SY0-701 Exam Questions and Answers | Exam-Dumps (Page: 14)

QUESTION: 105

Which of the following topics would most likely be included within an organization's SDLC?

Service-level agreements
Information security policy
Penetration testing methodology
Branch protection requirements

Answer(s): D

Reveal Solution Next Question

QUESTION: 106

Which of the following control types is AUP an example of?

Physical
Managerial
Technical
Operational

Answer(s): D

Reveal Solution Next Question

An organization is adopting cloud services at a rapid pace and now has multiple SaaS applications in use. Each application has a separate log-in, so the security team wants to reduce the number of credentials each employee must maintain. Which of the following is the first step the security team should take?

Enable SAML.
Create OAuth tokens.
Use password vaulting.
Select an IdP.

Answer(s): D

Reveal Solution Next Question

QUESTION: 108

A company's online shopping website became unusable shortly after midnight on January 30, 2023. When a security analyst reviewed the database server, the analyst noticed the following code used for backing up data:

Which of the following should the analyst do next?

Check for recently terminated DBAs.
Review WAF logs for evidence of command injection.
Scan the database server for malware.
Search the web server for ransomware notes.

Answer(s): B

Reveal Solution Next Question

QUESTION: 109

Which of the following would be the best way to test resiliency in the event of a primary power failure?

Parallel processing
Tabletop exercise
Simulation testing
Production failover

Answer(s): D

Reveal Solution Next Question

QUESTION: 110

Which of the following would be the most appropriate way to protect data in transit?

SHA-256
SSL3.0
TLS 1.3
AES-256

Answer(s): C

Reveal Solution Next Question

QUESTION: 111

Which of the following is a common, passive reconnaissance technique employed by penetration testers in the early phases of an engagement?

Open-source intelligence
Port scanning
Pivoting
Exploit validation

Answer(s): A

Reveal Solution Next Question

QUESTION: 112

Which of the following threat actors is the most likely to seek financial gain through the use of ransomware attacks?

Organized crime
Insider threat
Nation-state
Hacktivists

Answer(s): A

Explanation:

Organized crime groups are primarily motivated by financial gain. Ransomware attacks are a popular tool for these groups because they can encrypt a victim's data and demand a ransom payment (often in cryptocurrency) to restore access. This form of attack can yield a high financial return if victims choose to pay.

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 14)
CompTIA Security+
Updated on: 06-Dec-2025

QUESTION: 105

QUESTION: 106

QUESTION: 107

QUESTION: 108

QUESTION: 109

QUESTION: 110

QUESTION: 111

QUESTION: 112

Explanation:

CompTIA SY0-701 Exam (page: 14) CompTIA Security+ Updated on: 06-Dec-2025

QUESTION: 105

QUESTION: 106

QUESTION: 107

QUESTION: 108

QUESTION: 109

QUESTION: 110

QUESTION: 111

QUESTION: 112

Explanation:

CompTIA SY0-701 Exam (page: 14)
CompTIA Security+
Updated on: 06-Dec-2025