Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 386–390 (page: 79)

Updated On: 26-Aug-2026

Which of the following is a type of vulnerability that may result from outdated algorithms or keys?

  1. Hash collision
  2. Cryptographic
  3. Buffer overflow
  4. Input validation

Answer(s): B

Explanation:

Cryptographic vulnerabilities occur when outdated algorithms or weak encryption keys are used, making systems susceptible to attacks such as brute force or cryptanalysis. These issues undermine the confidentiality and integrity of encrypted data.



A company wants to prevent proprietary and confidential company information from being shared to outsiders.
Which of the following would this best describe?

  1. MOA
  2. SLA
  3. MSA
  4. NDA

Answer(s): D

Explanation:

A Non-Disclosure Agreement (NDA) is a legal contract that restricts parties from disclosing proprietary or confidential information to unauthorized individuals or organizations, making it the most suitable option for protecting sensitive company data.



A security administrator needs to reduce the attack surface in the company's data centers.
Which of the following should the security administrator do to complete this task?

  1. Implement a honeynet.
  2. Define Group Policy on the servers.
  3. Configure the servers for high availability.
  4. Upgrade end-of-support operating systems.

Answer(s): D

Explanation:

Upgrading end-of-support operating systems ensures that the servers receive security patches and updates, significantly reducing vulnerabilities and thereby the overall attack surface.



Which of the following is a prerequisite for a DLP solution?

  1. Data destruction
  2. Data sanitization
  3. Data classification
  4. Data masking

Answer(s): C

Explanation:

Data classification is essential for a Data Loss Prevention (DLP) solution to function effectively. It identifies and labels data based on sensitivity and importance, enabling the DLP system to apply appropriate policies to protect it.



A business provides long-term cold storage services to banks that are required to follow regulator-imposed data retention guidelines. Banks that use these services require that data is disposed of in a specific manner at the conclusion of the regulatory threshold for data retention.
Which of the following aspects of data management is the most important to the bank in the destruction of this data?

  1. Encryption
  2. Classification
  3. Certification
  4. Procurement

Answer(s): C

Explanation:

Certification provides documented proof that data was destroyed in compliance with regulatory requirements. This is critical for banks to demonstrate adherence to data retention and disposal mandates imposed by regulators.



Viewing page 79 of 198
Viewing questions 391 - 395 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!