Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 391–395 (page: 80)

Updated On: 26-Aug-2026

The physical security team at a company receives reports that employees are not displaying their badges. The team also observes employees tailgating at controlled entrances.
Which of the following topics will the security team most likely emphasize in upcoming security training?

  1. Social engineering
  2. Situational awareness
  3. Phishing
  4. Acceptable use policy

Answer(s): B

Explanation:

Situational awareness training helps employees recognize and respond appropriately to physical security threats, such as tailgating and failure to display ID badges, promoting adherence to security protocols in controlled areas.



Which of the following would most likely be a hacktivist's motive?

  1. Financial gain
  2. Espionage
  3. Philosophical beliefs
  4. Revenge

Answer(s): C

Explanation:

Hacktivists are typically driven by ideological or political motivations, using hacking to promote or protest specific philosophical beliefs or causes.



During a recent log review, an analyst discovers evidence of successful injection attacks.
Which of the following will best address this issue?

  1. Authentication
  2. Secure cookies
  3. Static code analysis
  4. Input validation

Answer(s): D

Explanation:

Input validation ensures that user-supplied data is properly checked before processing, effectively preventing injection attacks such as SQL or command injections by rejecting malicious input.



Which of the following is the first step to secure a newly deployed server?

  1. Close unnecessary service ports.
  2. Update the current version of the software.
  3. Add the device to the ACL.
  4. Upgrade the OS version.

Answer(s): A



A security analyst receives an alert that there was an attempt to download known malware.
Which of the following actions would allow the best chance to analyze the malware?

  1. Review the IPS logs and determine which command-and-control IPs were blocked.
  2. Analyze application logs to see how the malware attempted to maintain persistence.
  3. Run vulnerability scans to check for systems and applications that are vulnerable to the malware
  4. Obtain and execute the malware in a sandbox environment and perform packet captures.

Answer(s): D

Explanation:

Running the malware in a controlled sandbox environment allows the analyst to safely observe its behavior, including communication, persistence mechanisms, and payload delivery, providing the most comprehensive analysis.



Viewing page 80 of 198
Viewing questions 396 - 400 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!