Disagreement ranking

SY0-701 — most debated topics

Community-voted ranking of 385 topics, sorted by disagreement level. A higher dispute score means more test-takers disagree on the answer.

Full ranking

385 topics · highest disagreement first

  1. CCTV and Surveillance Signs as Security Controls

    S-grade Dispute: 78% 6 comments

  2. When Should an Engineer Decommission a Network Device?

    S-grade Dispute: 75% 10 comments

  3. Which Controls Secure Remote Access to Sensitive PHI Applications?

    S-grade Dispute: 75% 7 comments

  4. Which Zero Trust Component Belongs to the Data Plane?

    S-grade Dispute: 62% 59 comments

  5. Which MITRE ATT&CK Technique Redirected Database Traffic?

    S-grade Dispute: 62% 18 comments

  6. What Risk Does Opening Firewall Ports for a SaaS System Introduce?

    S-grade Dispute: 62% 43 comments

  7. SDLC Inclusion: Branch Protection Requirements

    S-grade Dispute: 61% 20 comments

  8. How Should a Critical App on a Legacy Server Be Handled?

    S-grade Dispute: 56% 45 comments

  9. How Does Device Labeling and Employee ID Association Enhance Security?

    S-grade Dispute: 56% 33 comments

  10. Reissuing a Laptop: Which Data Handling Activities Apply?

    S-grade Dispute: 54% 32 comments

  11. Mitigating URL Shortener Phishing Campaigns

    S-grade Dispute: 54% 13 comments

  12. Vulnerability Scan False Positive Identification

    S-grade Dispute: 50% 9 comments

  13. How Can Organizations Prevent Data Loss from Lost Mobile Devices?

    S-grade Dispute: 50% 15 comments

  14. How to Block Unauthorized Devices Plugged into Phone Network Ports?

    S-grade Dispute: 50% 7 comments

  15. What is the First Step to Increase Security Awareness After Account Compromises?

    S-grade Dispute: 50% 5 comments

  16. Preventing JavaScript Injection on Web Servers

    A-grade Dispute: 50% 6 comments

  17. Mobile Data Security: Containerization vs Remote Wipe

    S-grade Dispute: 49% 33 comments

  18. End of Support vs End of Life for a Legacy Device?

    S-grade Dispute: 48% 64 comments

  19. Securing Web App Port 443: Best Mitigations

    S-grade Dispute: 48% 15 comments

  20. Which Low-Cost Standby Site Includes Hardware and Internet?

    S-grade Dispute: 48% 12 comments

  21. What Scenario Best Describes a Business Email Compromise Attack?

    S-grade Dispute: 48% 55 comments

  22. How to Enforce Approved Applications on BYOD Devices?

    S-grade Dispute: 47% 6 comments

  23. Investigating a Date-Triggered Database Deletion Script

    S-grade Dispute: 46% 11 comments

  24. Which Attack Vector Uses Fake HR Onboarding Email Links?

    S-grade Dispute: 45% 17 comments

  25. Remediation for Exploited Internal PKI Flaw

    S-grade Dispute: 45% 19 comments

  26. What Vulnerability Type Stems from Improper Cryptographic Certificate Management?

    S-grade Dispute: 45% 5 comments

  27. What Must Be Done Before Mitigating Production Vulnerabilities?

    A-grade Dispute: 45% 4 comments

  28. Legacy Systems Security Concerns: Vendor Support vs Insecure Protocols

    S-grade Dispute: 44% 20 comments

  29. Identifying Tools by /etc/shadow Permission Denied Errors

    S-grade Dispute: 44% 20 comments

  30. Next Step After Identifying Design Issues in Annual Review

    S-grade Dispute: 44% 17 comments

  31. Why Is a Duplicate Corporate Email Site Considered Impersonation?

    S-grade Dispute: 44% 8 comments

  32. Which Deception Method Uses a Fake Credential Spreadsheet?

    A-grade Dispute: 44% 4 comments

  33. Is a Telnet Scan Finding a False Positive After Nmap Encryption Test?

    S-grade Dispute: 43% 36 comments

  34. Red Team vs Blue Team Vulnerability Exploitation

    S-grade Dispute: 43% 26 comments

  35. What Should a Security Team Do First Before Deploying a New Web Server?

    S-grade Dispute: 43% 9 comments

  36. Which Solution Provides the Lowest RTO and RPO for a Database?

    S-grade Dispute: 43% 7 comments

  37. What Constitutes a Treatment Strategy for Continuous Risk?

    S-grade Dispute: 43% 5 comments

  38. Which technique allows an exploit to bypass OS detection?

    S-grade Dispute: 42% 12 comments

  39. What Vulnerability Occurs When an Attacker Alters Data During a SQL Update?

    S-grade Dispute: 42% 9 comments

  40. What control type is segmenting a legacy server into a private network?

    S-grade Dispute: 41% 18 comments

  41. Which MFA Solution Meets Know/Are/Have Without Extra Costs?

    S-grade Dispute: 41% 12 comments

  42. What Explains Successful Password Logins Followed by Repeated MFA Failures?

    S-grade Dispute: 41% 25 comments

  43. What Would Have Prevented the VPN Appliance Admin Login?

    S-grade Dispute: 40% 18 comments

  44. Which Data Category Is Most Impacted When Lost?

    S-grade Dispute: 40% 11 comments

  45. What Are the Key Benefits of Microservices Over Monolithic Architecture?

    A-grade Dispute: 40% 3 comments

  46. Securing End-of-Life Systems with Network Isolation

    S-grade Dispute: 39% 8 comments

  47. Containerization vs Virtualization for OS Reduction

    S-grade Dispute: 39% 17 comments

  48. What is the Next Step After Confirming a Proprietary Data Breach?

    S-grade Dispute: 39% 7 comments

  49. Internal Audit vs External Examination for Regulatory Compliance

    S-grade Dispute: 37% 18 comments

  50. Supply Chain Illumination Tools for Full-Spectrum Analysis

    S-grade Dispute: 37% 20 comments

  51. What Is the Outcome of Failing an Internal PCI DSS Assessment?

    S-grade Dispute: 37% 36 comments

  52. SLA vs MOU for Service Deliverables and Timelines?

    S-grade Dispute: 36% 11 comments

  53. How Should Organizations Prioritize Vulnerabilities Most Effectively?

    S-grade Dispute: 36% 9 comments

  54. What Sensitive Information Should Be Scrubbed from Job Postings?

    S-grade Dispute: 36% 5 comments

  55. How to Decrease Hardware Attack Surface?

    S-grade Dispute: 36% 6 comments

  56. What Should a SOC Analyst Do First After Discovering Exposed Credentials?

    S-grade Dispute: 36% 8 comments

  57. Cloud Environment Security Best Practices

    S-grade Dispute: 35% 8 comments

  58. Best Method to Secure Stored Credit Card Data Against Breaches?

    S-grade Dispute: 35% 9 comments

  59. Which Attack Exploits Weak Cryptographic Algorithms?

    S-grade Dispute: 35% 10 comments

  60. Which Cryptographic Method Best Secures Limited-Resource Communications?

    S-grade Dispute: 35% 6 comments

  61. What Type of Security Control Is an Acceptable Use Policy (AUP)?

    S-grade Dispute: 34% 18 comments

  62. Which Solution Mitigates Sensitive Data Exfiltration Risk?

    S-grade Dispute: 33% 7 comments

  63. BCP vs DRP for Immediate Post-Disaster Response

    S-grade Dispute: 33% 21 comments

  64. Data Ownership vs Stewardship in Security Roles

    S-grade Dispute: 33% 17 comments

  65. Best Resource for Common Application Exploitation Methods

    S-grade Dispute: 33% 5 comments

  66. What Operational Risk Is Associated With Conducting a Vulnerability Assessment?

    S-grade Dispute: 33% 12 comments

  67. What Is the First Step for Privacy Regulation Compliance?

    S-grade Dispute: 33% 8 comments

  68. What Must Be Considered When Designing a High-Availability Network?

    S-grade Dispute: 33% 23 comments

  69. Which Document Identifies IaaS Security Controls in a CSP Contract?

    S-grade Dispute: 33% 6 comments

  70. What Should Be Included in an Improved Password Authentication Policy?

    S-grade Dispute: 33% 9 comments

  71. Which Solution Improves Availability with Minimal Effort?

    A-grade Dispute: 33% 4 comments

  72. How to reduce employees visiting deceptive credential-harvesting sites?

    A-grade Dispute: 33% 3 comments

  73. How to confirm a software application is no longer in scope for external reporting?

    A-grade Dispute: 33% 4 comments

  74. How Do You Limit Breach Impact on a Log-in Database?

    S-grade Dispute: 32% 21 comments

  75. Which Protocol Validates a Digital Certificate Upon Presentation?

    S-grade Dispute: 32% 14 comments

  76. How to Prevent Malicious Email Attachments?

    A-grade Dispute: 31% 4 comments

  77. How to Conceal Credit Card Data in Database Logs?

    S-grade Dispute: 30% 10 comments

  78. Which Architecture Model Offers the Highest Level of Security?

    S-grade Dispute: 30% 6 comments

  79. How Should You Treat Risk When a Critical System Loses Vendor Support?

    S-grade Dispute: 30% 6 comments

  80. What Is the Main Security Concern With Low-Cost IoT Devices?

    A-grade Dispute: 30% 4 comments

  81. Which Technique Adds a Random String to a Password?

    S-grade Dispute: 29% 7 comments

  82. Which Architecture Best Ensures Redundancy for Critical Business Processes?

    S-grade Dispute: 29% 5 comments

  83. What Requirement Describes Maintaining Backups After Device Destruction?

    S-grade Dispute: 29% 6 comments

  84. Which Attack Modifies DNS Records to Redirect Services Externally?

    S-grade Dispute: 29% 5 comments

  85. Preventing Firewall ACL Changes from Breaking Production

    S-grade Dispute: 29% 23 comments

  86. How to Securely Access Segmented Internal Servers Under Compliance Requirements?

    S-grade Dispute: 29% 5 comments

  87. What is the definition of log correlation?

    A-grade Dispute: 29% 4 comments

  88. Which Threat Actor Would a Foreign Government Hire?

    S-grade Dispute: 28% 21 comments

  89. Best Way to Test Resiliency During Primary Power Failure?

    S-grade Dispute: 27% 9 comments

  90. How to Improve Security Posture After Employees Click Phishing Links?

    S-grade Dispute: 27% 5 comments

  91. When are Roles and Responsibilities Reviewed in Incident Response?

    S-grade Dispute: 26% 10 comments

  92. Most Important Consideration for Health Emergency Reporting App?

    S-grade Dispute: 25% 5 comments

  93. How to Detect Software Tampering After Final Version?

    A-grade Dispute: 25% 4 comments

  94. What should an analyst do first after discovering a SQL injection in query.php?

    A-grade Dispute: 25% 4 comments

  95. Which Control Best Blocks Externally Crafted Malicious Packets?

    A-grade Dispute: 25% 3 comments

  96. Identifying OSINT Usage in Security Activities

    A-grade Dispute: 25% 3 comments

  97. Why implement corrective controls on a financial system?

    A-grade Dispute: 25% 3 comments

  98. Which Backup Data Center Site Best Balances Cost and a Two-Day RTO/RPO?

    S-grade Dispute: 24% 29 comments

  99. Which Defensive Technique Lures and Detects Malicious Insiders?

    S-grade Dispute: 23% 7 comments

  100. How to Mitigate Counterfeit Hardware Risks During Procurement?

    A-grade Dispute: 22% 18 comments

  101. Protecting Internet-Facing Websites from Buffer Overflow Attacks

    S-grade Dispute: 22% 12 comments

  102. Best Ways to Ensure Only Authorized Personnel Access a Secure Facility?

    S-grade Dispute: 20% 5 comments

  103. Identifying Memory Injection via Abnormal Outbound Traffic

    S-grade Dispute: 20% 7 comments

  104. Most Cost-Effective Way to Prevent Client Data Theft from Decommissioned Laptops?

    A-grade Dispute: 20% 4 comments

  105. What Should Security Teams Do Before Guest Devices Access Corporate Resources?

    A-grade Dispute: 20% 4 comments

  106. What does multiple badge entries in two minutes indicate?

    A-grade Dispute: 20% 3 comments

  107. Which Logs Identify a Host Impacted by a Command-and-Control Server?

    S-grade Dispute: 19% 10 comments

  108. How to Protect Business Applications from Data Exfiltration Attacks?

    S-grade Dispute: 19% 5 comments

  109. Which incident response activity identifies the source of an incident during an investigation?

    S-grade Dispute: 19% 13 comments

  110. Cryptography Considerations for IoT Devices

    S-grade Dispute: 18% 6 comments

  111. What Vulnerability Does a Script Tag in Web Logs Indicate?

    S-grade Dispute: 18% 6 comments

  112. How to Reduce Impact When Users Click Phishing Links?

    S-grade Dispute: 18% 22 comments

  113. How Do You Stop a Visitor Laptop From Using a Lobby Jack?

    S-grade Dispute: 17% 5 comments

  114. Data Privacy Program: Controller vs Processor Role

    S-grade Dispute: 17% 7 comments

  115. Identifying Phishing via Hovering Links

    S-grade Dispute: 17% 7 comments

  116. SIEM Investigation: Executable Analysis Log Source

    S-grade Dispute: 17% 8 comments

  117. How to Secure Legacy Systems Using Unencrypted Protocols?

    S-grade Dispute: 17% 5 comments

  118. Which Risk Management Step Establishes Scope and Identifies Potential Risks?

    S-grade Dispute: 17% 6 comments

  119. What Must Cloud Providers Prioritize When Expanding Internationally?

    S-grade Dispute: 17% 10 comments

  120. How to Prevent Fraudulent Wire Transfers via Business Email Compromise?

    S-grade Dispute: 17% 6 comments

  121. Best Concept for Protecting Intellectual Property in Training?

    A-grade Dispute: 17% 3 comments

  122. Best Way to Validate Disaster Recovery Site Integrity and Availability

    A-grade Dispute: 17% 4 comments

  123. Which Control Type Counts Daily Building Access?

    A-grade Dispute: 17% 3 comments

  124. Which Attack Vector Caused the Resume-Based Ransomware Infection?

    A-grade Dispute: 17% 4 comments

  125. Who Secures a Database in IaaS Under Shared Responsibility?

    A-grade Dispute: 17% 9 comments

  126. Was the CFO Impersonation Call Social Engineering or Whaling?

    S-grade Dispute: 16% 22 comments

  127. Symmetric Encryption: Same Key Used to Encrypt and Decrypt?

    S-grade Dispute: 15% 7 comments

  128. Identifying Shadow IT in Enterprise Scenarios

    S-grade Dispute: 15% 6 comments

  129. Which Mobile Deployment Model Best Meets Company-Owned, Hardened, Secure Device Requirements?

    S-grade Dispute: 15% 7 comments

  130. Which Social Engineering Techniques Are Used in a Payroll Text Message?

    S-grade Dispute: 14% 21 comments

  131. What Should Be Done First When Deploying a DLP Solution?

    S-grade Dispute: 14% 10 comments

  132. Cyber Insurance Risk Management Strategy

    S-grade Dispute: 14% 6 comments

  133. Wildcard Certificates for Multi-Subdomain Cost Efficiency

    S-grade Dispute: 14% 6 comments

  134. How to Reduce Employee Credentials Across Multiple SaaS Apps?

    S-grade Dispute: 14% 6 comments

  135. Which Risk Management Activity Addresses Generator Fault Impact During Failover?

    S-grade Dispute: 14% 5 comments

  136. What is a preventive physical security control?

    A-grade Dispute: 14% 4 comments

  137. Which Testing Team Blends Offensive and Defensive Work With Developers?

    A-grade Dispute: 14% 4 comments

  138. Authorization vs Authentication in Network Access Control

    A-grade Dispute: 14% 4 comments

  139. Security Camera Deployment: Why Configure the Correct VLAN?

    S-grade Dispute: 13% 13 comments

  140. Which activities are associated with vulnerability management?

    S-grade Dispute: 13% 9 comments

  141. How to Prevent Brute-Force Attacks on Web Servers?

    S-grade Dispute: 13% 8 comments

  142. Salting for One-Way Hash Complexity | SY0-701

    S-grade Dispute: 12% 18 comments

  143. Justifying Compliance Budget via Direct Consequences

    S-grade Dispute: 12% 7 comments

  144. Bastion Host for Secure Administrative Access

    S-grade Dispute: 12% 9 comments

  145. Mitigating Malformed Input Attacks in Web Products

    S-grade Dispute: 12% 7 comments

  146. How should unused, non-compliant desktops be handled on a network?

    A-grade Dispute: 12% 3 comments

  147. Which Data Type Should Have Reduced Retention for Investigations?

    A-grade Dispute: 12% 3 comments

  148. Which Attack Intercepts and Reuses Login Credentials?

    A-grade Dispute: 12% 4 comments

  149. Securing Credit Card Data: Masking vs Tokenization

    S-grade Dispute: 11% 8 comments

  150. How Should Safety and Logical Controls Be Configured During System Failures?

    S-grade Dispute: 11% 7 comments

  151. What data type do R&D employees handle?

    A-grade Dispute: 11% 3 comments

  152. What are the consequences of PCI DSS non-compliance from customers?

    A-grade Dispute: 11% 3 comments

  153. What method is used for credential harvesting?

    A-grade Dispute: 11% 3 comments

  154. Best Mitigations for JavaScript Injection on Web Servers?

    A-grade Dispute: 11% 4 comments

  155. Bank-Impersonation Wire Transfer Request: Which Attack Is It?

    A-grade Dispute: 11% 4 comments

  156. Which Log Source Reveals Executable Activity on a Corporate Laptop?

    A-grade Dispute: 11% 11 comments

  157. Who Secures the Database in an IaaS Shared Responsibility Model?

    S-grade Dispute: 10% 7 comments

  158. Which team performs offensive security assessments like penetration testing?

    S-grade Dispute: 10% 7 comments

  159. How to Consistently Monitor Daily Server Security Setting Changes?

    S-grade Dispute: 10% 6 comments

  160. Identifying Data Roles: Who is the Data Subject?

    S-grade Dispute: 10% 14 comments

  161. Which threat actor is most likely to deface a website?

    A-grade Dispute: 10% 4 comments

  162. How Is Sensitive Data at Rest Made Unreadable?

    S-grade Dispute: 9% 5 comments

  163. Phishing vs Brand Impersonation: Email Credential Theft

    S-grade Dispute: 9% 17 comments

  164. How Does Patching Switch OS, Servers, and Endpoint Definitions Prevent Attacks?

    A-grade Dispute: 9% 4 comments

  165. Best Responses to a CEO Impersonation Smishing Attack?

    S-grade Dispute: 8% 14 comments

  166. Acceptable Use Policy Security Control Type

    S-grade Dispute: 8% 12 comments

  167. What Must Be Updated After a Stolen Website Private Key?

    S-grade Dispute: 8% 6 comments

  168. How Does Message Attribution Work in Security Controls?

    S-grade Dispute: 8% 11 comments

  169. Which Security Concept Applies to Legacy Host-Based Firewalls?

    S-grade Dispute: 8% 11 comments

  170. Which Control Attributes Messages to Individuals? Non-Repudiation

    A-grade Dispute: 8% 17 comments

  171. Segmentation vs Isolation for Customer Data

    S-grade Dispute: 7% 10 comments

  172. Which physical controls can both detect and deter?

    A-grade Dispute: 7% 4 comments

  173. Identifying Impersonation vs Whaling in Social Engineering

    S-grade Dispute: 6% 8 comments

  174. Jailbreaking vs. Side Loading for Smartphone Features

    S-grade Dispute: 6% 8 comments

  175. How to Restrict Outbound DNS Traffic to a Single Host Using Firewall ACLs?

    S-grade Dispute: 6% 27 comments

  176. How Does Geographic Dispersion Mitigate Weather-Related Server Room Risks?

    S-grade Dispute: 6% 7 comments

  177. What best mitigates a legacy IoT OS vulnerability quickly?

    S-grade Dispute: 5% 12 comments

  178. Compensating Controls for a Legacy System?

    S-grade Dispute: 4% 11 comments

  179. What Defines the Terms of a Third-Party Penetration Test?

    S-grade Dispute: 4% 9 comments

  180. Which Plan Manages the Restore Process After System Failure?

    S-grade Dispute: 4% 11 comments

  181. Which incident response activity ensures proper evidence handling?

    S-grade Dispute: 4% 11 comments

  182. Jump Server for Securing Internal Resources

    S-grade Dispute: 3% 12 comments

  183. Which Document Outlines Project Scope, Cost, and Timeline?

    S-grade Dispute: 3% 6 comments

  184. Which security solution monitors and blocks known signature-based attacks?

    S-grade Dispute: 3% 14 comments

  185. What Does a VPN Protect Between Headquarters and a Branch?

    A-grade Dispute: 0% 4 comments

  186. How Should a Security Consultant Securely Access a Client Environment Remotely?

    A-grade Dispute: 0% 4 comments

  187. Which Method Ensures Easy Cloud Resource Deployment?

    A-grade Dispute: 0% 4 comments

  188. Which Data Policy Governs Archiving Customer Transactions for Compliance?

    A-grade Dispute: 0% 4 comments

  189. Which Document Specifies Estimated Hours for a Vendor Engagement?

    A-grade Dispute: 0% 3 comments

  190. How to Prevent Insider Injection of Malicious Code?

    A-grade Dispute: 0% 4 comments

  191. What Mobile OS Modification Vulnerability Does an AUP Clause Prohibit?

    A-grade Dispute: 0% 6 comments

  192. How Do Air-Gapped Networks Typically Experience Data Loss?

    A-grade Dispute: 0% 3 comments

  193. What Type of Attack Occurs When Malware Spreads via a Compromised Industry Blog?

    A-grade Dispute: 0% 4 comments

  194. Which Architecture Reduces VPN Traffic and Monitors Remote Employee Internet Use?

    A-grade Dispute: 0% 5 comments

  195. What Type of Risk Assessment Is Performed Annually?

    A-grade Dispute: 0% 3 comments

  196. Identifying Detective Controls in Security Incident Response

    A-grade Dispute: 0% 4 comments

  197. How Does Off-Site Replication Minimize Downtime During Earthquakes?

    A-grade Dispute: 0% 4 comments

  198. How to quickly restrict file server access after an audit?

    A-grade Dispute: 0% 3 comments

  199. Which Document Defines Hosted Service Uptime Requirements?

    A-grade Dispute: 0% 5 comments

  200. What documentation to request when disposing of classified storage?

    A-grade Dispute: 0% 3 comments

  201. Disaster Recovery: Geographic Dispersion for Natural Disasters

    A-grade Dispute: 0% 4 comments

  202. Identifying File Creator and Creation Date

    A-grade Dispute: 0% 3 comments

  203. Which Cybersecurity Team Combines Offensive and Defensive Testing?

    A-grade Dispute: 0% 4 comments

  204. Security Implications of End-of-Life Operating Systems

    A-grade Dispute: 0% 4 comments

  205. Which data protection strategy prevents loss on stolen laptops?

    A-grade Dispute: 0% 3 comments

  206. Identifying DNS Amplification and Reflected DoS Attacks

    A-grade Dispute: 0% 4 comments

  207. Implementing Role-Based Access Control for Site Recovery

    A-grade Dispute: 0% 4 comments

  208. Active vs Passive Reconnaissance in Penetration Testing

    A-grade Dispute: 0% 7 comments

  209. Access Management: Federation and Password Complexity

    A-grade Dispute: 0% 6 comments

  210. Implementing Multifactor Authentication for VPN

    A-grade Dispute: 0% 4 comments

  211. What Is the First Risk Management Strategy for a Critical Legacy Application?

    A-grade Dispute: 0% 4 comments

  212. Best Way to Secure an On-Site Data Center Against Insider Intrusion?

    A-grade Dispute: 0% 4 comments

  213. Why Can't the Engineer Access New Team's Shared Folders?

    A-grade Dispute: 0% 3 comments

  214. What Factors Are Most Important for a Security Awareness Training Curriculum?

    A-grade Dispute: 0% 8 comments

  215. Which Security Requirement Does a Load Balancer Fulfill?

    A-grade Dispute: 0% 3 comments

  216. Which OS Security Measure Quickly Implements Password Policy Updates?

    A-grade Dispute: 0% 3 comments

  217. Which metric compares long-term risk transfer cost to risk impact?

    A-grade Dispute: 0% 4 comments

  218. Which vulnerability is associated with installing software outside the manufacturer's approved repository?

    S-grade Dispute: 0% 5 comments

  219. Which Type of Penetration Test Involves Using an Access Badge?

    A-grade Dispute: 0% 4 comments

  220. Which Change Management Document Ensures System Restoration After a Failed Deployment?

    A-grade Dispute: 0% 3 comments

  221. Which architecture reduces the number of physical servers?

    A-grade Dispute: 0% 6 comments

  222. Which Security Control Prevents Modification of Sensitive PII Data?

    A-grade Dispute: 0% 3 comments

  223. How to Allow a Retail Website Blocked as Gambling by Content Filter?

    S-grade Dispute: 0% 4 comments

  224. Which Attack Uses the Same Password Across Multiple Accounts?

    A-grade Dispute: 0% 9 comments

  225. What Most Impacts an Administrator's Ability to Address CVEs on a Server?

    A-grade Dispute: 0% 3 comments

  226. What Describes Effective Change Management Procedures?

    A-grade Dispute: 0% 3 comments

  227. Which security device blocks HTTP exfiltration over port 53?

    A-grade Dispute: 0% 5 comments

  228. Which solution encrypts all traffic between two internal networks?

    A-grade Dispute: 0% 3 comments

  229. Which Tool Alerts on Emailing Fingerprinted Files Outside the Organization?

    A-grade Dispute: 0% 4 comments

  230. Which Method Verifies Downloaded File Integrity?

    A-grade Dispute: 0% 3 comments

  231. Which infection type displays a message and .ryk file extension?

    A-grade Dispute: 0% 3 comments

  232. What Attack Is Indicated by Multiple Simultaneous SYN Requests on Port 443?

    A-grade Dispute: 0% 4 comments

  233. Which IPS Mode Blocks Signature-Based Attacks?

    A-grade Dispute: 0% 3 comments

  234. How Does EDR Protect Endpoints from Malware and Lateral Movement?

    A-grade Dispute: 0% 3 comments

  235. What Best Describes Researching Security Laws and Regulations?

    A-grade Dispute: 0% 3 comments

  236. Investigating Endpoint Log Deletion for C2 Communication

    A-grade Dispute: 0% 4 comments

  237. How to Verify Software Origin and Publisher Identity?

    A-grade Dispute: 0% 3 comments

  238. How to Block Non-Encrypted Websites via Web Filter String Matching?

    S-grade Dispute: 0% 8 comments

  239. Why Run Daily Vulnerability Scans on Corporate Endpoints?

    A-grade Dispute: 0% 3 comments

  240. Which Cloud Component Provides High Availability?

    A-grade Dispute: 0% 3 comments

  241. Which Security Control Is Mandatory for Cloud IoT Management?

    A-grade Dispute: 0% 3 comments

  242. Which Record Tracks Systems Needing Software Patches?

    A-grade Dispute: 0% 3 comments

  243. How should an inbound firewall rule block a malicious IP address?

    S-grade Dispute: 0% 5 comments

  244. Which Should a SOC Use to Improve Incident Response Procedure?

    A-grade Dispute: 0% 3 comments

  245. Which agreement type defines vendor response timeframes?

    A-grade Dispute: 0% 3 comments

  246. What Is a Feature of a Next-Generation SIEM System?

    A-grade Dispute: 0% 3 comments

  247. Which Attack Is Best Mitigated by Input Sanitization?

    A-grade Dispute: 0% 5 comments

  248. Which Method Most Likely Identifies Legacy Systems?

    A-grade Dispute: 0% 3 comments

  249. Which Security Control Best Protects Uploaded PDF Files?

    A-grade Dispute: 0% 4 comments

  250. Why should team members understand an automated script?

    A-grade Dispute: 0% 5 comments

  251. What Server Hardening Steps Should an Administrator Take Before Deployment?

    A-grade Dispute: 0% 3 comments

  252. How to Conduct Frequent Compliance Reviews?

    A-grade Dispute: 0% 3 comments

  253. Which Security Concept Is Accomplished by a RADIUS Server?

    A-grade Dispute: 0% 5 comments

  254. How Should HR Track Contract Revisions?

    A-grade Dispute: 0% 4 comments

  255. Which DR Site Option Minimizes Cost and Infrastructure?

    A-grade Dispute: 0% 3 comments

  256. What Should an Administrator Do When Employees Encounter Spoofed Websites?

    A-grade Dispute: 0% 3 comments

  257. How to Secure Remote Logins While Minimizing Hardware Costs?

    A-grade Dispute: 0% 3 comments

  258. Which protocol should be configured to extend SSO to a new cloud-based accounting application?

    A-grade Dispute: 0% 3 comments

  259. Which Attack Intercepts Data on Public Wi-Fi?

    A-grade Dispute: 0% 4 comments

  260. What should a security analyst do when SIEM alerts are not configured for a new threat?

    S-grade Dispute: 0% 6 comments

  261. Which controls apply to VLAN segmentation of an end-of-life server?

    A-grade Dispute: 0% 4 comments

  262. What Is the Risk Remaining After Controls and Mitigating Factors Are Applied?

    A-grade Dispute: 0% 4 comments

  263. Which factor is a possible MFA authentication factor?

    A-grade Dispute: 0% 8 comments

  264. How Should Password Policy Be Strengthened After an Account Compromise?

    A-grade Dispute: 0% 6 comments

  265. What Is the Purpose of a DNS Sinkhole?

    A-grade Dispute: 0% 3 comments

  266. What type of information contains geolocation coordinates in image files?

    A-grade Dispute: 0% 3 comments

  267. Why Configure S/MIME Digital Signatures for Outbound Emails?

    A-grade Dispute: 0% 3 comments

  268. Which method requires a receipt number for Wi-Fi access?

    A-grade Dispute: 0% 3 comments

  269. Which report best proves security controls over six months?

    A-grade Dispute: 0% 3 comments

  270. What Causes Server Outage When Servers Are Online but Unresponsive?

    A-grade Dispute: 0% 4 comments

  271. Which Encryption Technique Should Be Used to Protect Laptop Data?

    A-grade Dispute: 0% 4 comments

  272. Which solution protects laptop data if the device is stolen?

    A-grade Dispute: 0% 3 comments

  273. What type of vulnerability scan is performed without a system account?

    A-grade Dispute: 0% 3 comments

  274. Which Regulation Covers Individual Data Rights Like Access and Erasure?

    A-grade Dispute: 0% 3 comments

  275. Why Is Telnet Credential Theft Most Likely via Packet Capture?

    A-grade Dispute: 0% 3 comments

  276. Which Tool Identifies Insecure Ports and Legacy Protocols?

    A-grade Dispute: 0% 4 comments

  277. Which technique was used to exfiltrate data via IPv6-in-IPv4 traffic?

    A-grade Dispute: 0% 3 comments

  278. Which Technology Reduces Code Deployment Time and Cost?

    A-grade Dispute: 0% 3 comments

  279. Which Technology Uses RTP, SIP, H.323, and SRTP Protocols?

    A-grade Dispute: 0% 3 comments

  280. Which Security Technique Limits Admin Console Access to Specific Staff?

    A-grade Dispute: 0% 4 comments

  281. What solution secures external consultant access without sharing passwords?

    A-grade Dispute: 0% 3 comments

  282. Which solution should a security team use to address legal concerns for guest wireless users?

    A-grade Dispute: 0% 3 comments

  283. What Is the Most Critical Risk of Running End-of-Life Software?

    A-grade Dispute: 0% 3 comments

  284. Which tool documents risks, responsible parties, and thresholds?

    A-grade Dispute: 0% 6 comments

  285. Which attack used Mimikatz and an NTLM hash to access hardened PC?

    A-grade Dispute: 0% 3 comments

  286. What does a DNS AXFR zone transfer in logs indicate?

    A-grade Dispute: 0% 3 comments

  287. Which procedure should be followed when setting up new firewall rules?

    A-grade Dispute: 0% 6 comments

  288. Which authentication method works across SaaS, internal apps, offline?

    A-grade Dispute: 0% 4 comments

  289. What Type of Vulnerability Involves a Malicious Software Update?

    A-grade Dispute: 0% 4 comments

  290. What Caused Outbound Traffic from a Web Server with Image Uploads?

    A-grade Dispute: 0% 4 comments

  291. What Process Involves Requesting a SOC 2 Report from a SaaS Vendor?

    A-grade Dispute: 0% 4 comments

  292. Which Program Compensates Security Researchers for Vulnerabilities?

    A-grade Dispute: 0% 5 comments

  293. What Security Device Protects a New Web Portal Service?

    A-grade Dispute: 0% 3 comments

  294. Which protocol protects data in transit?

    A-grade Dispute: 0% 4 comments

  295. What Is a Common Passive Reconnaissance Technique Used by Pen Testers?

    A-grade Dispute: 0% 4 comments

  296. Which threat actor most likely uses ransomware for financial gain?

    A-grade Dispute: 0% 3 comments

  297. Which Threat Actor Uses Large Financial Resources to Attack Foreign Critical Systems?

    A-grade Dispute: 0% 4 comments

  298. What procedure should be followed during router firmware upgrades?

    A-grade Dispute: 0% 3 comments

  299. What is a benefit of vendor diversity?

    A-grade Dispute: 0% 4 comments

  300. What enables input fields to execute data manipulation commands?

    A-grade Dispute: 0% 4 comments

  301. Best Method to Reduce OS Patching Overhead

    A-grade Dispute: 0% 3 comments

  302. Which Task is Included in the BIA Process?

    A-grade Dispute: 0% 3 comments

  303. How to Sustain Data Centers During Multiday Power Outages?

    A-grade Dispute: 0% 4 comments

  304. Which Security Controls Do Cameras and Warning Signs Represent?

    A-grade Dispute: 0% 4 comments

  305. Why use a vendor hash for an installer file?

    A-grade Dispute: 0% 3 comments

  306. How to detect employees accessing unrelated sensitive data?

    A-grade Dispute: 0% 3 comments

  307. How to Detect Unauthorized Credential Guessing Attempts?

    A-grade Dispute: 0% 3 comments

  308. How to Best Mitigate Command Injection via User-Agent Headers?

    A-grade Dispute: 0% 3 comments

  309. Best method to improve user awareness during office transition

    A-grade Dispute: 0% 6 comments

  310. Which Protocol Handles Token-Based App Authorization?

    A-grade Dispute: 0% 4 comments

  311. Best method to present quarterly incident reports to the board of directors

    A-grade Dispute: 0% 6 comments

  312. What Protects Against Insecure Device Communications?

    A-grade Dispute: 0% 3 comments

  313. Which Role Implements Data Retention Standards?

    A-grade Dispute: 0% 3 comments

  314. What does a changed cmd.exe hash indicate?

    A-grade Dispute: 0% 4 comments

  315. Best Way to Secure a Shared Backup Account?

    A-grade Dispute: 0% 5 comments

  316. Which technique prevents cross-site scripting in web forms?

    A-grade Dispute: 0% 3 comments

  317. Which attack compromises a system running an RTOS?

    A-grade Dispute: 0% 3 comments

  318. What Is the ALE for a $15,000 Loss Occurring Twice in Three Years?

    A-grade Dispute: 0% 3 comments

  319. First Step Before Patching a Production System?

    A-grade Dispute: 0% 6 comments

  320. Why Should Root Cause Analysis Be Part of Incident Response?

    A-grade Dispute: 0% 6 comments

  321. Which Metric Measures How Quickly Systems Must Be Restored After an Attack?

    A-grade Dispute: 0% 3 comments

  322. Which BCP Step Determines Staff Needed During a Disruption?

    A-grade Dispute: 0% 4 comments

  323. How to Limit SaaS Document Access by High-Risk Country?

    A-grade Dispute: 0% 5 comments

  324. What Is a Hardware-Specific Vulnerability in SY0-701?

    A-grade Dispute: 0% 3 comments

  325. Automating Account Permissions Updates

    A-grade Dispute: 0% 3 comments

  326. Reducing SaaS Credentials with Domain Authentication

    A-grade Dispute: 0% 14 comments

  327. Tuning File Permissions with Access Control Lists

    A-grade Dispute: 0% 3 comments

  328. Data Sanitization for Decommissioned Hard Drives

    A-grade Dispute: 0% 5 comments

  329. How do you prove developers are trained on secure coding?

    S-grade Dispute: 0% 6 comments

  330. Data Classification for Patient Health Information

    A-grade Dispute: 0% 5 comments

  331. How to Track Modifications to Code for Virtual Server Builds?

    A-grade Dispute: 0% 3 comments

  332. How to best block unknown programs from executing?

    A-grade Dispute: 0% 3 comments

  333. How to ensure the authenticity of company-developed code?

    A-grade Dispute: 0% 5 comments

  334. How can potential attacker activities be identified without affecting production servers?

    A-grade Dispute: 0% 4 comments

  335. What should be done after remediating vulnerabilities in a network?

    A-grade Dispute: 0% 7 comments

  336. Which tool detects accidental PII disclosure via email?

    A-grade Dispute: 0% 4 comments

  337. What type of control is a SIEM system with weekly log reviews?

    A-grade Dispute: 0% 3 comments

  338. Which cloud-based solution provides low-cost application hosting?

    A-grade Dispute: 0% 3 comments

  339. How can a database administrator access restricted database servers?

    A-grade Dispute: 0% 11 comments

  340. How do you ignore detected activity in the future?

    A-grade Dispute: 0% 5 comments

  341. What is the primary security concern for a BYOD program?

    A-grade Dispute: 0% 4 comments

  342. Which analysis element justifies removing ransomware coverage to reduce insurance costs?

    A-grade Dispute: 0% 5 comments

  343. What is included in a security awareness program's communication element?

    A-grade Dispute: 0% 4 comments

  344. Which technology tracks changes to secure data integrity?

    A-grade Dispute: 0% 5 comments

  345. What must be considered when planning Full Disk Encryption for laptops?

    A-grade Dispute: 0% 9 comments

  346. How to Secure a Publicly Exposed Remote Desktop Host?

    A-grade Dispute: 0% 5 comments

  347. Which Technology Best Suits Constantly Changing Environments?

    A-grade Dispute: 0% 6 comments

  348. What Is the Best Use Case for Automated User Account Creation Scripts?

    A-grade Dispute: 0% 4 comments

  349. How to Prevent Unauthorized Logins When Passwords Are Compromised?

    A-grade Dispute: 0% 10 comments

  350. What Defines the Maximum Allowable Accepted Risk?

    A-grade Dispute: 0% 3 comments

  351. What Does Unusual High-Volume Outbound DNS Traffic Indicate?

    A-grade Dispute: 0% 5 comments

  352. Which Security Model Provides Secure Zones and Reduces Threat Scope?

    A-grade Dispute: 0% 4 comments

  353. Which Attack Exploits Database Misconfigurations and Unsanitized Input?

    A-grade Dispute: 0% 4 comments

  354. Which Vulnerability Type Does a BIOS Update Address?

    A-grade Dispute: 0% 3 comments

  355. How Do You Quantitatively Measure Vulnerability Criticality?

    A-grade Dispute: 0% 7 comments

  356. How to Monitor Workstations and Servers for Unauthorized Changes?

    A-grade Dispute: 0% 5 comments

  357. Which Threat Actor Would a Foreign Government Hire?

    A-grade Dispute: 0% 41 comments

  358. What Adds Complexity Before One-Way Hashing? Salting vs Key Stretching

    A-grade Dispute: 0% 13 comments

  359. Identifying Business Email Compromise Scenarios

    S-grade Dispute: 0% 114 comments

  360. Zero Trust Data Plane vs Control Plane Components

    S-grade Dispute: 0% 88 comments

  361. PCI DSS Internal Assessment Outcomes: Audit Findings vs Fines

    S-grade Dispute: 0% 50 comments

  362. Validating a Telnet Cleartext Finding as a False Positive

    S-grade Dispute: 0% 51 comments

  363. Reissuing Laptops: Sanitization and Certification

    S-grade Dispute: 0% 55 comments

  364. Hot Site for Immediate Hurricane Disaster Recovery

    A-grade Dispute: 0% 4 comments

  365. Wildcard vs Self-Signed Certificates for Many Domains

    A-grade Dispute: 0% 13 comments

  366. PKI Cleanup: Update CRL vs Patch the CA

    A-grade Dispute: 0% 27 comments

  367. Data Owner: Identifying Risks and Appropriate Access

    A-grade Dispute: 0% 21 comments

  368. Which Topic Belongs in an Organization's SDLC?

    A-grade Dispute: 0% 31 comments

  369. Testing Power-Failure Resiliency with Production Failover

    A-grade Dispute: 0% 11 comments

  370. Weak Cryptographic Algorithms and Password Cracking

    A-grade Dispute: 0% 13 comments

  371. DLP and DNS Filtering Secure Email and Web Access

    A-grade Dispute: 0% 2 comments

  372. ECC vs Symmetric Encryption for Resource-Constrained Communications

    A-grade Dispute: 0% 20 comments

  373. Memory Injection: The Fileless Exploit That Evades OS Detection

    A-grade Dispute: 0% 16 comments

  374. Preventing Insider Record Tampering With Permission Restrictions

    A-grade Dispute: 0% 5 comments

  375. MITRE ATT&CK Technique for Redirecting Database Traffic

    A-grade Dispute: 0% 25 comments

  376. Vulnerability Prioritization: CVSS vs Exposure Factor

    A-grade Dispute: 0% 17 comments

  377. What Should Be Done First Before a Web Server Goes Live?

    A-grade Dispute: 0% 16 comments

  378. Low-Cost IoT in Infrastructure: Data Storage vs. Country of Origin

    A-grade Dispute: 0% 9 comments

  379. User Provisioning vs Security Groups for Automated Permission Updates

    A-grade Dispute: 0% 6 comments

  380. Keylogger Found in User File: First SOC Action?

    A-grade Dispute: 0% 19 comments

  381. Password Audit Remediation: Length and Complexity in Authentication Policy

    A-grade Dispute: 0% 13 comments

  382. Continuous Risk Treatment: Why an Email Gateway Mitigates Phishing

    A-grade Dispute: 0% 17 comments

  383. Confirming an Application Is Out of External Reporting Scope

    A-grade Dispute: 0% 10 comments

  384. New Server Hardening: The First Step

    A-grade Dispute: 0% 14 comments

  385. Printing Center Cyber Hygiene and Dumpster Diving

    A-grade Dispute: 0% 2 comments

← Back to SY0-701 CompTIA Security+ Study Guide