Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 206–210 (page: 43)

Updated On: 26-Aug-2026

Which of the following can be used to compromise a system that is running an RTOS?

  1. Cross-site scripting
  2. Memory injection
  3. Replay attack
  4. Ransomware

Answer(s): B

Explanation:

Memory injection attacks are particularly dangerous for systems running a Real-Time Operating System (RTOS) because these systems often have limited resources and strict timing requirements, making them more susceptible to disruptions caused by injected code. Memory injection can compromise the system's integrity, allowing an attacker to alter its operation or cause it to behave unpredictably.



Which of the following threat actors would most likely deface the website of a high-profile music group?

  1. Unskilled attacker
  2. Organized crime
  3. Nation-state
  4. Insider threat

Answer(s): A

Explanation:

Unskilled attackers, often referred to as "script kiddies," are more likely to deface websites for attention or to make a public statement rather than for financial gain or political motivations. Defacing a high-profile music group's website aligns with the typical goals of an unskilled attacker seeking notoriety or a sense of accomplishment by exploiting visible and relatively simple vulnerabilities.



A security architect wants to prevent employees from receiving malicious attachments by email.
Which of the following functions should the chosen solution do?

  1. Apply IP address reputation data.
  2. Tap and monitor the email feed.
  3. Scan email traffic inline.
  4. Check SPF records.

Answer(s): C

Explanation:

Scanning email traffic inline enables the security solution to inspect attachments and other content in real-time as emails are received. This allows the system to detect and block malicious attachments before they reach employees, effectively preventing potential security incidents caused by harmful email attachments. This approach is essential for identifying and neutralizing threats within email content directly.



Which of the following activities is the first stage in the incident response process?

  1. Detection
  2. Declaration
  3. Containment
  4. Verification

Answer(s): A

Explanation:

Detection is the first stage in the incident response process. It involves identifying potential security incidents through alerts, monitoring, and analysis to determine if an incident has occurred. Effective detection is crucial as it initiates the response process, allowing the team to assess the situation and proceed with containment and other response steps.



Which of the following is the main consideration when a legacy system that is a critical part of a company's infrastructure cannot be replaced?

  1. Resource provisioning
  2. Cost
  3. Single point of failure
  4. Complexity

Answer(s): C

Explanation:

When a legacy system that is critical to a company's infrastructure cannot be replaced, the primary consideration is that it may become a single point of failure. This is because legacy systems are often difficult to support, lack redundancy, and may no longer receive updates, making them vulnerable. Ensuring that this critical system is protected from failure is essential to maintain continuity and reduce the risk of operational disruptions.



Viewing page 43 of 198
Viewing questions 211 - 215 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!