process

Answer(s): D

Reveal Solution Next Question

QUESTION: 84

Which of the following is best to use when determining the severity of a vulnerability?

CVE
OSINT
SOAR
CVSS

Answer(s): D

Reveal Solution Next Question

QUESTION: 85

An organization experienced a security breach that allowed an attacker to send fraudulent wire transfers from a hardened PC exclusively to the attacker's bank through remote connections. A security analyst is creating a timeline of events and has found a different PC on the network containing malware. Upon reviewing the command history, the analyst finds the following:
PS>.\mimikatz.exe "sekurlsa::pth /user:localadmin /domain:corp-domain.com / ntlm:B4B9B02E1F29A3CF193EAB28C8D617D3F327
Which of the following best describes how the attacker gained access to the hardened PC?

The attacker created fileless malware that was hosted by the banking platform.
The attacker performed a pass-the-hash attack using a shared support account.
The attacker utilized living-off-the-land binaries to evade endpoint detection and response software.
The attacker socially engineered the accountant into performing bad transfers.

Answer(s): B

Reveal Solution Next Question

QUESTION: 86

Which of the following is the best resource to consult for information on the most common application exploitation methods?

OWASP
STIX
OVAL
Threat intelligence feed
Common Vulnerabilities and Exposures

Answer(s): A

Reveal Solution Next Question

QUESTION: 87

A security analyst is reviewing the logs on an organization's DNS server and notices the following unusual snippet:

Which of the following attack techniques was most likely used?

Determining the organization's ISP-assigned address space
Bypassing the organization's DNS sinkholing
Footprinting the internal network
Attempting to achieve initial access to the DNS server
Exfiltrating data from fshare.int.complia.org

Answer(s): C

Reveal Solution Next Question

QUESTION: 88

A security analyst at an organization observed several user logins from outside the organization's network. The analyst determined that these logins were not performed by individuals within the organization. Which of the following recommendations would reduce the likelihood of future attacks? (Choose two.)

Disciplinary actions for users
Conditional access policies
More regular account audits
Implementation of additional authentication factors
Enforcement of content filtering policies
A review of user account permissions

Answer(s): B,D

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 11) CompTIA Security+ Updated on: 06-Dec-2025

QUESTION: 81

QUESTION: 82

QUESTION: 83

QUESTION: 84

QUESTION: 85

QUESTION: 86

QUESTION: 87

QUESTION: 88

CompTIA SY0-701 Exam (page: 11)
CompTIA Security+
Updated on: 06-Dec-2025