SY0-701 Exam Questions and Answers | Exam-Dumps (Page: 9)

QUESTION: 65

A security administrator is working to find a cost-effective solution to implement certificates for a large number of domains and subdomains owned by the company. Which of the following types of certificates should the administrator implement?

Wildcard
Client certificate
Self-signed
Code signing

Answer(s): A

Reveal Solution Next Question

QUESTION: 66

An auditor discovered multiple insecure ports on some servers. Other servers were found to have legacy protocols enabled. Which of the following tools did the auditor use to discover these issues?

Nessus
curl
Wireshark
netcat

Answer(s): A

Reveal Solution Next Question

QUESTION: 67

A security analyst received a tip that sensitive proprietary information was leaked to the public. The analyst is reviewing the PCAP and notices traffic between an internal server and an external host that includes the following:
...
12:47:22.327233 PPPoE [ses 0x8122] IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto IPv6 (41), length 331) 10.5.1.1 > 52.165.16.154: IP6 (hlim E3, next-
header TCP (6) paylcad length: 271) 2001:67c:2158:a019::ace.53104 > 2001:0:5ef5:79fd:380c:dddd:a601:24fa.13788: Flags [P.], cksum 0xd7ee (correct), seq 97:348, ack 102, win 16444, length 251
...
Which of the following was most likely used to exfiltrate the data?

Encapsulation
MAC address spoofing
Steganography
Broken encryption
Sniffing via on-path position

Answer(s): A

Reveal Solution Next Question

QUESTION: 68

A company wants to reduce the time and expense associated with code deployment. Which of the following technologies should the company utilize?

Serverless architecture
Thin clients
Private cloud
Virtual machines

Answer(s): A

Reveal Solution Next Question

QUESTION: 69

A security administrator is performing an audit on a stand-alone UNIX server, and the following message is immediately displayed:
(Error 13): /etc/shadow: Permission denied.
Which of the following best describes the type of tool that is being used?

Pass-the-hash monitor
File integrity monitor
Forensic analysis
Password cracker

Answer(s): D

Reveal Solution Next Question

QUESTION: 70

A security administrator needs to create firewall rules for the following protocols: RTP, SIP, H.323. and SRTP. Which of the following does this rule set support?

RTOS
VoIP
SoC
HVAC

Answer(s): B

Reveal Solution Next Question

QUESTION: 71

Which of the following best describes a social engineering attack that uses a targeted electronic messaging campaign aimed at a Chief Executive Officer?

Whaling
Spear phishing
Impersonation
Identity fraud

Answer(s): A

Reveal Solution Next Question

QUESTION: 72

During a penetration test, a flaw in the internal PKI was exploited to gain domain administrator rights using specially crafted certificates. Which of the following remediation tasks should be completed as part of the cleanup phase?

Updating the CRL
Patching the CA
Changing passwords
Implementing SOAR

Answer(s): B

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 9) CompTIA Security+ Updated on: 06-Dec-2025

QUESTION: 65

QUESTION: 66

QUESTION: 67

QUESTION: 68

QUESTION: 69

QUESTION: 70

QUESTION: 71

QUESTION: 72

CompTIA SY0-701 Exam (page: 9)
CompTIA Security+
Updated on: 06-Dec-2025