Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 471–475 (page: 96)

Updated On: 26-Aug-2026

According to various privacy rules and regulations, users have the power to request that all data pertaining to them is deleted. This is known as:

  1. right to be forgotten.
  2. attestation and acknowledgement.
  3. data retention.
  4. information deletion.

Answer(s): A

Explanation:

Privacy regulations such as the EU’s GDPR grant individuals the “right to be forgotten” (also called the right of erasure), enabling them to request deletion of all personal data that an organization holds about them.



An analyst identifies that multiple users have the same passwords, but the hashes appear to be completely different.
Which of the following most likely explains this issue?

  1. Data masking
  2. Salting
  3. Key escrow
  4. Tokenization

Answer(s): B

Explanation:

Salting appends a unique random value to each user’s password before hashing, so identical passwords produce different hash values and resist rainbow-table attacks.



An employee receives a work phone. Instead of starting up with the normal operating system, the phone loads to a gaming platform using administrative credentials.
Which of the following issues occurred?

  1. Misconfiguration
  2. Side loading
  3. Malicious update
  4. Jailbreaking

Answer(s): D

Explanation:

Jailbreaking a device removes manufacturer, or carrier‐imposed restrictions, granting administrative control and allowing it to boot into unauthorized software (in this case, a gaming platform) instead of the standard operating system.



A university uses two different cloud solutions for storing student data.
Which of the following does this represent?

  1. Load balancer
  2. Parallel processing
  3. Platform diversity
  4. Clustering

Answer(s): C

Explanation:

By employing multiple cloud providers for the same workloads, the university reduces reliance on a single vendor and mitigates risks like outages or vendor-specific vulnerabilities.



An employee clicked a malicious link in an email and downloaded malware onto the company's computer network. The malicious program exfiltrated thousands of customer records.
Which of the following should the company implement to best prevent this in the future?

  1. User awareness training
  2. Network monitoring
  3. Endpoint protection
  4. Data loss prevention

Answer(s): C

Explanation:

Deploying modern endpoint protection (antivirus/EDR) on each workstation can detect and block malicious payloads downloaded via phishing links, stopping the malware before it can install and exfiltrate customer data. This directly prevents the root cause (malware infection), whereas other controls (like DLP) act later in the attack chain.



Viewing page 96 of 198
Viewing questions 476 - 480 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!