Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 241–245 (page: 50)

Updated On: 26-Aug-2026

Which of the following options will provide the lowest RTO and RPO for a database?

  1. Snapshots
  2. On-site backups
  3. Journaling
  4. Hot site

Answer(s): C



Which of the following is a possible consequence of a VM escape?

  1. Malicious instructions can be inserted into memory and give the attacker elevated permissions.
  2. An attacker can access the hypervisor and compromise other VMs.
  3. Unencrypted data can be read by a user who is in a separate environment.
  4. Users can install software that is not on the manufacturer’s approved list.

Answer(s): B

Explanation:

A VM escape occurs when an attacker manages to break out of a virtual machine (VM) and gain access to the underlying hypervisor or host system. Once the attacker has access to the hypervisor, they can potentially compromise other VMs running on the same host, which could lead to unauthorized access, data breaches, or further exploitation of the system.



A security team at a large, global company needs to reduce the cost of storing data used for performing investigations.
Which of the following types of data should have its retention length reduced?

  1. Packet capture
  2. Endpoint logs
  3. OS security logs
  4. Vulnerability scan

Answer(s): A

Explanation:

Packet capture data generally has a high storage cost because it records detailed network traffic and is often voluminous.
While packet capture data is valuable for short-term investigations and troubleshooting, it typically does not need to be retained long-term for most security operations. Reducing its retention length can help lower the cost of storing such data.



Which of the following is a type of vulnerability that involves inserting scripts into web-based applications in order to take control of the client's web browser?

  1. SQL injection
  2. Cross-site scripting
  3. Zero-day exploit
  4. On-path attack

Answer(s): B

Explanation:

Cross-site scripting (XSS) is a type of vulnerability that occurs when attackers inject malicious scripts into web applications. These scripts are then executed by the client's web browser, which can allow the attacker to steal sensitive data (such as cookies or session tokens), impersonate users, or perform other malicious actions within the context of the user's session.



While investigating a possible incident, a security analyst discovers the following:

Which of the following should the analyst do first?

  1. Implement a WAF.
  2. Disable the query.php script.
  3. Block brute-force attempts on temporary users.
  4. Check the users table for new accounts.

Answer(s): D

Explanation:

The log snippet shows an HTTP request where an attacker is attempting to insert new data into the database through a SQL injection attack. The request contains an SQL command INSERT INTO users VALUES ('temp', 'pass123'), which is likely an attempt to create a new user with the username "temp" and the password "pass123."



Viewing page 50 of 198
Viewing questions 246 - 250 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!