Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 521–525 (page: 106)

Updated On: 26-Aug-2026

A company decides to purchase an insurance policy.
Which of the following risk management strategies is this company implementing?

  1. Mitigate
  2. Accept
  3. Avoid
  4. Transfer

Answer(s): D

Explanation:

Purchasing an insurance policy is a risk transfer strategy, as the financial impact of a risk is shifted from the company to the insurance provider.



Which of the following principles requires that a company must keep files or records for a prescribed period of time before it disposes of those files or records?

  1. Data verification
  2. Data backups
  3. Data archiving
  4. Data retention

Answer(s): D

Explanation:

Data retention is the principle that mandates an organization to keep files or records for a specified period before disposing of them, often to meet legal or regulatory requirements.



A security analyst is monitoring logs from the organization's SIEM and identifies logs related to one of their salespeople:

Which of the following is being displayed in the logs?

  1. Impossible travel
  2. SMTP replay
  3. Directory traversal
  4. Cross-site request forgery

Answer(s): A

Explanation:

The logs show the same employee account accessing services from geographically distant locations (Atlanta and Beijing) within a short time frame, which is not physically possible, this is known as impossible travel.



A company wants to update its disaster recovery plan to include a dedicated location for immediate continued operations if a catastrophic event occurs.
Which of the following options is best to include in the disaster recovery plan?

  1. Hot site
  2. Warm site
  3. Geolocation
  4. Cold site

Answer(s): A

Explanation:

A hot site is a fully equipped, dedicated location that allows immediate continuation of business operations after a disaster, making it the best choice for minimal downtime.



Which of the following attacks exploits a potential vulnerability as a result of direct access to a system using weak cryptographic algorithms?

  1. Password cracking
  2. On-path
  3. Digital signing
  4. Side-channel

Answer(s): A

Explanation:

Password cracking attacks exploit weak cryptographic algorithms by attempting to guess or decrypt passwords through direct access to systems or password hashes, making use of vulnerabilities in the cryptography.



Viewing page 106 of 198
Viewing questions 526 - 530 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!