CompTIA Security+ Certification Exam (SY0-701) Free Practice Test

Question 1

An attacker gained access to a virtual machine and was able to access the hypervisor. Which of the following describes this attack?

A. Privilege escalation

B. SQL injection

C. VM escape

D. Logic bomb

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

A company's leadership team wants to ensure employees only print business-related documents on company printers. Which of the following documents should the company add this directive to?

A. Information security policy

B. Business continuity plan

C. Data classification policy

D. Acceptable use policy

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

A security administrator recently reset local passwords and the following values were recorded in the system:

Which of the following in the security administrator most likely protecting against?

A. Weak password complexity

B. Password compromise

C. Pass-the-hash attacks

D. Account sharing

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which of the following security measures is required when using a cloud-based platform for IoT management?

A. Encrypted connection

B. Firewall

C. Federated identity

D. Single sign-on

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which of the following metrics are used to calculate the risk rating in a matrix format? (Choose two.)

A. ARO

B. ALE

C. Impact

D. SLE

E. Likelihood

F. Quantitative

Correct Answer: C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which of the following is the best way to provide secure, remote access for employees while minimizing the exposure of a company's internal network?

A. FTP

B. VPN

C. RADIUS

D. LDAP

Correct Answer: B

Question 7

During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization's network. Which of the following fulfills this request?

A. access-list inbound permit ip source 0.0.0.0/0 destination 10.1.4.9/32

B. access-list inbound deny ip source 10.1.4.9/32 destination 0.0.0.0/0

C. access-list inbound permit ip source 10.1.4.9/32 destination 0.0.0.0/0

D. access-list inbound deny ip source 0.0.0.0/0 destination 10.1.4.9/32

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

A company wants to reduce the time and expense associated with code deployment. Which of the following technologies should the company utilize?

A. Thin clients

B. Virtual machines

C. Private cloud

D. Serverless architecture

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which of the following describes when a user installs an unauthorized application by bypassing the authorized application store and installing a binary file?

A. VM escaping

B. Jailbreaking

C. Memory injection

D. Sideloading

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

A security analyst needs to analyze the pattern of a threat actor to document the steps used in an incident. Which of the following is best suited for this exercise?

A. Questionnaires

B. MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK)

C. Diamond Model of Intrusion Analysis

D. Open Worldwide Application Security Project (OWASP) Top 10

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Which of the following is a company addressing when it rolls out MDM on all COPE devices?

A. Unsupported applications

B. Data masking

C. Phishing attacks

D. Malware outbreaks

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

A site reliability engineer is designing a recovery strategy that requires quick failover to an identical site if the primary facility goes down. Which of the following types of sites should the engineer consider?

A. Warm site

B. Cold site

C. Recovery site

D. Hot site

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

An administrator must implement a solution that provides security and network connectivity between two companies. Which of the following infrastructure solutions is the best for this purpose?

A. NAC

B. NGFW

C. VPN

D. UTM

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

Which of the following activities is used to determine the reason an incident occurred, prior to closing the incident?

A. Detection

B. Lessons learned

C. E-discovery

D. Root cause analysis

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

CompTIA Security+ Certification (SY0-701) Free Practice Test