SY0-701 Exam Questions and Answers | Exam-Dumps (Page: 8)

QUESTION: 57

An analyst is performing a vulnerability scan against the web servers exposed to the internet without a system account. Which of the following is most likely being performed?

Non-credentialed scan
Packet capture
Privilege escalation
System enumeration
Passive scan

Answer(s): A

Reveal Solution Next Question

A security administrator is hardening corporate systems and applying appropriate mitigations by consulting a real-world knowledge base for adversary behavior. Which of the following would be best for the administrator to reference?

MITRE ATT&CK
CSIRT
CVSS
SOAR

Answer(s): A

Reveal Solution Next Question

QUESTION: 59

An architect has a request to increase the speed of data transfer using JSON requests externally. Currently, the organization uses SFTP to transfer data files. Which of the following will most likely meet the requirements?

A website-hosted solution
Cloud shared storage
A secure email solution
Microservices using API

Answer(s): D

Reveal Solution Next Question

QUESTION: 60

Which of the following addresses individual rights such as the right to be informed, the right of access, and the right to be forgotten?

GDPR
PCI DSS
NIST
ISO

Answer(s): A

Reveal Solution Next Question

QUESTION: 61

An administrator is installing an LDAP browser tool in order to view objects in the corporate LDAP directory. Secure connections to the LDAP server are required. When the browser connects to the server, certificate errors are being displayed, and then the connection is terminated. Which of the following is the most likely solution?

The administrator should allow SAN certificates in the browser configuration.
The administrator needs to install the server certificate into the local truststore.
The administrator should request that the secure LDAP port be opened to the server.
The administrator needs to increase the TLS version on the organization's RA.

Answer(s): B

Reveal Solution Next Question

QUESTION: 62

Which of the following is the most important security concern when using legacy systems to provide production service?

Instability
Lack of vendor support
Loss of availability
Use of insecure protocols

Answer(s): B

Reveal Solution Next Question

QUESTION: 63

A security investigation revealed that malicious software was installed on a server using a server administrator's credentials. During the investigation, the server administrator explained that Telnet was regularly used to log in. Which of the following most likely occurred?

A spraying attack was used to determine which credentials to use.
A packet capture tool was used to steal the password.
A remote-access Trojan was used to install the malware.
A dictionary attack was used to log in as the server administrator.

Answer(s): B

Reveal Solution Next Question

QUESTION: 64

A user is requesting Telnet access to manage a remote development web server. Insecure protocols are not allowed for use within any environment. Which of the following should be configured to allow remote access to this server?

HTTPS
SNMPv3
SSH
RDP
SMTP

Answer(s): C

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 8)
CompTIA Security+
Updated on: 06-Dec-2025

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60

QUESTION: 61

QUESTION: 62

QUESTION: 63

QUESTION: 64

CompTIA SY0-701 Exam (page: 8) CompTIA Security+ Updated on: 06-Dec-2025

QUESTION: 57

QUESTION: 58

QUESTION: 59

QUESTION: 60

QUESTION: 61

QUESTION: 62

QUESTION: 63

QUESTION: 64

CompTIA SY0-701 Exam (page: 8)
CompTIA Security+
Updated on: 06-Dec-2025