CompTIA SY0-701 Exam Prep
CompTIA Security+ (Page 33 )

Updated On: 31-Aug-2026

An accountant is transferring information to a bank over FTP.
Which of the following mitigations should the accountant use to protect the confidentiality of the data?

  1. Tokenization
  2. Data masking
  3. Encryption
  4. Obfuscation

Answer(s): C

Explanation:

Encrypting the data ensures that it remains confidential and protected from unauthorized access during transfer. Standard FTP does not provide secure transmission, so adding encryption—such as using FTPS (FTP Secure) or SFTP (SSH File Transfer Protocol)—will safeguard the data by making it unreadable to anyone intercepting the transfer.



An organization has recently decided to implement SSO. The requirements are to leverage access tokens and focus on application authorization rather than user authentication.
Which of the following solutions would the engineering team most likely configure?

  1. LDAP
  2. Federation
  3. SAML
  4. OAuth

Answer(s): D

Explanation:

OAuth is designed for authorization rather than authentication. It uses access tokens to grant applications permission to access resources on behalf of a user, focusing on what the application can do with the user's data rather than verifying the user's identity. This makes OAuth a suitable choice for Single Sign-On (SSO) when the focus is on application authorization.



Which of the following would most likely be used by attackers to perform credential harvesting?

  1. Social engineering
  2. Supply chain compromise
  3. Third-party software
  4. Rainbow table

Answer(s): A

Explanation:

Social engineering tactics, such as phishing, are commonly used by attackers to trick individuals into revealing their login credentials. By posing as a trusted entity or creating a fake login page, attackers can harvest usernames and passwords directly from unsuspecting users. This method is highly effective and frequently used for credential harvesting.



A security engineer would like to enhance the use of automation and orchestration within the SIEM.
Which of the following would be the primary benefit of this enhancement?

  1. It increases complexity.
  2. It removes technical debt.
  3. It adds additional guard rails.
  4. It acts as a workforce multiplier.

Answer(s): D

Explanation:

By automating repetitive tasks and orchestrating responses to common security incidents, the SIEM can handle more work without requiring additional personnel. This enhancement allows the security team to be more efficient, respond faster, and focus on more complex tasks, effectively multiplying the impact of the existing workforce.



A systems administrator receives an alert that a company’s internal file server is very slow and is only working intermittently. The systems administrator reviews the server management software and finds the following information about the server:

Which of the following indicators most likely triggered this alert?

  1. Concurrent session usage
  2. Network saturation
  3. Account lockout
  4. Resource consumption

Answer(s): D

Explanation:

The attached information shows that the CPU usage is at 99.6% and memory usage is at 97%. These high levels of resource consumption would lead to slow performance and intermittent issues, triggering an alert due to the server’s limited ability to handle additional requests.



Viewing page 33 of 198
Viewing questions 161 - 165 out of 985 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!