Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 456–460 (page: 93)

Updated On: 26-Aug-2026

A systems administrator has overwritten all of the supervisor's permissions in order to perform malicious activities.
Which of the following does this describe?

  1. Shadow IT
  2. Unskilled attacker
  3. Insider threat
  4. Hacktivist

Answer(s): C

Explanation:

An insider threat involves a trusted individual within the organization, such as a systems administrator, misusing their legitimate access to carry out malicious actions, like overwriting a supervisor’s permissions.



Which of the following would best prepare a security team for a specific incident response scenario?

  1. Situational awareness
  2. Risk assessment
  3. Root cause analysis
  4. Tabletop exercise

Answer(s): D

Explanation:

A tabletop exercise walks the security team through a realistic incident scenario in a low-stakes environment, allowing them to practice roles, decisions, and coordination before a real event occurs.



Which of the following would best ensure a controlled version release of a new software application?

  1. Business continuity planning
  2. Quantified risk analysis
  3. Static code analysis
  4. Change management procedures

Answer(s): D

Explanation:

Change management procedures establish formal processes for planning, approving, testing, and documenting software releases, ensuring new versions are deployed in a controlled, auditable manner.



Several employees download a productivity program that is useful but also leaks contact information and corporate organizational structure details.
Which of the following is the best way to prevent this issue?

  1. Application allow list
  2. Workstation hardening
  3. Refusal of unsigned code
  4. IP blocklist
  5. Standard user accounts

Answer(s): A

Explanation:

An application allow list ensures only approved software can be installed or run on corporate endpoints, blocking any unapproved programs that might leak sensitive information.



The Chief Executive Officer has requested that a vendor conduct a penetration test without engaging the internal IT team to validate the company's investment in security tools, awareness training, and SOC personnel.
Which of the following penetration testing methods is most likely being used?

  1. Unknown
  2. Known
  3. Integrated
  4. Partially known

Answer(s): A

Explanation:

An “unknown” (black-box) test gives the testers no prior information or coordination with internal teams, mimicking an external attacker and validating defenses without internal assistance.



Viewing page 93 of 198
Viewing questions 461 - 465 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!