SY0-701 — Most Debated Topics

Community-voted ranking of 352 topics, sorted by disagreement level. Higher dispute = more test-takers disagree on the answer.

#1
CCTV and Surveillance Signs as Security Controls
S-Grade Dispute: 78% 6 comments
#2
When Should an Engineer Decommission a Network Device?
S-Grade Dispute: 75% 10 comments
#3
Which Controls Secure Remote Access to Sensitive PHI Applications?
S-Grade Dispute: 75% 7 comments
#4
Which Zero Trust Component Belongs to the Data Plane?
S-Grade Dispute: 62% 59 comments
#5
Which MITRE ATT&CK Technique Redirected Database Traffic?
S-Grade Dispute: 62% 18 comments
#6
What Risk Does Opening Firewall Ports for a SaaS System Introduce?
S-Grade Dispute: 62% 43 comments
#7
SDLC Inclusion: Branch Protection Requirements
S-Grade Dispute: 61% 20 comments
#8
How Should a Critical App on a Legacy Server Be Handled?
S-Grade Dispute: 56% 45 comments
#9
How Does Device Labeling and Employee ID Association Enhance Security?
S-Grade Dispute: 56% 33 comments
#10
Reissuing a Laptop: Which Data Handling Activities Apply?
S-Grade Dispute: 54% 32 comments
#11
Mitigating URL Shortener Phishing Campaigns
S-Grade Dispute: 54% 13 comments
#12
Vulnerability Scan False Positive Identification
S-Grade Dispute: 50% 9 comments
#13
How Can Organizations Prevent Data Loss from Lost Mobile Devices?
S-Grade Dispute: 50% 15 comments
#14
How to Block Unauthorized Devices Plugged into Phone Network Ports?
S-Grade Dispute: 50% 7 comments
#15
What is the First Step to Increase Security Awareness After Account Compromises?
S-Grade Dispute: 50% 5 comments
#16
Mobile Data Security: Containerization vs Remote Wipe
S-Grade Dispute: 49% 33 comments
#17
End of Support vs End of Life for a Legacy Device?
S-Grade Dispute: 48% 64 comments
#18
Securing Web App Port 443: Best Mitigations
S-Grade Dispute: 48% 15 comments
#19
Which Low-Cost Standby Site Includes Hardware and Internet?
S-Grade Dispute: 48% 12 comments
#20
What Scenario Best Describes a Business Email Compromise Attack?
S-Grade Dispute: 48% 55 comments
#21
How to Enforce Approved Applications on BYOD Devices?
S-Grade Dispute: 47% 6 comments
#22
Investigating a Date-Triggered Database Deletion Script
S-Grade Dispute: 46% 11 comments
#23
Which Attack Vector Uses Fake HR Onboarding Email Links?
S-Grade Dispute: 45% 17 comments
#24
Remediation for Exploited Internal PKI Flaw
S-Grade Dispute: 45% 19 comments
#25
What Vulnerability Type Stems from Improper Cryptographic Certificate Management?
S-Grade Dispute: 45% 5 comments
#26
What Must Be Done Before Mitigating Production Vulnerabilities?
A-Grade Dispute: 45% 4 comments
#27
Legacy Systems Security Concerns: Vendor Support vs Insecure Protocols
S-Grade Dispute: 44% 20 comments
#28
Identifying Tools by /etc/shadow Permission Denied Errors
S-Grade Dispute: 44% 20 comments
#29
Next Step After Identifying Design Issues in Annual Review
S-Grade Dispute: 44% 17 comments
#30
Why Is a Duplicate Corporate Email Site Considered Impersonation?
S-Grade Dispute: 44% 8 comments
#31
Which Deception Method Uses a Fake Credential Spreadsheet?
A-Grade Dispute: 44% 4 comments
#32
Is a Telnet Scan Finding a False Positive After Nmap Encryption Test?
S-Grade Dispute: 43% 36 comments
#33
Red Team vs Blue Team Vulnerability Exploitation
S-Grade Dispute: 43% 26 comments
#34
What Should a Security Team Do First Before Deploying a New Web Server?
S-Grade Dispute: 43% 9 comments
#35
Which Solution Provides the Lowest RTO and RPO for a Database?
S-Grade Dispute: 43% 7 comments
#36
What Constitutes a Treatment Strategy for Continuous Risk?
S-Grade Dispute: 43% 5 comments
#37
Which technique allows an exploit to bypass OS detection?
S-Grade Dispute: 42% 12 comments
#38
What Vulnerability Occurs When an Attacker Alters Data During a SQL Update?
S-Grade Dispute: 42% 9 comments
#39
What control type is segmenting a legacy server into a private network?
S-Grade Dispute: 41% 18 comments
#40
Which MFA Solution Meets Know/Are/Have Without Extra Costs?
S-Grade Dispute: 41% 12 comments
#41
What Explains Successful Password Logins Followed by Repeated MFA Failures?
S-Grade Dispute: 41% 25 comments
#42
What Would Have Prevented the VPN Appliance Admin Login?
S-Grade Dispute: 40% 18 comments
#43
Which Data Category Is Most Impacted When Lost?
S-Grade Dispute: 40% 11 comments
#44
What Are the Key Benefits of Microservices Over Monolithic Architecture?
A-Grade Dispute: 40% 3 comments
#45
Securing End-of-Life Systems with Network Isolation
S-Grade Dispute: 39% 8 comments
#46
Containerization vs Virtualization for OS Reduction
S-Grade Dispute: 39% 17 comments
#47
What is the Next Step After Confirming a Proprietary Data Breach?
S-Grade Dispute: 39% 7 comments
#48
Internal Audit vs External Examination for Regulatory Compliance
S-Grade Dispute: 37% 18 comments
#49
Supply Chain Illumination Tools for Full-Spectrum Analysis
S-Grade Dispute: 37% 20 comments
#50
What Is the Outcome of Failing an Internal PCI DSS Assessment?
S-Grade Dispute: 37% 36 comments
#51
SLA vs MOU for Service Deliverables and Timelines?
S-Grade Dispute: 36% 11 comments
#52
How Should Organizations Prioritize Vulnerabilities Most Effectively?
S-Grade Dispute: 36% 9 comments
#53
What Sensitive Information Should Be Scrubbed from Job Postings?
S-Grade Dispute: 36% 5 comments
#54
How to Decrease Hardware Attack Surface?
S-Grade Dispute: 36% 6 comments
#55
What Should a SOC Analyst Do First After Discovering Exposed Credentials?
S-Grade Dispute: 36% 8 comments
#56
Cloud Environment Security Best Practices
S-Grade Dispute: 35% 8 comments
#57
Best Method to Secure Stored Credit Card Data Against Breaches?
S-Grade Dispute: 35% 9 comments
#58
Which Attack Exploits Weak Cryptographic Algorithms?
S-Grade Dispute: 35% 10 comments
#59
Which Cryptographic Method Best Secures Limited-Resource Communications?
S-Grade Dispute: 35% 6 comments
#60
What Type of Security Control Is an Acceptable Use Policy (AUP)?
S-Grade Dispute: 34% 18 comments
#61
Which Solution Mitigates Sensitive Data Exfiltration Risk?
S-Grade Dispute: 33% 7 comments
#62
BCP vs DRP for Immediate Post-Disaster Response
S-Grade Dispute: 33% 21 comments
#63
Data Ownership vs Stewardship in Security Roles
S-Grade Dispute: 33% 17 comments
#64
Best Resource for Common Application Exploitation Methods
S-Grade Dispute: 33% 5 comments
#65
What Operational Risk Is Associated With Conducting a Vulnerability Assessment?
S-Grade Dispute: 33% 12 comments
#66
What Is the First Step for Privacy Regulation Compliance?
S-Grade Dispute: 33% 8 comments
#67
What Must Be Considered When Designing a High-Availability Network?
S-Grade Dispute: 33% 23 comments
#68
Which Document Identifies IaaS Security Controls in a CSP Contract?
S-Grade Dispute: 33% 6 comments
#69
What Should Be Included in an Improved Password Authentication Policy?
S-Grade Dispute: 33% 9 comments
#70
Which Solution Improves Availability with Minimal Effort?
A-Grade Dispute: 33% 4 comments
#71
How to reduce employees visiting deceptive credential-harvesting sites?
A-Grade Dispute: 33% 3 comments
#72
How to confirm a software application is no longer in scope for external reporting?
A-Grade Dispute: 33% 4 comments
#73
How Do You Limit Breach Impact on a Log-in Database?
S-Grade Dispute: 32% 21 comments
#74
Which Protocol Validates a Digital Certificate Upon Presentation?
S-Grade Dispute: 32% 14 comments
#75
How to Prevent Malicious Email Attachments?
A-Grade Dispute: 31% 4 comments
#76
How to Conceal Credit Card Data in Database Logs?
S-Grade Dispute: 30% 10 comments
#77
Which Architecture Model Offers the Highest Level of Security?
S-Grade Dispute: 30% 6 comments
#78
How Should You Treat Risk When a Critical System Loses Vendor Support?
S-Grade Dispute: 30% 6 comments
#79
What Is the Main Security Concern With Low-Cost IoT Devices?
A-Grade Dispute: 30% 4 comments
#80
Which Technique Adds a Random String to a Password?
S-Grade Dispute: 29% 7 comments
#81
Which Architecture Best Ensures Redundancy for Critical Business Processes?
S-Grade Dispute: 29% 5 comments
#82
What Requirement Describes Maintaining Backups After Device Destruction?
S-Grade Dispute: 29% 6 comments
#83
Which Attack Modifies DNS Records to Redirect Services Externally?
S-Grade Dispute: 29% 5 comments
#84
Preventing Firewall ACL Changes from Breaking Production
S-Grade Dispute: 29% 23 comments
#85
How to Securely Access Segmented Internal Servers Under Compliance Requirements?
S-Grade Dispute: 29% 5 comments
#86
What is the definition of log correlation?
A-Grade Dispute: 29% 4 comments
#87
Which Threat Actor Would a Foreign Government Hire?
S-Grade Dispute: 28% 21 comments
#88
Best Way to Test Resiliency During Primary Power Failure?
S-Grade Dispute: 27% 9 comments
#89
How to Improve Security Posture After Employees Click Phishing Links?
S-Grade Dispute: 27% 5 comments
#90
When are Roles and Responsibilities Reviewed in Incident Response?
S-Grade Dispute: 26% 10 comments
#91
Most Important Consideration for Health Emergency Reporting App?
S-Grade Dispute: 25% 5 comments
#92
How to Detect Software Tampering After Final Version?
A-Grade Dispute: 25% 4 comments
#93
What should an analyst do first after discovering a SQL injection in query.php?
A-Grade Dispute: 25% 4 comments
#94
Which Control Best Blocks Externally Crafted Malicious Packets?
A-Grade Dispute: 25% 3 comments
#95
Identifying OSINT Usage in Security Activities
A-Grade Dispute: 25% 3 comments
#96
Why implement corrective controls on a financial system?
A-Grade Dispute: 25% 3 comments
#97
Which Backup Data Center Site Best Balances Cost and a Two-Day RTO/RPO?
S-Grade Dispute: 24% 29 comments
#98
Which Defensive Technique Lures and Detects Malicious Insiders?
S-Grade Dispute: 23% 7 comments
#99
How to Mitigate Counterfeit Hardware Risks During Procurement?
A-Grade Dispute: 22% 18 comments
#100
Protecting Internet-Facing Websites from Buffer Overflow Attacks
S-Grade Dispute: 22% 12 comments
#101
Best Ways to Ensure Only Authorized Personnel Access a Secure Facility?
S-Grade Dispute: 20% 5 comments
#102
Identifying Memory Injection via Abnormal Outbound Traffic
S-Grade Dispute: 20% 7 comments
#103
Most Cost-Effective Way to Prevent Client Data Theft from Decommissioned Laptops?
A-Grade Dispute: 20% 4 comments
#104
What Should Security Teams Do Before Guest Devices Access Corporate Resources?
A-Grade Dispute: 20% 4 comments
#105
What does multiple badge entries in two minutes indicate?
A-Grade Dispute: 20% 3 comments
#106
Which Logs Identify a Host Impacted by a Command-and-Control Server?
S-Grade Dispute: 19% 10 comments
#107
How to Protect Business Applications from Data Exfiltration Attacks?
S-Grade Dispute: 19% 5 comments
#108
Which incident response activity identifies the source of an incident during an investigation?
S-Grade Dispute: 19% 13 comments
#109
Cryptography Considerations for IoT Devices
S-Grade Dispute: 18% 6 comments
#110
What Vulnerability Does a Script Tag in Web Logs Indicate?
S-Grade Dispute: 18% 6 comments
#111
How to Reduce Impact When Users Click Phishing Links?
S-Grade Dispute: 18% 22 comments
#112
How Do You Stop a Visitor Laptop From Using a Lobby Jack?
S-Grade Dispute: 17% 5 comments
#113
Data Privacy Program: Controller vs Processor Role
S-Grade Dispute: 17% 7 comments
#114
Identifying Phishing via Hovering Links
S-Grade Dispute: 17% 7 comments
#115
SIEM Investigation: Executable Analysis Log Source
S-Grade Dispute: 17% 8 comments
#116
How to Secure Legacy Systems Using Unencrypted Protocols?
S-Grade Dispute: 17% 5 comments
#117
Which Risk Management Step Establishes Scope and Identifies Potential Risks?
S-Grade Dispute: 17% 6 comments
#118
What Must Cloud Providers Prioritize When Expanding Internationally?
S-Grade Dispute: 17% 10 comments
#119
How to Prevent Fraudulent Wire Transfers via Business Email Compromise?
S-Grade Dispute: 17% 6 comments
#120
Best Concept for Protecting Intellectual Property in Training?
A-Grade Dispute: 17% 3 comments
#121
Best Way to Validate Disaster Recovery Site Integrity and Availability
A-Grade Dispute: 17% 4 comments
#122
Which Control Type Counts Daily Building Access?
A-Grade Dispute: 17% 3 comments
#123
Which Attack Vector Caused the Resume-Based Ransomware Infection?
A-Grade Dispute: 17% 4 comments
#124
Was the CFO Impersonation Call Social Engineering or Whaling?
S-Grade Dispute: 16% 22 comments
#125
Symmetric Encryption: Same Key Used to Encrypt and Decrypt?
S-Grade Dispute: 15% 7 comments
#126
Identifying Shadow IT in Enterprise Scenarios
S-Grade Dispute: 15% 6 comments
#127
Which Mobile Deployment Model Best Meets Company-Owned, Hardened, Secure Device Requirements?
S-Grade Dispute: 15% 7 comments
#128
Which Social Engineering Techniques Are Used in a Payroll Text Message?
S-Grade Dispute: 14% 21 comments
#129
What Should Be Done First When Deploying a DLP Solution?
S-Grade Dispute: 14% 10 comments
#130
Cyber Insurance Risk Management Strategy
S-Grade Dispute: 14% 6 comments
#131
Wildcard Certificates for Multi-Subdomain Cost Efficiency
S-Grade Dispute: 14% 6 comments
#132
How to Reduce Employee Credentials Across Multiple SaaS Apps?
S-Grade Dispute: 14% 6 comments
#133
Which Risk Management Activity Addresses Generator Fault Impact During Failover?
S-Grade Dispute: 14% 5 comments
#134
What is a preventive physical security control?
A-Grade Dispute: 14% 4 comments
#135
Which Testing Team Blends Offensive and Defensive Work With Developers?
A-Grade Dispute: 14% 4 comments
#136
Authorization vs Authentication in Network Access Control
A-Grade Dispute: 14% 4 comments
#137
Security Camera Deployment: Why Configure the Correct VLAN?
S-Grade Dispute: 13% 13 comments
#138
Which activities are associated with vulnerability management?
S-Grade Dispute: 13% 9 comments
#139
How to Prevent Brute-Force Attacks on Web Servers?
S-Grade Dispute: 13% 8 comments
#140
Salting for One-Way Hash Complexity | SY0-701
S-Grade Dispute: 12% 18 comments
#141
Justifying Compliance Budget via Direct Consequences
S-Grade Dispute: 12% 7 comments
#142
Bastion Host for Secure Administrative Access
S-Grade Dispute: 12% 9 comments
#143
Mitigating Malformed Input Attacks in Web Products
S-Grade Dispute: 12% 7 comments
#144
How should unused, non-compliant desktops be handled on a network?
A-Grade Dispute: 12% 3 comments
#145
Which Data Type Should Have Reduced Retention for Investigations?
A-Grade Dispute: 12% 3 comments
#146
Which Attack Intercepts and Reuses Login Credentials?
A-Grade Dispute: 12% 4 comments
#147
Securing Credit Card Data: Masking vs Tokenization
S-Grade Dispute: 11% 8 comments
#148
How Should Safety and Logical Controls Be Configured During System Failures?
S-Grade Dispute: 11% 7 comments
#149
What data type do R&D employees handle?
A-Grade Dispute: 11% 3 comments
#150
What are the consequences of PCI DSS non-compliance from customers?
A-Grade Dispute: 11% 3 comments
#151
What method is used for credential harvesting?
A-Grade Dispute: 11% 3 comments
#152
Best Mitigations for JavaScript Injection on Web Servers?
A-Grade Dispute: 11% 4 comments
#153
Bank-Impersonation Wire Transfer Request: Which Attack Is It?
A-Grade Dispute: 11% 4 comments
#154
Who Secures the Database in an IaaS Shared Responsibility Model?
S-Grade Dispute: 10% 7 comments
#155
Which team performs offensive security assessments like penetration testing?
S-Grade Dispute: 10% 7 comments
#156
How to Consistently Monitor Daily Server Security Setting Changes?
S-Grade Dispute: 10% 6 comments
#157
Identifying Data Roles: Who is the Data Subject?
S-Grade Dispute: 10% 14 comments
#158
Which threat actor is most likely to deface a website?
A-Grade Dispute: 10% 4 comments
#159
How Is Sensitive Data at Rest Made Unreadable?
S-Grade Dispute: 9% 5 comments
#160
Phishing vs Brand Impersonation: Email Credential Theft
S-Grade Dispute: 9% 17 comments
#161
How Does Patching Switch OS, Servers, and Endpoint Definitions Prevent Attacks?
A-Grade Dispute: 9% 4 comments
#162
Best Responses to a CEO Impersonation Smishing Attack?
S-Grade Dispute: 8% 14 comments
#163
Acceptable Use Policy Security Control Type
S-Grade Dispute: 8% 12 comments
#164
What Must Be Updated After a Stolen Website Private Key?
S-Grade Dispute: 8% 6 comments
#165
How Does Message Attribution Work in Security Controls?
S-Grade Dispute: 8% 11 comments
#166
Which Security Concept Applies to Legacy Host-Based Firewalls?
S-Grade Dispute: 8% 11 comments
#167
Segmentation vs Isolation for Customer Data
S-Grade Dispute: 7% 10 comments
#168
Which physical controls can both detect and deter?
A-Grade Dispute: 7% 4 comments
#169
Identifying Impersonation vs Whaling in Social Engineering
S-Grade Dispute: 6% 8 comments
#170
Jailbreaking vs. Side Loading for Smartphone Features
S-Grade Dispute: 6% 8 comments
#171
How to Restrict Outbound DNS Traffic to a Single Host Using Firewall ACLs?
S-Grade Dispute: 6% 27 comments
#172
How Does Geographic Dispersion Mitigate Weather-Related Server Room Risks?
S-Grade Dispute: 6% 7 comments
#173
What best mitigates a legacy IoT OS vulnerability quickly?
S-Grade Dispute: 5% 12 comments
#174
Compensating Controls for a Legacy System?
S-Grade Dispute: 4% 11 comments
#175
What Defines the Terms of a Third-Party Penetration Test?
S-Grade Dispute: 4% 9 comments
#176
Which Plan Manages the Restore Process After System Failure?
S-Grade Dispute: 4% 11 comments
#177
Which incident response activity ensures proper evidence handling?
S-Grade Dispute: 4% 11 comments
#178
Jump Server for Securing Internal Resources
S-Grade Dispute: 3% 12 comments
#179
Which Document Outlines Project Scope, Cost, and Timeline?
S-Grade Dispute: 3% 6 comments
#180
Which security solution monitors and blocks known signature-based attacks?
S-Grade Dispute: 3% 14 comments
#181
What Does a VPN Protect Between Headquarters and a Branch?
A-Grade Dispute: 0% 4 comments
#182
How Should a Security Consultant Securely Access a Client Environment Remotely?
A-Grade Dispute: 0% 4 comments
#183
Which Method Ensures Easy Cloud Resource Deployment?
A-Grade Dispute: 0% 4 comments
#184
Which Data Policy Governs Archiving Customer Transactions for Compliance?
A-Grade Dispute: 0% 4 comments
#185
Which Document Specifies Estimated Hours for a Vendor Engagement?
A-Grade Dispute: 0% 3 comments
#186
How to Prevent Insider Injection of Malicious Code?
A-Grade Dispute: 0% 4 comments
#187
What Mobile OS Modification Vulnerability Does an AUP Clause Prohibit?
A-Grade Dispute: 0% 6 comments
#188
How Do Air-Gapped Networks Typically Experience Data Loss?
A-Grade Dispute: 0% 3 comments
#189
What Type of Attack Occurs When Malware Spreads via a Compromised Industry Blog?
A-Grade Dispute: 0% 4 comments
#190
Which Architecture Reduces VPN Traffic and Monitors Remote Employee Internet Use?
A-Grade Dispute: 0% 5 comments
#191
What Type of Risk Assessment Is Performed Annually?
A-Grade Dispute: 0% 3 comments
#192
Identifying Detective Controls in Security Incident Response
A-Grade Dispute: 0% 4 comments
#193
How Does Off-Site Replication Minimize Downtime During Earthquakes?
A-Grade Dispute: 0% 4 comments
#194
How to quickly restrict file server access after an audit?
A-Grade Dispute: 0% 3 comments
#195
Which Document Defines Hosted Service Uptime Requirements?
A-Grade Dispute: 0% 5 comments
#196
What documentation to request when disposing of classified storage?
A-Grade Dispute: 0% 3 comments
#197
Disaster Recovery: Geographic Dispersion for Natural Disasters
A-Grade Dispute: 0% 4 comments
#198
Identifying File Creator and Creation Date
A-Grade Dispute: 0% 3 comments
#199
Which Cybersecurity Team Combines Offensive and Defensive Testing?
A-Grade Dispute: 0% 4 comments
#200
Security Implications of End-of-Life Operating Systems
A-Grade Dispute: 0% 4 comments
#201
Which data protection strategy prevents loss on stolen laptops?
A-Grade Dispute: 0% 3 comments
#202
Identifying DNS Amplification and Reflected DoS Attacks
A-Grade Dispute: 0% 4 comments
#203
Implementing Role-Based Access Control for Site Recovery
A-Grade Dispute: 0% 4 comments
#204
Active vs Passive Reconnaissance in Penetration Testing
A-Grade Dispute: 0% 7 comments
#205
Access Management: Federation and Password Complexity
A-Grade Dispute: 0% 6 comments
#206
Implementing Multifactor Authentication for VPN
A-Grade Dispute: 0% 4 comments
#207
What Is the First Risk Management Strategy for a Critical Legacy Application?
A-Grade Dispute: 0% 4 comments
#208
Best Way to Secure an On-Site Data Center Against Insider Intrusion?
A-Grade Dispute: 0% 4 comments
#209
Why Can't the Engineer Access New Team's Shared Folders?
A-Grade Dispute: 0% 3 comments
#210
What Factors Are Most Important for a Security Awareness Training Curriculum?
A-Grade Dispute: 0% 8 comments
#211
Which Security Requirement Does a Load Balancer Fulfill?
A-Grade Dispute: 0% 3 comments
#212
Which OS Security Measure Quickly Implements Password Policy Updates?
A-Grade Dispute: 0% 3 comments
#213
Which metric compares long-term risk transfer cost to risk impact?
A-Grade Dispute: 0% 4 comments
#214
Which vulnerability is associated with installing software outside the manufacturer's approved repository?
S-Grade Dispute: 0% 5 comments
#215
Which Type of Penetration Test Involves Using an Access Badge?
A-Grade Dispute: 0% 4 comments
#216
Which Change Management Document Ensures System Restoration After a Failed Deployment?
A-Grade Dispute: 0% 3 comments
#217
Which architecture reduces the number of physical servers?
A-Grade Dispute: 0% 6 comments
#218
Which Security Control Prevents Modification of Sensitive PII Data?
A-Grade Dispute: 0% 3 comments
#219
How to Allow a Retail Website Blocked as Gambling by Content Filter?
S-Grade Dispute: 0% 4 comments
#220
Which Attack Uses the Same Password Across Multiple Accounts?
A-Grade Dispute: 0% 9 comments
#221
What Most Impacts an Administrator's Ability to Address CVEs on a Server?
A-Grade Dispute: 0% 3 comments
#222
What Describes Effective Change Management Procedures?
A-Grade Dispute: 0% 3 comments
#223
Which security device blocks HTTP exfiltration over port 53?
A-Grade Dispute: 0% 5 comments
#224
Which solution encrypts all traffic between two internal networks?
A-Grade Dispute: 0% 3 comments
#225
Which Tool Alerts on Emailing Fingerprinted Files Outside the Organization?
A-Grade Dispute: 0% 4 comments
#226
Which Method Verifies Downloaded File Integrity?
A-Grade Dispute: 0% 3 comments
#227
Which infection type displays a message and .ryk file extension?
A-Grade Dispute: 0% 3 comments
#228
What Attack Is Indicated by Multiple Simultaneous SYN Requests on Port 443?
A-Grade Dispute: 0% 4 comments
#229
Which IPS Mode Blocks Signature-Based Attacks?
A-Grade Dispute: 0% 3 comments
#230
How Does EDR Protect Endpoints from Malware and Lateral Movement?
A-Grade Dispute: 0% 3 comments
#231
What Best Describes Researching Security Laws and Regulations?
A-Grade Dispute: 0% 3 comments
#232
Investigating Endpoint Log Deletion for C2 Communication
A-Grade Dispute: 0% 4 comments
#233
How to Verify Software Origin and Publisher Identity?
A-Grade Dispute: 0% 3 comments
#234
How to Block Non-Encrypted Websites via Web Filter String Matching?
S-Grade Dispute: 0% 8 comments
#235
Why Run Daily Vulnerability Scans on Corporate Endpoints?
A-Grade Dispute: 0% 3 comments
#236
Which Cloud Component Provides High Availability?
A-Grade Dispute: 0% 3 comments
#237
Which Security Control Is Mandatory for Cloud IoT Management?
A-Grade Dispute: 0% 3 comments
#238
Which Record Tracks Systems Needing Software Patches?
A-Grade Dispute: 0% 3 comments
#239
How should an inbound firewall rule block a malicious IP address?
S-Grade Dispute: 0% 5 comments
#240
Which Should a SOC Use to Improve Incident Response Procedure?
A-Grade Dispute: 0% 3 comments
#241
Which agreement type defines vendor response timeframes?
A-Grade Dispute: 0% 3 comments
#242
What Is a Feature of a Next-Generation SIEM System?
A-Grade Dispute: 0% 3 comments
#243
Which Attack Is Best Mitigated by Input Sanitization?
A-Grade Dispute: 0% 5 comments
#244
Which Method Most Likely Identifies Legacy Systems?
A-Grade Dispute: 0% 3 comments
#245
Which Security Control Best Protects Uploaded PDF Files?
A-Grade Dispute: 0% 4 comments
#246
Why should team members understand an automated script?
A-Grade Dispute: 0% 5 comments
#247
What Server Hardening Steps Should an Administrator Take Before Deployment?
A-Grade Dispute: 0% 3 comments
#248
How to Conduct Frequent Compliance Reviews?
A-Grade Dispute: 0% 3 comments
#249
Which Security Concept Is Accomplished by a RADIUS Server?
A-Grade Dispute: 0% 5 comments
#250
How Should HR Track Contract Revisions?
A-Grade Dispute: 0% 4 comments
#251
Which DR Site Option Minimizes Cost and Infrastructure?
A-Grade Dispute: 0% 3 comments
#252
What Should an Administrator Do When Employees Encounter Spoofed Websites?
A-Grade Dispute: 0% 3 comments
#253
How to Secure Remote Logins While Minimizing Hardware Costs?
A-Grade Dispute: 0% 3 comments
#254
Which protocol should be configured to extend SSO to a new cloud-based accounting application?
A-Grade Dispute: 0% 3 comments
#255
Which Attack Intercepts Data on Public Wi-Fi?
A-Grade Dispute: 0% 4 comments
#256
What should a security analyst do when SIEM alerts are not configured for a new threat?
S-Grade Dispute: 0% 6 comments
#257
Which controls apply to VLAN segmentation of an end-of-life server?
A-Grade Dispute: 0% 4 comments
#258
What Is the Risk Remaining After Controls and Mitigating Factors Are Applied?
A-Grade Dispute: 0% 4 comments
#259
Which factor is a possible MFA authentication factor?
A-Grade Dispute: 0% 8 comments
#260
How Should Password Policy Be Strengthened After an Account Compromise?
A-Grade Dispute: 0% 6 comments
#261
What Is the Purpose of a DNS Sinkhole?
A-Grade Dispute: 0% 3 comments
#262
What type of information contains geolocation coordinates in image files?
A-Grade Dispute: 0% 3 comments
#263
Why Configure S/MIME Digital Signatures for Outbound Emails?
A-Grade Dispute: 0% 3 comments
#264
Which method requires a receipt number for Wi-Fi access?
A-Grade Dispute: 0% 3 comments
#265
Which report best proves security controls over six months?
A-Grade Dispute: 0% 3 comments
#266
What Causes Server Outage When Servers Are Online but Unresponsive?
A-Grade Dispute: 0% 4 comments
#267
Which Encryption Technique Should Be Used to Protect Laptop Data?
A-Grade Dispute: 0% 4 comments
#268
Which solution protects laptop data if the device is stolen?
A-Grade Dispute: 0% 3 comments
#269
What type of vulnerability scan is performed without a system account?
A-Grade Dispute: 0% 3 comments
#270
Which Regulation Covers Individual Data Rights Like Access and Erasure?
A-Grade Dispute: 0% 3 comments
#271
Why Is Telnet Credential Theft Most Likely via Packet Capture?
A-Grade Dispute: 0% 3 comments
#272
Which Tool Identifies Insecure Ports and Legacy Protocols?
A-Grade Dispute: 0% 4 comments
#273
Which technique was used to exfiltrate data via IPv6-in-IPv4 traffic?
A-Grade Dispute: 0% 3 comments
#274
Which Technology Reduces Code Deployment Time and Cost?
A-Grade Dispute: 0% 3 comments
#275
Which Technology Uses RTP, SIP, H.323, and SRTP Protocols?
A-Grade Dispute: 0% 3 comments
#276
Which Security Technique Limits Admin Console Access to Specific Staff?
A-Grade Dispute: 0% 4 comments
#277
What solution secures external consultant access without sharing passwords?
A-Grade Dispute: 0% 3 comments
#278
Which solution should a security team use to address legal concerns for guest wireless users?
A-Grade Dispute: 0% 3 comments
#279
What Is the Most Critical Risk of Running End-of-Life Software?
A-Grade Dispute: 0% 3 comments
#280
Which tool documents risks, responsible parties, and thresholds?
A-Grade Dispute: 0% 6 comments
#281
Which attack used Mimikatz and an NTLM hash to access hardened PC?
A-Grade Dispute: 0% 3 comments
#282
What does a DNS AXFR zone transfer in logs indicate?
A-Grade Dispute: 0% 3 comments
#283
Which procedure should be followed when setting up new firewall rules?
A-Grade Dispute: 0% 6 comments
#284
Which authentication method works across SaaS, internal apps, offline?
A-Grade Dispute: 0% 4 comments
#285
What Type of Vulnerability Involves a Malicious Software Update?
A-Grade Dispute: 0% 4 comments
#286
What Caused Outbound Traffic from a Web Server with Image Uploads?
A-Grade Dispute: 0% 4 comments
#287
What Process Involves Requesting a SOC 2 Report from a SaaS Vendor?
A-Grade Dispute: 0% 4 comments
#288
Which Program Compensates Security Researchers for Vulnerabilities?
A-Grade Dispute: 0% 5 comments
#289
What Security Device Protects a New Web Portal Service?
A-Grade Dispute: 0% 3 comments
#290
Which protocol protects data in transit?
A-Grade Dispute: 0% 4 comments
#291
What Is a Common Passive Reconnaissance Technique Used by Pen Testers?
A-Grade Dispute: 0% 4 comments
#292
Which threat actor most likely uses ransomware for financial gain?
A-Grade Dispute: 0% 3 comments
#293
Which Threat Actor Uses Large Financial Resources to Attack Foreign Critical Systems?
A-Grade Dispute: 0% 4 comments
#294
What procedure should be followed during router firmware upgrades?
A-Grade Dispute: 0% 3 comments
#295
What is a benefit of vendor diversity?
A-Grade Dispute: 0% 4 comments
#296
What enables input fields to execute data manipulation commands?
A-Grade Dispute: 0% 4 comments
#297
Best Method to Reduce OS Patching Overhead
A-Grade Dispute: 0% 3 comments
#298
Which Task is Included in the BIA Process?
A-Grade Dispute: 0% 3 comments
#299
How to Sustain Data Centers During Multiday Power Outages?
A-Grade Dispute: 0% 4 comments
#300
Which Security Controls Do Cameras and Warning Signs Represent?
A-Grade Dispute: 0% 4 comments
#301
Why use a vendor hash for an installer file?
A-Grade Dispute: 0% 3 comments
#302
How to detect employees accessing unrelated sensitive data?
A-Grade Dispute: 0% 3 comments
#303
How to Detect Unauthorized Credential Guessing Attempts?
A-Grade Dispute: 0% 3 comments
#304
How to Best Mitigate Command Injection via User-Agent Headers?
A-Grade Dispute: 0% 3 comments
#305
Best method to improve user awareness during office transition
A-Grade Dispute: 0% 6 comments
#306
Which Protocol Handles Token-Based App Authorization?
A-Grade Dispute: 0% 4 comments
#307
Best method to present quarterly incident reports to the board of directors
A-Grade Dispute: 0% 6 comments
#308
What Protects Against Insecure Device Communications?
A-Grade Dispute: 0% 3 comments
#309
Which Role Implements Data Retention Standards?
A-Grade Dispute: 0% 3 comments
#310
What does a changed cmd.exe hash indicate?
A-Grade Dispute: 0% 4 comments
#311
Best Way to Secure a Shared Backup Account?
A-Grade Dispute: 0% 5 comments
#312
Which technique prevents cross-site scripting in web forms?
A-Grade Dispute: 0% 3 comments
#313
Which attack compromises a system running an RTOS?
A-Grade Dispute: 0% 3 comments
#314
What Is the ALE for a $15,000 Loss Occurring Twice in Three Years?
A-Grade Dispute: 0% 3 comments
#315
First Step Before Patching a Production System?
A-Grade Dispute: 0% 6 comments
#316
Why Should Root Cause Analysis Be Part of Incident Response?
A-Grade Dispute: 0% 6 comments
#317
Which Metric Measures How Quickly Systems Must Be Restored After an Attack?
A-Grade Dispute: 0% 3 comments
#318
Which BCP Step Determines Staff Needed During a Disruption?
A-Grade Dispute: 0% 4 comments
#319
How to Limit SaaS Document Access by High-Risk Country?
A-Grade Dispute: 0% 5 comments
#320
What Is a Hardware-Specific Vulnerability in SY0-701?
A-Grade Dispute: 0% 3 comments
#321
Automating Account Permissions Updates
A-Grade Dispute: 0% 3 comments
#322
Reducing SaaS Credentials with Domain Authentication
A-Grade Dispute: 0% 14 comments
#323
Tuning File Permissions with Access Control Lists
A-Grade Dispute: 0% 3 comments
#324
Data Sanitization for Decommissioned Hard Drives
A-Grade Dispute: 0% 5 comments
#325
How do you prove developers are trained on secure coding?
S-Grade Dispute: 0% 6 comments
#326
Data Classification for Patient Health Information
A-Grade Dispute: 0% 5 comments
#327
How to Track Modifications to Code for Virtual Server Builds?
A-Grade Dispute: 0% 3 comments
#328
How to best block unknown programs from executing?
A-Grade Dispute: 0% 3 comments
#329
How to ensure the authenticity of company-developed code?
A-Grade Dispute: 0% 5 comments
#330
How can potential attacker activities be identified without affecting production servers?
A-Grade Dispute: 0% 4 comments
#331
What should be done after remediating vulnerabilities in a network?
A-Grade Dispute: 0% 7 comments
#332
Which tool detects accidental PII disclosure via email?
A-Grade Dispute: 0% 4 comments
#333
What type of control is a SIEM system with weekly log reviews?
A-Grade Dispute: 0% 3 comments
#334
Which cloud-based solution provides low-cost application hosting?
A-Grade Dispute: 0% 3 comments
#335
How can a database administrator access restricted database servers?
A-Grade Dispute: 0% 11 comments
#336
How do you ignore detected activity in the future?
A-Grade Dispute: 0% 5 comments
#337
What is the primary security concern for a BYOD program?
A-Grade Dispute: 0% 4 comments
#338
Which analysis element justifies removing ransomware coverage to reduce insurance costs?
A-Grade Dispute: 0% 5 comments
#339
What is included in a security awareness program's communication element?
A-Grade Dispute: 0% 4 comments
#340
Which technology tracks changes to secure data integrity?
A-Grade Dispute: 0% 5 comments
#341
What must be considered when planning Full Disk Encryption for laptops?
A-Grade Dispute: 0% 9 comments
#342
How to Secure a Publicly Exposed Remote Desktop Host?
A-Grade Dispute: 0% 5 comments
#343
Which Technology Best Suits Constantly Changing Environments?
A-Grade Dispute: 0% 6 comments
#344
What Is the Best Use Case for Automated User Account Creation Scripts?
A-Grade Dispute: 0% 4 comments
#345
How to Prevent Unauthorized Logins When Passwords Are Compromised?
A-Grade Dispute: 0% 10 comments
#346
What Defines the Maximum Allowable Accepted Risk?
A-Grade Dispute: 0% 3 comments
#347
What Does Unusual High-Volume Outbound DNS Traffic Indicate?
A-Grade Dispute: 0% 5 comments
#348
Which Security Model Provides Secure Zones and Reduces Threat Scope?
A-Grade Dispute: 0% 4 comments
#349
Which Attack Exploits Database Misconfigurations and Unsanitized Input?
A-Grade Dispute: 0% 4 comments
#350
Which Vulnerability Type Does a BIOS Update Address?
A-Grade Dispute: 0% 3 comments
#351
How Do You Quantitatively Measure Vulnerability Criticality?
A-Grade Dispute: 0% 7 comments
#352
How to Monitor Workstations and Servers for Unauthorized Changes?
A-Grade Dispute: 0% 5 comments

Ready to practice?

Access 100 SY0-701 questions with instant feedback and detailed explanations.

View SY0-701 Practice Questions →

← Back to SY0-701 CompTIA Security+ Study Guide