Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 36–40 (page: 9)

Updated On: 29-Oct-2026

Which of the following is the best physical security control to prevent damage from a vehicle?

  1. Security guard
  2. Fencing
  3. Lighting
  4. Bollards

Answer(s): D

Explanation:

Bollards serve as a robust physical barrier designed to withstand and absorb the kinetic impact of a vehicle, thereby preventing unauthorized vehicular access or accidental collisions that could cause structural damage or endanger personnel.



A security analyst is reviewing the logs on an organization's DNS server and notices the following unusual snippet:

Which of the following attack techniques was most likely used?

  1. Determining the organization's ISP-assigned address space
  2. Bypassing the organization's DNS sinkholing
  3. Footprinting the internal network
  4. Attempting to achieve initial access to the DNS server
  5. Exfiltrating data from fshare.int.complia.org

Answer(s): C

Explanation:


Reference:

https://www.acunetix.com/blog/articles/dns-zone-transfers-axfr/



An employee decides to take malicious action against an organization after being passed over for a promotion.
Which of the following threats does the employee now represent?

  1. Insider threat
  2. Nation-state
  3. Shadow IT
  4. Hacktivist

Answer(s): A

Explanation:

An insider threat involves a person within the organization, such as an employee, who uses their access for malicious purposes, often due to personal grievances or dissatisfaction.



A security analyst attempts to start a company's database server.
When the server starts, the analyst receives an error message indicating the database server did not pass authentication. After reviewing and testing the system, the analyst receives confirmation that the server has been compromised and that attackers have redirected all outgoing database traffic to a server under their control.
Which of the following MITRE ATT&CK techniques did the attacker most likely use to redirect database traffic?

  1. Browser extension
  2. Process injection
  3. Valid accounts
  4. Escape to host

Answer(s): D



Which of the following should an organization use to ensure that it can review the controls and performance of a service provider or vendor?

  1. Service-level agreement
  2. Memorandum of agreement
  3. Right-to-audit clause
  4. Supply chain analysis

Answer(s): C

Explanation:

A right-to-audit clause gives an organization the legal ability to inspect and verify a service provider's or vendor’s controls, processes, and compliance with contractual obligations, ensuring transparency and accountability.



Viewing page 9 of 204
Viewing questions 41 - 45 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!