CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
За това тесте
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Карти в това тесте
Карта 1
Въпрос
What does an information security policy establish?
Отговор
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Карта 2
Въпрос
What is phishing?
Отговор
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Карта 3
Въпрос
What does a public-key certificate bind to an identity?
Отговор
A public key, together with identifying information and the issuer's signature.
Карта 4
Въпрос
What is data at rest?
Отговор
Data stored on media such as disks, databases, backups, or mobile devices.
Карта 5
Въпрос
How does policy-driven access control decide a zero-trust access request?
Отговор
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Карта 6
Въпрос
What does establishing a secure baseline produce?
Отговор
An approved, documented configuration that defines the required secure state for a class of computing resource.
Карта 7
Въпрос
What is hashing used to verify?
Отговор
Whether data has changed by comparing fixed-length digest values.
Карта 8
Въпрос
What is impersonation in social engineering?
Отговор
Pretending to be a trusted person or organization to obtain access, data, or action.
Карта 9
Въпрос
What is virtualization?
Отговор
Abstracting physical compute so multiple isolated guest systems can share a host.
Карта 10
Въпрос
What is chain of custody?
Отговор
A documented history of who collected, handled, transferred, stored, and examined evidence.
Карта 11
Въпрос
What is quantitative risk analysis?
Отговор
Estimating risk with numerical values such as money, frequency, or probability.
Карта 12
Въпрос
What is a phishing awareness campaign?
Отговор
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Карта 13
Въпрос
What is high availability?
Отговор
Designing a service to remain accessible despite expected component failures.
Карта 14
Въпрос
What is a network security zone?
Отговор
A group of systems with similar trust, function, or control requirements.
Карта 15
Въпрос
What is risk transfer?
Отговор
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Карта 16
Въпрос
What is media sanitization?
Отговор
Making stored data infeasible to recover for the intended level of protection.
Карта 17
Въпрос
What does CVSS provide?
Отговор
A standardized way to describe a vulnerability's technical severity characteristics.
Карта 18
Въпрос
What does security alerting do?
Отговор
It turns matched events or behavior into a notification that the right responder can review.
Карта 19
Въпрос
What does a firewall rule enforce?
Отговор
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Карта 20
Въпрос
What is deprovisioning?
Отговор
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Карта 21
Въпрос
How does inline placement differ from a tap or monitor port?
Отговор
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Карта 22
Въпрос
What is asymmetric encryption?
Отговор
Encryption that uses a mathematically related public and private key pair.
Карта 23
Въпрос
What does SPF authorize?
Отговор
Which mail servers may send mail for a domain in the SMTP envelope.
Карта 24
Въпрос
What is a possession factor?
Отговор
Something the claimant has, such as a cryptographic authenticator.
Карта 25
Въпрос
What does ordinary TLS usually protect and authenticate?
Отговор
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Карта 26
Въпрос
What is single loss expectancy?
Отговор
The estimated loss from one occurrence of a risk event.
Карта 27
Въпрос
What does a certificate authority do?
Отговор
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Карта 28
Въпрос
What is a detective control meant to do?
Отговор
Identify that an unwanted event has happened or is happening.
Карта 29
Въпрос
What is the security purpose of change-control approval?
Отговор
Ensure authorized reviewers assess risk before the production change occurs.
Карта 30
Въпрос
What is shadow IT?
Отговор
Technology used for organizational work without required approval or oversight.
Карта 31
Въпрос
What is a buffer overflow vulnerability?
Отговор
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Карта 32
Въпрос
What is ransomware?
Отговор
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Карта 33
Въпрос
How does network segmentation limit an incident?
Отговор
It restricts communication paths and reduces lateral movement between zones.
Карта 34
Въпрос
How do load balancing and clustering support availability differently?
Отговор
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Карта 35
Въпрос
What is vendor due diligence?
Отговор
Evaluating a provider's security, capability, stability, and fit before commitment.
Карта 36
Въпрос
Who is a data subject?
Отговор
The person whose personal data is collected or processed.
Карта 37
Въпрос
What is attestation?
Отговор
A formal assertion or report about a subject matter, often supported by an independent examination.
Карта 38
Въпрос
What is a replay attack?
Отговор
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Карта 39
Въпрос
What does a wireless site survey establish?
Отговор
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Карта 40
Въпрос
What is the time-of-check stage of a race-condition vulnerability?
Отговор
The application verifies a condition or resource state before acting on it.
Карта 41
Въпрос
What is a penetration test?
Отговор
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Карта 42
Въпрос
What is a cold recovery site?
Отговор
A facility with basic space and utilities but little preinstalled technology or current data.
Карта 43
Въпрос
What is data in transit?
Отговор
Data moving between systems or across a network.
Карта 44
Въпрос
What is a vendor security questionnaire?
Отговор
A structured request for information about a provider's controls and practices.
Карта 45
Въпрос
How does an internal actor's starting position differ from an external actor's?
Отговор
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Карта 46
Въпрос
What can unexpected account lockouts indicate?
Отговор
Password guessing, credential stuffing, user error, or a broken client.
Карта 47
Въпрос
How do permissions enforce access control?
Отговор
They specify which actions a subject may perform on a particular resource.
Карта 48
Въпрос
What is log aggregation?
Отговор
Central collection of logs from multiple sources for search, correlation, and retention.
Карта 49
Въпрос
Why plan a service restart as part of a change?
Отговор
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Карта 50
Въпрос
What is infrastructure as code?
Отговор
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Карта 51
Въпрос
What should security-awareness program development start with?
Отговор
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Карта 52
Въпрос
What is a voice-based social-engineering attack called?
Отговор
Vishing.
Карта 53
Въпрос
What happens during incident-response preparation?
Отговор
Teams establish people, tools, access, communications, training, and procedures before an incident.
Карта 54
Въпрос
What does an offensive penetration-testing team do?
Отговор
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Карта 55
Въпрос
What is federation?
Отговор
One security domain relies on identity assertions from another trusted domain.
Карта 56
Въпрос
What is asset classification?
Отговор
Grouping an asset by sensitivity, criticality, or required handling.
Карта 57
Въпрос
What is cross-site scripting?
Отговор
Injection of script-capable content that a browser executes in another site's security context.
Карта 58
Въпрос
What can IDS or IPS trends reveal?
Отговор
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Карта 59
Въпрос
What can unexpected resource inaccessibility indicate?
Отговор
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Карта 60
Въпрос
What is a corrective control meant to do?
Отговор
Limit damage and restore a secure state after an event.
Карта 61
Въпрос
How do containers differ from virtual machines?
Отговор
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Карта 62
Въпрос
How does an active security device differ from a passive one?
Отговор
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Карта 63
Въпрос
Why is unsupported software a persistent attack surface?
Отговор
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Карта 64
Въпрос
What is annualized rate of occurrence?
Отговор
The estimated number of times a risk event occurs per year.
Карта 65
Въпрос
What is an inherence factor?
Отговор
A biometric characteristic of the claimant.
Карта 66
Въпрос
What do a threat actor's sophistication and capability describe?
Отговор
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Карта 67
Въпрос
What is a SIEM?
Отговор
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Карта 68
Въпрос
What is sideloading?
Отговор
Installing software from outside the platform's approved distribution path.
Карта 69
Въпрос
What does an IDS or IPS signature match?
Отговор
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Карта 70
Въпрос
Why are embedded systems often difficult to patch?
Отговор
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Карта 71
Въпрос
What is a virtual private network?
Отговор
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Карта 72
Въпрос
What should an initial security-awareness report establish?
Отговор
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Карта 73
Въпрос
What is symmetric encryption?
Отговор
Encryption that uses the same secret key to encrypt and decrypt data.
Карта 74
Въпрос
What happens during incident detection?
Отговор
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Карта 75
Въпрос
What is recovery time objective?
Отговор
The target maximum time to restore a function after disruption.
Карта 76
Въпрос
Why prioritize password length?
Отговор
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Карта 77
Въпрос
What must sanitization accomplish before an asset leaves organizational control?
Отговор
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Карта 78
Въпрос
What is a real-time operating system designed to provide?
Отговор
Predictable response timing for tasks with strict deadlines.
Карта 79
Въпрос
What does fail-open behavior do when a control fails?
Отговор
It permits traffic or access to preserve availability.
Карта 80
Въпрос
What is jailbreaking or rooting a mobile device?
Отговор
Removing platform restrictions to gain privileged control over the operating system.
Карта 81
Въпрос
What does network access control enforce?
Отговор
Identity, device posture, and access policy at network connection time and during a session.
Карта 82
Въпрос
What does data loss prevention do?
Отговор
Detects and may block sensitive data use or transfer that violates policy.
Карта 83
Въпрос
What security property does a blockchain provide?
Отговор
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Карта 84
Въпрос
What is recovery point objective?
Отговор
The target maximum acceptable data loss measured backward in time.
Карта 85
Въпрос
How do ICS and SCADA relate?
Отговор
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Карта 86
Въпрос
What does fail-closed behavior do when a control fails?
Отговор
It denies traffic or access to preserve security.
Карта 87
Въпрос
Which keys create and verify a typical digital signature?
Отговор
The signer creates it with a private key, and others verify it with the corresponding public key.
Карта 88
Въпрос
What is SQL injection?
Отговор
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Карта 89
Въпрос
What does DKIM verify?
Отговор
That selected message content was signed by a domain and was not altered after signing.
Карта 90
Въпрос
What is post-incident activity?
Отговор
Learning from the event and improving controls, plans, and recovery based on evidence.
Карта 91
Въпрос
What characterizes an expansionary risk appetite?
Отговор
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Карта 92
Въпрос
How do centralized and decentralized architectures differ?
Отговор
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Карта 93
Въпрос
What does a certificate revocation list publish?
Отговор
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Карта 94
Въпрос
What is a legal hold?
Отговор
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Карта 95
Въпрос
What is exposure factor in quantitative risk analysis?
Отговор
The estimated percentage of an asset's value lost in one event.
Карта 96
Въпрос
What is decentralized architecture?
Отговор
Control or service responsibility is distributed across multiple independent components or locations.
Карта 97
Въпрос
What is tokenization?
Отговор
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Карта 98
Въпрос
How can automation act as a workforce multiplier?
Отговор
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Карта 99
Въпрос
What can endpoint process logs reveal?
Отговор
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Карта 100
Въпрос
What does the CIA triad protect?
Отговор
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Карта 101
Въпрос
How does data masking protect information?
Отговор
It hides selected values or characters while preserving a usable representation.
Карта 102
Въпрос
How can a national requirement affect security governance?
Отговор
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Карта 103
Въпрос
What do integrations and APIs provide to security orchestration?
Отговор
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Карта 104
Въпрос
What makes a compliance report external?
Отговор
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Карта 105
Въпрос
What does a cryptographic algorithm define?
Отговор
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Карта 106
Въпрос
Why compare systems with a secure baseline regularly?
Отговор
To detect drift, unauthorized changes, and missing hardening.
Карта 107
Въпрос
What does integrity protect?
Отговор
The accuracy and completeness of data and systems against unauthorized change.
Карта 108
Въпрос
What does vulnerability classification organize?
Отговор
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Карта 109
Въпрос
What does a password standard define?
Отговор
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Карта 110
Въпрос
What technology capacity must a recovery design plan for?
Отговор
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Карта 111
Въпрос
What does a confidential data classification indicate?
Отговор
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Карта 112
Въпрос
What makes a vendor assessment independent?
Отговор
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Карта 113
Въпрос
What lets a worm spread without attaching itself to another file?
Отговор
It is a standalone program that replicates across reachable systems or services.
Карта 114
Въпрос
What is microsegmentation?
Отговор
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Карта 115
Въпрос
What can application logs reveal?
Отговор
Transactions, errors, user actions, and application-specific security events.
Карта 116
Въпрос
What does deploying a secure baseline require?
Отговор
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Карта 117
Въпрос
How can resource-provisioning automation improve security?
Отговор
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Карта 118
Въпрос
What does availability protect?
Отговор
Reliable, timely access to systems and data when authorized users need them.
Карта 119
Въпрос
Why must a change request describe business impact?
Отговор
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Карта 120
Въпрос
What does an authenticated vulnerability scan add?
Отговор
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Карта 121
Въпрос
What does a change-management procedure specify?
Отговор
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Карта 122
Въпрос
What is a sanction for noncompliance?
Отговор
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Карта 123
Въпрос
How can email deliver a security attack?
Отговор
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Карта 124
Въпрос
What is an internal compliance audit?
Отговор
An organization-led examination of whether selected operations and controls meet defined requirements.
Карта 125
Въпрос
What is a Trojan?
Отговор
Malware disguised as legitimate or desirable software.
Карта 126
Въпрос
What is clustering?
Отговор
Multiple systems work together to provide a service and tolerate member failure.
Карта 127
Въпрос
What makes data regulated?
Отговор
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Карта 128
Въпрос
What does a wireless heat map show?
Отговор
Measured or modeled signal strength and coverage across a physical area.
Карта 129
Въпрос
How should vendor criticality affect due diligence?
Отговор
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Карта 130
Въпрос
How can a digital signature support non-repudiation?
Отговор
It provides evidence that the holder of a private key signed specific data.
Карта 131
Въпрос
What should vulnerability prioritization consider beyond severity?
Отговор
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Карта 132
Въпрос
What is a security guideline?
Отговор
Recommended practice that allows judgment unless adopted as a requirement.
Карта 133
Въпрос
What usually distinguishes a nation-state threat actor?
Отговор
Strategic objectives, substantial resources, patience, and advanced operational capability.
Карта 134
Въпрос
What is spyware?
Отговор
Software that secretly collects information about a user or system.
Карта 135
Въпрос
Why maintain an allow list for applications?
Отговор
Only explicitly approved software is permitted to execute.
Карта 136
Въпрос
How can an image become an attack vector?
Отговор
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Карта 137
Въпрос
What makes a security control technical?
Отговор
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Карта 138
Въпрос
What is identity proofing?
Отговор
Establishing that a person is who they claim to be before issuing an account or credential.
Карта 139
Въпрос
What is an automated security guardrail?
Отговор
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Карта 140
Въпрос
Why assign an owner to a planned change?
Отговор
To make one party accountable for coordination, execution, and follow-through.
Карта 141
Въпрос
How can national privacy law affect data handling?
Отговор
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Карта 142
Въпрос
What is continuity of operations?
Отговор
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Карта 143
Въпрос
What security tradeoff comes with BYOD?
Отговор
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Карта 144
Въпрос
How should policies and handbooks support security training?
Отговор
They provide accessible, current rules and reporting steps that training can apply to real situations.
Карта 145
Въпрос
What is a keylogger?
Отговор
A tool that records keystrokes to capture data such as credentials.
Карта 146
Въпрос
What makes information a trade secret?
Отговор
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Карта 147
Въпрос
What does authentication establish?
Отговор
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Карта 148
Въпрос
What risk comes from an untrusted file attachment?
Отговор
Opening or parsing it can execute malicious code or expose data.
Карта 149
Въпрос
How does risk tolerance affect vulnerability remediation?
Отговор
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Карта 150
Въпрос
How can a global requirement affect security governance?
Отговор
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Карта 151
Въпрос
Why should questionnaire answers be supported by evidence?
Отговор
Self-assertions alone may not prove that controls are designed or operating effectively.
Карта 152
Въпрос
What is an independent third-party audit?
Отговор
An external party with suitable independence examines evidence against defined criteria.
Карта 153
Въпрос
What do account provisioning and deprovisioning do?
Отговор
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Карта 154
Въпрос
What is an unskilled attacker commonly called?
Отговор
A script kiddie: someone who relies on tools or instructions created by others.
Карта 155
Въпрос
What is a rootkit?
Отговор
Software designed to maintain privileged, concealed access by altering or subverting the system.
Карта 156
Въпрос
What does an access control list enforce?
Отговор
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Карта 157
Въпрос
What should system security monitoring observe?
Отговор
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Карта 158
Въпрос
What can operating-system security logs reveal?
Отговор
Authentication, privilege use, policy changes, services, and other host security events.
Карта 159
Въпрос
Why isolate operational technology from general business networks?
Отговор
To limit attack paths into safety- and availability-critical processes.
Карта 160
Въпрос
What is the COPE mobile deployment model?
Отговор
The organization owns the device but permits defined personal use while retaining management control.
Карта 161
Въпрос
What security work belongs in asset acquisition and procurement?
Отговор
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Карта 162
Въпрос
How can user-provisioning automation improve security?
Отговор
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Карта 163
Въпрос
What people capacity must a continuity plan account for?
Отговор
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Карта 164
Въпрос
What do authorization models define?
Отговор
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Карта 165
Въпрос
Why are removable devices an attack vector?
Отговор
They can introduce malware or remove data while bypassing network controls.
Карта 166
Въпрос
What should predeployment change-test results show?
Отговор
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Карта 167
Въпрос
What is the time-of-use stage of a race-condition vulnerability?
Отговор
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Карта 168
Въпрос
What is data in use?
Отговор
Data actively processed in memory or by an application.
Карта 169
Въпрос
What does open-source vulnerability intelligence contribute?
Отговор
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Карта 170
Въпрос
What can file-integrity monitoring detect?
Отговор
Unexpected changes to protected files, directories, or configuration.
Карта 171
Въпрос
Why should deprovisioning be prompt?
Отговор
Former users or roles should not retain usable access.
Карта 172
Въпрос
What is an acceptable use policy?
Отговор
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Карта 173
Въпрос
What makes a compliance report internal?
Отговор
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Карта 174
Въпрос
What is a logic bomb?
Отговор
Malicious code that activates when a specified condition or time is reached.
Карта 175
Въпрос
What does a right-to-audit clause provide?
Отговор
Contractual authority to inspect or obtain evidence about agreed controls.
Карта 176
Въпрос
Where should a forward proxy sit in an enterprise traffic path?
Отговор
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Карта 177
Въпрос
Which cues should make a message look suspicious?
Отговор
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Карта 178
Въпрос
What makes a security control managerial?
Отговор
It directs risk and governance through decisions such as policies, assessments, and oversight.
Карта 179
Въпрос
What is the CYOD mobile deployment model?
Отговор
The user selects from organization-approved device options that remain subject to corporate security requirements.
Карта 180
Въпрос
How does client-based vulnerable software differ from an agentless exposure?
Отговор
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Карта 181
Въпрос
What makes a risk assessment recurring?
Отговор
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Карта 182
Въпрос
What does a defensive penetration-testing team practice?
Отговор
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Карта 183
Въпрос
In a zero-trust data plane, what can the subject or system represent?
Отговор
The user, device, workload, or service requesting access to a protected resource.
Карта 184
Въпрос
What primarily motivates a hacktivist?
Отговор
A political, social, or ideological cause.
Карта 185
Въпрос
What is bloatware?
Отговор
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Карта 186
Въпрос
Why keep endpoint-protection signatures and engines current?
Отговор
They need current detection logic to recognize newly identified malware and exploit behavior.
Карта 187
Въпрос
What should application security monitoring observe?
Отговор
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Карта 188
Въпрос
What is role-based access control?
Отговор
Permissions are assigned to roles, and identities receive access through their roles.
Карта 189
Въпрос
What is geographic dispersal?
Отговор
Placing redundant resources in separate locations so one regional event does not affect all copies.
Карта 190
Въпрос
What is a malicious update?
Отговор
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Карта 191
Въпрос
What does static application analysis inspect?
Отговор
Source code, bytecode, or compiled code without executing the application.
Карта 192
Въпрос
What does a firewall access list define?
Отговор
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Карта 193
Въпрос
What does a disaster recovery policy establish?
Отговор
Management expectations for restoring technology and data after a disruptive event.
Карта 194
Въпрос
How does logical segmentation separate workloads that share physical infrastructure?
Отговор
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Карта 195
Въпрос
How should IDS and IPS placement differ?
Отговор
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Карта 196
Въпрос
What should automated ticket creation capture?
Отговор
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Карта 197
Въпрос
What makes information intellectual property?
Отговор
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Карта 198
Въпрос
What is a backout plan?
Отговор
Predefined steps for safely reversing a failed or harmful change.
Карта 199
Въпрос
Why is an unsecure wireless network an attack vector?
Отговор
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Карта 200
Въпрос
What is physical brute force?
Отговор
Using force to defeat a lock, barrier, enclosure, or other physical control.
Карта 201
Въпрос
What is application sandboxing?
Отговор
Running code in a constrained environment with limited access to the host and data.
Карта 202
Въпрос
Why assign an asset owner?
Отговор
One accountable party must decide its use, protection, and lifecycle.
Карта 203
Въпрос
What happens during risk identification?
Отговор
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Карта 204
Въпрос
What should an SLA state about breach notification?
Отговор
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Карта 205
Въпрос
How do due diligence and due care differ in compliance?
Отговор
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Карта 206
Въпрос
What is attribute-based access control?
Отговор
Policy evaluates attributes of the subject, resource, action, and environment.
Карта 207
Въпрос
What does a zero-trust policy engine do?
Отговор
It evaluates policy and signals to decide whether access should be allowed.
Карта 208
Въпрос
How does a cloud responsibility matrix allocate security duties?
Отговор
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Карта 209
Въпрос
Where should a load balancer sit in a service path?
Отговор
In front of service instances so it can route requests to healthy backends.
Карта 210
Въпрос
What should the security team do with a reported suspicious message?
Отговор
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Карта 211
Въпрос
What makes an operating-system vulnerability high impact?
Отговор
It can affect every application and security control that relies on the compromised OS.
Карта 212
Въпрос
What does dynamic application analysis inspect?
Отговор
The behavior and externally visible weaknesses of a running application.
Карта 213
Въпрос
How can false-positive trends affect IDS or IPS tuning?
Отговор
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Карта 214
Въпрос
What does a business continuity policy establish?
Отговор
Management expectations for sustaining and restoring critical business functions.
Карта 215
Въпрос
What is a hot recovery site?
Отговор
A ready, synchronized environment intended to take over quickly.
Карта 216
Въпрос
What makes an insider threat distinct?
Отговор
The actor has legitimate access or organizational knowledge that can be misused.
Карта 217
Въпрос
What is RFID cloning?
Отговор
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Карта 218
Въпрос
Why apply vendor security updates promptly?
Отговор
They remove known weaknesses before attackers can exploit the unpatched exposure.
Карта 219
Въпрос
What should infrastructure security monitoring observe?
Отговор
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Карта 220
Въпрос
What can firewall logs reveal?
Отговор
Allowed or denied network connections across controlled boundaries.
Карта 221
Въпрос
Why minimize open service ports?
Отговор
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Карта 222
Въпрос
What is threat hunting?
Отговор
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Карта 223
Въпрос
What triggers an ad hoc risk assessment?
Отговор
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Карта 224
Въпрос
What makes an assessment external?
Отговор
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Карта 225
Въпрос
What is data sovereignty?
Отговор
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Карта 226
Въпрос
What security boundary does a cellular connection create for a mobile device?
Отговор
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Карта 227
Въпрос
What makes a security control operational?
Отговор
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Карта 228
Въпрос
What is discretionary access control?
Отговор
A resource owner can decide who receives access, within system policy.
Карта 229
Въпрос
How can careful automation support employee retention?
Отговор
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Карта 230
Въпрос
Why does ease of deployment matter in an architecture decision?
Отговор
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Карта 231
Въпрос
What tradeoff comes with placing an NGFW inline?
Отговор
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Карта 232
Въпрос
What does a zero-trust policy administrator do?
Отговор
It carries out the policy engine's decision, such as creating or ending a session.
Карта 233
Въпрос
What should a master service agreement define for data return and deletion?
Отговор
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Карта 234
Въпрос
What is an environmental physical attack?
Отговор
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Карта 235
Въпрос
When should a maintenance window be chosen?
Отговор
When disruption and rollback can be managed with the least business impact.
Карта 236
Въпрос
What is memory injection?
Отговор
Placing malicious code or data into another process's memory so it executes in that process's context.
Карта 237
Въпрос
What does software composition analysis find?
Отговор
Known risks and license information in third-party dependencies.
Карта 238
Въпрос
What is DNS filtering?
Отговор
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Карта 239
Въпрос
What should an incident response policy establish?
Отговор
Authority, scope, reporting duties, and organizational commitment for incident handling.
Карта 240
Въпрос
How can noncompliance cause reputational damage?
Отговор
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Карта 241
Въпрос
What does full-disk encryption protect?
Отговор
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Карта 242
Въпрос
Why are default credentials dangerous?
Отговор
They are widely known or easily discovered and often remain unchanged.
Карта 243
Въпрос
What makes a risk assessment one-time?
Отговор
It evaluates a defined decision or scope once without an established repeating cadence.
Карта 244
Въпрос
What is a warm recovery site?
Отговор
A partially equipped environment that needs some data restoration or configuration before use.
Карта 245
Въпрос
What does application input validation do?
Отговор
It checks that input matches the expected type, length, range, and format before use.
Карта 246
Въпрос
What should an asset inventory record besides a device name?
Отговор
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Карта 247
Въпрос
What is mandatory access control?
Отговор
A central authority enforces access through labels and rules that ordinary owners cannot override.
Карта 248
Въпрос
What security benefit does infrastructure as code provide?
Отговор
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Карта 249
Въпрос
When should a public service control fail closed?
Отговор
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Карта 250
Въпрос
What should users do with a suspicious message?
Отговор
Report it through the approved channel without interacting with its links or attachments.
Карта 251
Въпрос
What usually motivates organized cybercrime?
Отговор
Financial gain through scalable or repeatable criminal activity.
Карта 252
Въпрос
How can malicious code support a network attack?
Отговор
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Карта 253
Въпрос
When is virtual patching useful?
Отговор
When a network or application control can block exploit traffic before the underlying system can be patched.
Карта 254
Въпрос
What does security-monitoring reporting provide?
Отговор
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Карта 255
Въпрос
What does data geolocation identify?
Отговор
The physical or legal location where data is stored, processed, or transmitted.
Карта 256
Въпрос
What does a zero-trust policy enforcement point do?
Отговор
It enables, monitors, and terminates the connection between a subject and a resource.
Карта 257
Въпрос
What is cryptographic key exchange?
Отговор
A method for parties to establish shared key material over an untrusted channel.
Карта 258
Въпрос
How can a vendor become a supply-chain attack vector?
Отговор
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Карта 259
Въпрос
Why can legacy hardware remain vulnerable?
Отговор
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Карта 260
Въпрос
What can proprietary vulnerability intelligence add beyond open sources?
Отговор
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Карта 261
Въпрос
How does a centralized proxy apply web filtering?
Отговор
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Карта 262
Въпрос
How can continuous integration and testing improve security automation?
Отговор
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Карта 263
Въпрос
What is containment?
Отговор
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Карта 264
Въпрос
What is a software development lifecycle policy meant to ensure?
Отговор
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Карта 265
Въпрос
What makes risk assessment continuous?
Отговор
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Карта 266
Въпрос
What is a memorandum of agreement?
Отговор
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Карта 267
Въпрос
What makes a penetration test integrated?
Отговор
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Карта 268
Въпрос
How does a DNS amplification attack magnify traffic?
Отговор
It sends small spoofed queries that trigger larger replies toward the victim.
Карта 269
Въпрос
Why does ease of recovery matter in an architecture decision?
Отговор
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Карта 270
Въпрос
What does 802.1X control before a device receives normal network access?
Отговор
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Карта 271
Въпрос
What is rule-based access control?
Отговор
System-wide rules grant or deny access based on conditions such as network, time, or action.
Карта 272
Въпрос
What is mobile device management?
Отговор
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Карта 273
Въпрос
What tradeoff comes with a cold recovery site?
Отговор
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Карта 274
Въпрос
Why identify stakeholders before approving a security-sensitive change?
Отговор
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Карта 275
Въпрос
How do attestation and acknowledgement differ?
Отговор
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Карта 276
Въпрос
What does zero-trust adaptive identity mean?
Отговор
Access decisions adjust to current risk signals rather than relying only on a static login.
Карта 277
Въпрос
What makes a security control physical?
Отговор
It protects facilities or equipment through a tangible barrier or mechanism.
Карта 278
Въпрос
What is geo-fencing for data?
Отговор
Enforcing location-based boundaries on where data or services may be accessed or operated.
Карта 279
Въпрос
What does a Trusted Platform Module protect?
Отговор
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Карта 280
Въпрос
Why can a managed service provider amplify risk?
Отговор
Its privileged access and shared tooling can provide a path into many customers.
Карта 281
Въпрос
What does probability express in risk analysis?
Отговор
A quantified chance that a defined event will occur within stated conditions or time.
Карта 282
Въпрос
Why can shadow IT create a threat?
Отговор
It bypasses security review, inventory, monitoring, and supported configuration.
Карта 283
Въпрос
What is on-path interception?
Отговор
An attacker positions between communicating parties to observe or alter traffic.
Карта 284
Въпрос
Why include encryption in a system-hardening baseline?
Отговор
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Карта 285
Въпрос
Why tune security alerts?
Отговор
To keep useful detections while reducing noise that wastes analyst attention.
Карта 286
Въпрос
What can IPS or IDS logs contribute to an investigation?
Отговор
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Карта 287
Въпрос
What is VM escape?
Отговор
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Карта 288
Въпрос
How can segmentation reduce vulnerability exposure before a patch is available?
Отговор
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Карта 289
Въпрос
Why should firewall policy name the required ports and protocols explicitly?
Отговор
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Карта 290
Въпрос
What is a change management policy meant to control?
Отговор
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Карта 291
Въпрос
What is a hybrid-cloud architecture?
Отговор
An environment that integrates private or on-premises resources with public cloud services.
Карта 292
Въпрос
How do AH and ESP differ in the security services they can provide?
Отговор
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Карта 293
Въпрос
What makes user behavior risky?
Отговор
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Карта 294
Въпрос
What is least privilege?
Отговор
Granting only the access needed for the required task and no more.
Карта 295
Въпрос
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Отговор
Transmission to HTTPS, script access, and cross-site sending, respectively.
Карта 296
Въпрос
Why discover unmanaged assets?
Отговор
Unknown systems cannot be patched, monitored, or governed reliably.
Карта 297
Въпрос
What is a service-level agreement?
Отговор
Measurable service commitments and remedies, such as availability or response targets.
Карта 298
Въпрос
What should govern automated security escalation?
Отговор
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Карта 299
Въпрос
What is platform diversity as a resilience strategy?
Отговор
Using different implementations so one common flaw or failure is less likely to affect every copy.
Карта 300
Въпрос
How can replayed session material affect an application?
Отговор
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Карта 301
Въпрос
What is an implicit trust zone in zero trust?
Отговор
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Карта 302
Въпрос
What does salting a password hash accomplish?
Отговор
It makes identical passwords hash differently and defeats precomputed hash tables.
Карта 303
Въпрос
What is spear phishing?
Отговор
Phishing tailored to a specific person, role, or organization.
Карта 304
Въпрос
What is eradication?
Отговор
Removing the attacker's access, malicious artifacts, and exploited conditions.
Карта 305
Въпрос
Who is a risk owner?
Отговор
The person accountable for deciding and monitoring how a specific risk is handled.
Карта 306
Въпрос
What does a partially known penetration-test environment provide?
Отговор
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Карта 307
Въпрос
What is a microservices architecture?
Отговор
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Карта 308
Въпрос
What is a jump server?
Отговор
A hardened intermediary used to reach systems in a restricted management network.
Карта 309
Въпрос
What can happen when a configuration change is made without dependency analysis?
Отговор
A downstream service can fail even when the changed component works.
Карта 310
Въпрос
What is resource reuse exposure?
Отговор
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Карта 311
Въпрос
Why does financial information require explicit protection?
Отговор
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Карта 312
Въпрос
What does CVE provide?
Отговор
A common identifier for a publicly disclosed vulnerability.
Карта 313
Въпрос
Where can DLP controls operate?
Отговор
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Карта 314
Въпрос
What does privileged password vaulting protect?
Отговор
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Карта 315
Въпрос
What does an access-control standard define?
Отговор
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Карта 316
Въпрос
How can automation support compliance monitoring?
Отговор
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Карта 317
Въпрос
What does static code analysis examine?
Отговор
Source or compiled code for weakness patterns without executing the application.
Карта 318
Въпрос
What actor attribute describes funding, time, and personnel?
Отговор
Resources.
Карта 319
Въпрос
What is DNS poisoning?
Отговор
Introducing false DNS data so names resolve to attacker-chosen destinations.
Карта 320
Въпрос
Why change default credentials during hardening?
Отговор
Default secrets are predictable and commonly targeted.
Карта 321
Въпрос
What does quarantine do after a security alert?
Отговор
It restricts a suspected asset or object while analysts validate and remediate the risk.
Карта 322
Въпрос
What does key stretching do for stored passwords?
Отговор
It deliberately makes each password guess more computationally expensive.
Карта 323
Въпрос
What is smishing?
Отговор
Phishing delivered through SMS or another text-messaging service.
Карта 324
Въпрос
What is qualitative risk analysis?
Отговор
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Карта 325
Въпрос
What is a master service agreement?
Отговор
An umbrella contract establishing general legal and commercial terms for ongoing work.
Карта 326
Въпрос
What is threat scope reduction?
Отговор
Narrowing the systems, privileges, or paths an attacker can reach.
Карта 327
Въпрос
Why use a third-party cloud service instead of building locally?
Отговор
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Карта 328
Въпрос
What should determine security-device placement?
Отговор
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Карта 329
Въпрос
What does situational awareness mean for a user?
Отговор
Notice the people, devices, requests, location, and context around a task before acting.
Карта 330
Въпрос
What does a failover test validate?
Отговор
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Карта 331
Въпрос
What is a preventive control meant to do?
Отговор
Stop an unwanted event before it succeeds.
Карта 332
Въпрос
What is just-in-time privileged access?
Отговор
Elevated access is granted only when needed and expires after a short approved period.
Карта 333
Въпрос
What safeguard should security-group automation enforce?
Отговор
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Карта 334
Въпрос
How does a reflected DDoS attack hide and multiply sources?
Отговор
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Карта 335
Въпрос
What is a security misconfiguration?
Отговор
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Карта 336
Въпрос
Why can the same vulnerability have different organizational impact?
Отговор
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Карта 337
Въпрос
What does URL scanning evaluate before a user opens a web destination?
Отговор
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Карта 338
Въпрос
What is the board's security governance role?
Отговор
Provide oversight, set risk direction, and hold executives accountable.
Карта 339
Въпрос
What does code signing establish?
Отговор
That code came from the holder of the signing key and has not changed since signing.
Карта 340
Въпрос
How should an asset's classification affect security operations?
Отговор
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Карта 341
Въпрос
How does encryption protect data?
Отговор
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Карта 342
Въпрос
What is a secure enclave?
Отговор
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Карта 343
Въпрос
What is business email compromise?
Отговор
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Карта 344
Въпрос
What is recovery in incident response?
Отговор
Restoring services safely, monitoring them, and returning to normal operations.
Карта 345
Въпрос
How is single loss expectancy commonly estimated?
Отговор
Asset value multiplied by the exposure factor.
Карта 346
Въпрос
What does an unknown penetration-test environment provide?
Отговор
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Карта 347
Въпрос
What security boundary does a hypervisor provide?
Отговор
It isolates virtual machines while controlling their access to shared hardware.
Карта 348
Въпрос
Why does a TLS tunnel not protect a compromised endpoint?
Отговор
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Карта 349
Въпрос
Why update diagrams after an infrastructure change?
Отговор
Operations and incident responders need the documentation to match the deployed environment.
Карта 350
Въпрос
What does privacy ownership assign?
Отговор
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Карта 351
Въпрос
What does a security control gap analysis compare?
Отговор
The controls required for the target state with the controls currently in place.
Карта 352
Въпрос
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Отговор
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Карта 353
Въпрос
What is application privilege escalation?
Отговор
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Карта 354
Въпрос
What risk remains when unnecessary software is left installed?
Отговор
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Карта 355
Въпрос
What does SCAP standardize?
Отговор
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Карта 356
Въпрос
What can packet capture reveal?
Отговор
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Карта 357
Въпрос
What makes a privileged credential ephemeral?
Отговор
It is created for a limited task or session and expires or is destroyed automatically after that use.
Карта 358
Въпрос
How do a statement of work and a work order differ?
Отговор
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Карта 359
Въпрос
Why might multi-cloud improve resilience?
Отговор
A provider-wide failure need not stop workloads that can run independently elsewhere.
Карта 360
Въпрос
How can a service provider introduce a supply-chain vulnerability?
Отговор
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Карта 361
Въпрос
What is a false positive in vulnerability scanning?
Отговор
A reported weakness that is not actually present or exploitable in the assessed context.
Карта 362
Въпрос
How do EDR and XDR differ?
Отговор
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Карта 363
Въпрос
What should onboarding and offboarding procedures coordinate?
Отговор
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Карта 364
Въпрос
How should an organization harden managed mobile devices?
Отговор
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Карта 365
Въпрос
What is a certificate signing request?
Отговор
A request containing a public key and subject information for a certificate authority to sign.
Карта 366
Въпрос
What is pretexting?
Отговор
Using a fabricated role or situation to make a request seem legitimate.
Карта 367
Въпрос
How is annualized loss expectancy commonly estimated?
Отговор
Single loss expectancy multiplied by annualized rate of occurrence.
Карта 368
Въпрос
What security consequence follows from containers sharing a kernel?
Отговор
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Карта 369
Въпрос
Where does 802.1X enforce a network admission decision?
Отговор
At the controlled switch port or wireless access point before normal network access is granted.
Карта 370
Въпрос
What should insider-threat awareness teach?
Отговор
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Карта 371
Въпрос
What access action is suitable for careful automation?
Отговор
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Карта 372
Въпрос
What is an evil twin?
Отговор
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 карти
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Учете с това тесте безплатноNibomo се отваря, за да започнете да учите.
Карта 373
Въпрос
Does non-human-readable data need less protection?
Отговор
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Карта 374
Въпрос
What does authenticating a system establish?
Отговор
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Карта 375
Въпрос
What does LDAP provide in identity systems?
Отговор
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Карта 376
Въпрос
What is a deterrent control meant to do?
Отговор
Discourage an attacker from attempting an unwanted action.
Карта 377
Въпрос
Why update procedures after changing a security control?
Отговор
Staff need accurate steps for operating, monitoring, and recovering the new control.
Карта 378
Въпрос
How does OCSP differ from a certificate revocation list?
Отговор
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Карта 379
Въпрос
What is the goal of data exfiltration?
Отговор
Remove data from its authorized environment without permission.
Карта 380
Въпрос
What is a watering-hole attack?
Отговор
Compromising a site frequented by the intended targets so their visits expose them.
Карта 381
Въпрос
How can a hardware provider introduce a supply-chain vulnerability?
Отговор
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Карта 382
Въпрос
What is application forgery?
Отговор
Creating or altering a request, token, or object so the application treats it as authentic.
Карта 383
Въпрос
How does least privilege mitigate compromise?
Отговор
It limits the actions and resources available to a compromised account or process.
Карта 384
Въпрос
What is serverless computing?
Отговор
A model where the provider manages servers and the customer deploys event-driven code or functions.
Карта 385
Въпрос
What makes an infrastructure control effective for a specific risk?
Отговор
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Карта 386
Въпрос
What does parallel recovery processing test?
Отговор
Whether primary and alternate environments can run together consistently before a controlled cutover.
Карта 387
Въпрос
Which password-authentication method does WPA3-Personal use?
Отговор
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Карта 388
Въпрос
How does data retention affect asset disposal?
Отговор
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Карта 389
Въпрос
What is a false negative in vulnerability scanning?
Отговор
A real weakness that the assessment fails to report.
Карта 390
Въпрос
What does recurring security scanning add to monitoring?
Отговор
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Карта 391
Въпрос
What should guide port selection for a secure protocol?
Отговор
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Карта 392
Въпрос
What does forensic acquisition create?
Отговор
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Карта 393
Въпрос
How do system owners and data owners divide security accountability?
Отговор
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Карта 394
Въпрос
What does likelihood express in risk analysis?
Отговор
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Карта 395
Въпрос
What is a memorandum of understanding?
Отговор
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Карта 396
Въпрос
What does the right to be forgotten generally require?
Отговор
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Карта 397
Въпрос
What does an audit committee oversee?
Отговор
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Карта 398
Въпрос
What does identity interoperability require?
Отговор
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Карта 399
Въпрос
How does a bollard protect a facility?
Отговор
It blocks or redirects vehicles before they can reach a protected area.
Карта 400
Въпрос
How can hashing protect a downloaded file?
Отговор
A trusted digest lets the recipient detect whether the file changed.
Карта 401
Въпрос
What is a credential replay attack?
Отговор
Using captured valid credentials or tokens again without needing to discover the secret.
Карта 402
Въпрос
How can automation complexity create security risk?
Отговор
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Карта 403
Въпрос
What must an architecture provide when a component cannot be patched?
Отговор
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Карта 404
Въпрос
What makes remote access secure?
Отговор
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Карта 405
Въпрос
What should users verify before connecting removable media or a cable?
Отговор
That the device and connection are approved, expected, and handled under organizational policy.
Карта 406
Въпрос
What is a self-signed certificate?
Отговор
A certificate signed by its own private key rather than by a separate trusted issuer.
Карта 407
Въпрос
What is brand impersonation?
Отговор
Using a trusted organization's identity or look to deceive people.
Карта 408
Въпрос
What characterizes a conservative risk appetite?
Отговор
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Карта 409
Въпрос
What should a managed mobile device verify before using Wi-Fi?
Отговор
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Карта 410
Въпрос
What is a zero-day vulnerability?
Отговор
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Карта 411
Въпрос
What does verification confirm after vulnerability remediation?
Отговор
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Карта 412
Въпрос
What is user and entity behavior analytics?
Отговор
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Карта 413
Въпрос
What does a physical security policy establish?
Отговор
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Карта 414
Въпрос
What does a UPS provide?
Отговор
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Карта 415
Въпрос
What is a nondisclosure agreement?
Отговор
A contract restricting use and disclosure of defined confidential information.
Карта 416
Въпрос
What should be checked before assigning a user permission?
Отговор
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Карта 417
Въпрос
How does espionage differ from ordinary theft?
Отговор
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Карта 418
Въпрос
What is password spraying?
Отговор
Trying a small set of common passwords across many accounts to avoid lockouts.
Карта 419
Въпрос
What is the purpose of system isolation during an incident?
Отговор
Stop harmful communication while preserving the system for response and investigation.
Карта 420
Въпрос
What is a security benchmark?
Отговор
A documented set of recommended configuration checks for a platform or product.
Карта 421
Въпрос
Which metadata fields give a log record investigative context?
Отговор
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Карта 422
Въпрос
What does an access-control vestibule prevent?
Отговор
It limits tailgating by allowing controlled passage through one door at a time.
Карта 423
Въпрос
What is version control's security value for configuration?
Отговор
It preserves attributable history and enables review or rollback of changes.
Карта 424
Въпрос
Why use both internal and external compliance monitoring?
Отговор
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Карта 425
Въпрос
What distinguishes on-premises architecture?
Отговор
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Карта 426
Въпрос
What risk can split tunneling add to a VPN?
Отговор
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Карта 427
Въпрос
What is a certificate root of trust?
Отговор
A trusted root certificate or key from which a client validates a certificate chain.
Карта 428
Въпрос
What is typosquatting?
Отговор
Registering a look-alike domain based on common typing errors or visual similarity.
Карта 429
Въпрос
What is root-cause analysis?
Отговор
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Карта 430
Въпрос
What is risk tolerance?
Отговор
The acceptable variation or boundary around a specific objective or risk area.
Карта 431
Въпрос
What is a security self-assessment?
Отговор
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Карта 432
Въпрос
What does data masking change?
Отговор
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Карта 433
Въпрос
How do wireless authentication protocols let clients prove identity securely?
Отговор
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Карта 434
Въпрос
Why reconcile inventory with network discovery?
Отговор
Differences expose missing records, retired systems, or unauthorized devices.
Карта 435
Въпрос
Why does sideloading raise mobile risk?
Отговор
It can bypass store review, signing policy, and managed application controls.
Карта 436
Въпрос
What does an information-sharing organization add to vulnerability management?
Отговор
Sector or community intelligence about relevant threats, incidents, and defensive action.
Карта 437
Въпрос
What does a web-filter block rule specify?
Отговор
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Карта 438
Въпрос
How do data custodians and data stewards differ?
Отговор
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Карта 439
Въпрос
What is a brute-force password attack?
Отговор
Systematically trying many candidate secrets against an account or protected value.
Карта 440
Въпрос
What is a compensating control?
Отговор
An alternative safeguard used when the preferred control is impractical or unavailable.
Карта 441
Въпрос
How can location act as an authentication factor?
Отговор
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Карта 442
Въпрос
Why must security automation remain supportable?
Отговор
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Карта 443
Въпрос
What does a standby generator provide?
Отговор
Longer-duration power during a utility outage, after a startup delay.
Карта 444
Въпрос
What makes an architecture air-gapped?
Отговор
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Карта 445
Въпрос
What is a software-defined WAN?
Отговор
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Карта 446
Въпрос
What password-management behavior should awareness training reinforce?
Отговор
Use unique long passwords through an approved manager and report suspected compromise promptly.
Карта 447
Въпрос
What security value does fencing provide?
Отговор
It defines and delays entry across a physical perimeter.
Карта 448
Въпрос
What is a wildcard certificate?
Отговор
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Карта 449
Въпрос
How does misinformation differ from disinformation?
Отговор
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Карта 450
Въпрос
What is a risk threshold?
Отговор
A defined level that triggers escalation, treatment, or another required response.
Карта 451
Въпрос
What does a vendor penetration test contribute to assessment?
Отговор
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Карта 452
Въпрос
What is the objective of a service-disruption attack?
Отговор
Make a system or business function unavailable or unreliable.
Карта 453
Въпрос
What is directory traversal?
Отговор
Manipulating a file path to reach files outside the directory the application intended to expose.
Карта 454
Въпрос
Why decommission an unsupported system?
Отговор
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Карта 455
Въпрос
Why archive security-monitoring data?
Отговор
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Карта 456
Въпрос
What role does RADIUS commonly play in enterprise Wi-Fi?
Отговор
It centralizes authentication, authorization information, and accounting for network access.
Карта 457
Въпрос
Why separate the requester and approver of a high-risk change?
Отговор
To reduce error, fraud, and unilateral unauthorized modification.
Карта 458
Въпрос
Why can a jailbroken device violate a security baseline?
Отговор
It weakens platform isolation and allows unapproved privileged changes.
Карта 459
Въпрос
When is tokenization especially useful?
Отговор
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Карта 460
Въпрос
Why can dark-web intelligence affect vulnerability priority?
Отговор
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Карта 461
Въпрос
What firewall policy should govern traffic from a screened subnet to internal systems?
Отговор
Deny it by default and allow only explicitly required flows.
Карта 462
Въпрос
What does SAML commonly carry?
Отговор
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Карта 463
Въпрос
What does a security governance committee do?
Отговор
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Карта 464
Въпрос
How can global privacy requirements affect one data process?
Отговор
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Карта 465
Въпрос
What characterizes an IoT device?
Отговор
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Карта 466
Въпрос
What is a unified threat management appliance?
Отговор
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Карта 467
Въпрос
What does a hardware security module provide?
Отговор
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Карта 468
Въпрос
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Отговор
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Карта 469
Въпрос
What is a tabletop exercise?
Отговор
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Карта 470
Въпрос
What does a risk exemption authorize?
Отговор
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Карта 471
Въпрос
What is a regulatory examination?
Отговор
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Карта 472
Въпрос
What does physical video surveillance primarily provide?
Отговор
Detection and evidence of activity in monitored areas.
Карта 473
Въпрос
What is a birthday attack against a hash?
Отговор
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Карта 474
Въпрос
Why keep backups both onsite and offsite?
Отговор
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Карта 475
Въпрос
How does technical debt affect security automation?
Отговор
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Карта 476
Въпрос
What should switch hardening restrict first?
Отговор
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Карта 477
Въпрос
What should happen when an asset changes owners?
Отговор
Inventory, access, support responsibility, and data handling should be updated.
Карта 478
Въпрос
What does evidence of a vendor's internal audits contribute?
Отговор
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Карта 479
Въпрос
What is identity attestation?
Отговор
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Карта 480
Въпрос
Why can standard enterprise patching be unsafe for an RTOS device?
Отговор
A change can disrupt timing guarantees or certified operational behavior.
Карта 481
Въпрос
What is secure access service edge?
Отговор
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Карта 482
Въпрос
What social-engineering habit should awareness training reinforce?
Отговор
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Карта 483
Въпрос
How can a software provider introduce a supply-chain vulnerability?
Отговор
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Карта 484
Въпрос
Why include internet exposure in remediation priority?
Отговор
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Карта 485
Въпрос
What does a mail gateway inspect?
Отговор
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Карта 486
Въпрос
What is a data controller?
Отговор
The entity that determines why and how personal data is processed.
Карта 487
Въпрос
How does blackmail motivate a cyberattack?
Отговор
The attacker threatens disclosure or harm unless the victim complies.
Карта 488
Въпрос
What is a downgrade attack?
Отговор
Forcing parties to use an older or weaker protocol or security mode.
Карта 489
Въпрос
How does encryption mitigate data exposure?
Отговор
It makes captured data unreadable without the required key.
Карта 490
Въпрос
How do network and web vulnerability scanners differ?
Отговор
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Карта 491
Въпрос
How can vulnerability-scan data support an investigation?
Отговор
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Карта 492
Въпрос
What is key escrow?
Отговор
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Карта 493
Въпрос
Which human vector commonly uses a fake sign-in page to harvest credentials?
Отговор
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Карта 494
Въпрос
What is risk avoidance?
Отговор
Stopping or not starting the activity that creates the risk.
Карта 495
Въпрос
What is data obfuscation?
Отговор
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Карта 496
Въпрос
What is a directive control?
Отговор
A safeguard that tells people what behavior or action is required.
Карта 497
Въпрос
What does a security guard add that a camera cannot?
Отговор
Human judgment and an immediate physical response.
Карта 498
Въпрос
Why define restricted activities in change management?
Отговор
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Карта 499
Въпрос
What contractual impact can noncompliance create?
Отговор
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Карта 500
Въпрос
What should determine backup frequency?
Отговор
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Карта 501
Въпрос
What should router hardening protect?
Отговор
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Карта 502
Въпрос
What problem does OAuth 2.0 address?
Отговор
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Карта 503
Въпрос
What does SCADA do?
Отговор
It provides supervisory monitoring and control across distributed industrial equipment.
Карта 504
Въпрос
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Отговор
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Карта 505
Въпрос
What distinguishes a computer virus?
Отговор
It attaches to a host file or program and spreads when that infected host executes or is shared.
Карта 506
Въпрос
What does a key management system coordinate?
Отговор
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Карта 507
Въпрос
How can an unsecure wired network expose traffic?
Отговор
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Карта 508
Въпрос
Why is vulnerable device firmware hard to remediate?
Отговор
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Карта 509
Въпрос
What does patching change in vulnerability remediation?
Отговор
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Карта 510
Въпрос
What does DMARC add to SPF and DKIM?
Отговор
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Карта 511
Въпрос
How does automation improve security efficiency?
Отговор
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Карта 512
Въпрос
What is a simulation exercise?
Отговор
A more realistic practice in which participants respond to injected events using operational processes.
Карта 513
Въпрос
What is a data processor?
Отговор
An entity that processes personal data on behalf of a controller.
Карта 514
Въпрос
What is risk mitigation?
Отговор
Reducing likelihood, impact, or both through controls or process changes.
Карта 515
Въпрос
Why monitor a vendor after onboarding?
Отговор
Security posture, ownership, services, incidents, and dependencies can change.
Карта 516
Въпрос
What does a physical penetration test assess?
Отговор
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Карта 517
Въпрос
Why use access badges at a facility?
Отговор
To associate entry attempts with authorized identities and enforce access rules.
Карта 518
Въпрос
How does permission restriction protect data?
Отговор
Only authorized identities receive the actions and scope their roles require.
Карта 519
Въпрос
What is the usual objective of ransomware extortion?
Отговор
Force payment by denying access, threatening disclosure, or both.
Карта 520
Въпрос
What does impossible travel indicate?
Отговор
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Карта 521
Въпрос
What is configuration enforcement?
Отговор
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Карта 522
Въпрос
What does a web vulnerability scanner inspect?
Отговор
Running web behavior for issues such as unsafe input handling and insecure configuration.
Карта 523
Въпрос
How does cost affect an architecture choice?
Отговор
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Карта 524
Въпрос
What does EAP provide with 802.1X?
Отговор
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Карта 525
Въпрос
What should operational-security training help users protect?
Отговор
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Карта 526
Въпрос
What does a time-of-day access rule do?
Отговор
Allows or denies a requested action according to an approved schedule.
Карта 527
Въпрос
What should cloud infrastructure hardening establish?
Отговор
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Карта 528
Въпрос
What should an asset owner ensure during offboarding?
Отговор
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Карта 529
Въпрос
Why encrypt backups?
Отговор
Backup media and transfers can expose the same sensitive data as production systems.
Карта 530
Въпрос
What is steganography?
Отговор
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Карта 531
Въпрос
Which human vector uses a fabricated authority role to justify a sensitive request?
Отговор
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Карта 532
Въпрос
Why does risk transfer not remove accountability?
Отговор
The organization can retain legal, reputational, operational, and oversight consequences.
Карта 533
Въпрос
Why validate a change after deployment?
Отговор
To confirm the intended result occurred without introducing unacceptable side effects.
Карта 534
Въпрос
What makes end-of-life hardware a security vulnerability?
Отговор
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Карта 535
Въпрос
What does an audit add to remediation validation?
Отговор
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Карта 536
Въпрос
Why can SPF pass while a message still impersonates a brand?
Отговор
SPF checks the envelope domain, which may differ from the visible From domain.
Карта 537
Въпрос
What role can a government entity have in security governance?
Отговор
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Карта 538
Въпрос
How do data inventory and retention support privacy governance?
Отговор
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Карта 539
Въпрос
What can concurrent sessions from distant regions indicate?
Отговор
A stolen account or shared credential, subject to VPN and proxy context.
Карта 540
Въпрос
What does supply-chain analysis examine?
Отговор
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Карта 541
Въпрос
What is the purpose of facility lighting as a control?
Отговор
Deter covert activity and improve observation of people and areas.
Карта 542
Въпрос
What architecture quality keeps a service usable during component failure?
Отговор
Availability.
Карта 543
Въпрос
When is fail-open behavior preferable to fail-closed behavior?
Отговор
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Карта 544
Въпрос
Which control function does a login-failure alert provide?
Отговор
Detection; it reveals suspicious authentication activity.
Карта 545
Въпрос
What does a biometric MFA implementation verify?
Отговор
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Карта 546
Въпрос
How can automation enforce a security baseline?
Отговор
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Карта 547
Въпрос
How do wireless cryptographic protocols protect network traffic?
Отговор
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Карта 548
Въпрос
Why segment sensitive data stores?
Отговор
It limits reachable paths and separates them from lower-trust workloads.
Карта 549
Въпрос
What must remain secret in an asymmetric key pair?
Отговор
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Карта 550
Въпрос
How can a supplier become a supply-chain attack vector?
Отговор
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Карта 551
Въпрос
What is e-discovery?
Отговор
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Карта 552
Въпрос
What characterizes a neutral risk appetite?
Отговор
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Карта 553
Въпрос
What is passive reconnaissance?
Отговор
Gathering information without directly interacting with the target's systems.
Карта 554
Въпрос
What does a philosophical motive mean for a threat actor?
Отговор
The actor acts to advance a belief or moral position rather than primarily for money.
Карта 555
Въпрос
What does unexpected resource consumption indicate?
Отговор
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Карта 556
Въпрос
What does a host-based intrusion prevention system do?
Отговор
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Карта 557
Въпрос
How does agent-based monitoring differ from agentless monitoring?
Отговор
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Карта 558
Въпрос
What can network logs contribute to an investigation?
Отговор
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Карта 559
Въпрос
What is the purpose of a backup restore test?
Отговор
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Карта 560
Въпрос
Why can obsolete hardware become a security risk?
Отговор
It may lack supported firmware, modern protections, or replacement parts.
Карта 561
Въпрос
What does rescanning confirm after remediation?
Отговор
Whether the scanner can still detect the original finding on the affected asset.
Карта 562
Въпрос
What should a secure transport method provide?
Отговор
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Карта 563
Въпрос
How can law affect security governance?
Отговор
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Карта 564
Въпрос
What does resilience mean for a security architecture?
Отговор
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Карта 565
Въпрос
Why minimize an infrastructure's attack surface?
Отговор
Fewer exposed services and paths leave fewer opportunities for exploitation.
Карта 566
Въпрос
What does executing a security-awareness program require?
Отговор
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Карта 567
Въпрос
What does an infrared security sensor detect?
Отговор
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Карта 568
Въпрос
What is a knowledge factor?
Отговор
Something the claimant knows, such as a password.
Карта 569
Въпрос
Why review allow-list and deny-list impact before a change?
Отговор
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Карта 570
Въпрос
What does partition-level encryption protect?
Отговор
One selected disk partition, leaving other partitions outside that encryption boundary.
Карта 571
Въпрос
How can instant messaging deliver a security attack?
Отговор
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Карта 572
Въпрос
What can repeated blocked-content events indicate?
Отговор
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Карта 573
Въпрос
What should a server-hardening baseline reduce?
Отговор
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Карта 574
Въпрос
When is physical media destruction appropriate?
Отговор
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Карта 575
Въпрос
What is mean time to repair?
Отговор
The average time required to restore a failed component or service.
Карта 576
Въпрос
Why disclose conflicts of interest during vendor selection?
Отговор
A personal or financial relationship can bias evaluation away from the organization's requirements.
Карта 577
Въпрос
What is a fine for noncompliance?
Отговор
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Карта 578
Въпрос
What does a public data classification authorize?
Отговор
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Карта 579
Въпрос
What security benefit comes from standard infrastructure configurations?
Отговор
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Карта 580
Въпрос
How does horizontal scaling increase capacity?
Отговор
It adds more service instances and distributes work among them.
Карта 581
Въпрос
Why can added connectivity weaken segmentation?
Отговор
Each allowed path can become a route for lateral movement or data escape.
Карта 582
Въпрос
What coding practice is central to preventing SQL injection?
Отговор
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Карта 583
Въпрос
When is a compensating control appropriate for a vulnerability?
Отговор
When timely removal or patching is infeasible and another control can reduce the risk.
Карта 584
Въпрос
How does agent-based web filtering enforce policy?
Отговор
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Карта 585
Въпрос
How can regulation differ from an internal policy?
Отговор
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Карта 586
Въпрос
What is a storage snapshot?
Отговор
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Карта 587
Въпрос
What does password age measure?
Отговор
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Карта 588
Въпрос
What does an ethical motive mean in vulnerability research?
Отговор
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Карта 589
Въпрос
What can missing security logs indicate?
Отговор
Logging failure, tampering, retention misconfiguration, or an inactive source.
Карта 590
Въпрос
Why disable unused ports and protocols?
Отговор
They expose unnecessary communication paths and code that attackers can reach.
Карта 591
Въпрос
What does antivirus contribute to monitoring?
Отговор
It scans files, memory, or behavior and reports suspected malicious code.
Карта 592
Въпрос
What is a honeypot?
Отговор
A decoy system or service designed to attract and observe malicious activity.
Карта 593
Въпрос
What does file-level encryption protect?
Отговор
Selected files independently of whether the rest of the disk or volume is encrypted.
Карта 594
Въпрос
How can SMS deliver a security attack?
Отговор
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Карта 595
Въпрос
What happens during incident analysis?
Отговор
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Карта 596
Въпрос
What is mean time between failures?
Отговор
The average operating time between repairable failures.
Карта 597
Въпрос
What is active reconnaissance?
Отговор
Probing or interacting with target systems to discover services and behavior.
Карта 598
Въпрос
What constraint should guide ICS or SCADA hardening?
Отговор
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Карта 599
Въпрос
Which control function does restoring a clean system image provide?
Отговор
Correction; it returns the system to a known-good state.
Карта 600
Въпрос
What does responsiveness mean in an architecture decision?
Отговор
How quickly the system and its operators can adapt to demand, failure, or attack.
Карта 601
Въпрос
How does out-of-band access strengthen remote administration?
Отговор
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Карта 602
Въпрос
What makes user behavior unexpected?
Отговор
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Карта 603
Въпрос
What is a work order?
Отговор
A document authorizing a defined unit of work under an existing agreement.
Карта 604
Въпрос
What can out-of-cycle logging indicate?
Отговор
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Карта 605
Въпрос
Why update a standard operating procedure after a change?
Отговор
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Карта 606
Въпрос
What coding practice limits cross-site scripting?
Отговор
Context-appropriate output encoding, supported by safe templating and input handling.
Карта 607
Въпрос
What does a restricted data classification indicate?
Отговор
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Карта 608
Въпрос
How does a bug bounty support responsible disclosure?
Отговор
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Карта 609
Въпрос
What does web-filter content categorization provide?
Отговор
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Карта 610
Въпрос
How do hard and soft authentication tokens differ?
Отговор
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Карта 611
Въпрос
How can industry requirements affect security governance?
Отговор
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Карта 612
Въпрос
How can noncompliance cause loss of a license?
Отговор
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Карта 613
Въпрос
What does volume-level encryption protect?
Отговор
All data within a selected logical storage volume.
Карта 614
Въпрос
How can impersonation exploit familiarity?
Отговор
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Карта 615
Въпрос
How does RTO guide recovery design?
Отговор
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Карта 616
Въпрос
What is a honeynet?
Отговор
A network of decoy systems used to study or divert attackers.
Карта 617
Въпрос
What does backup replication provide?
Отговор
Additional synchronized or copied recovery data in another system or location.
Карта 618
Въпрос
What lets automation scale securely?
Отговор
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Карта 619
Въпрос
Why monitor a hardened computing resource continuously?
Отговор
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Карта 620
Въпрос
Why keep a certificate of destruction?
Отговор
It documents that a disposal provider handled specified media under the agreed process.
Карта 621
Въпрос
Why consider patch availability before selecting a platform?
Отговор
Unsupported or difficult-to-update components accumulate known exposure.
Карта 622
Въпрос
Why should remote administration use an encrypted, authenticated protocol?
Отговор
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Карта 623
Въпрос
How can revenge motivate an insider incident?
Отговор
A disgruntled person may damage systems or disclose data to punish the organization.
Карта 624
Въпрос
What is a published or documented indicator of malicious activity?
Отговор
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Карта 625
Въпрос
Why monitor a system more closely when a mitigation exception is accepted?
Отговор
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Карта 626
Въпрос
What is an SNMP trap?
Отговор
An unsolicited device notification sent to a management system when a configured event occurs.
Карта 627
Въпрос
How can an automated report support an investigation?
Отговор
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Карта 628
Въпрос
What is a security key?
Отговор
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Карта 629
Въпрос
What does database-level encryption protect?
Отговор
A database or selected database structures through controls managed at the database layer.
Карта 630
Въпрос
How does brand impersonation exploit trust?
Отговор
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Карта 631
Въпрос
What browser-side impact can a cross-site scripting vulnerability create?
Отговор
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Карта 632
Въпрос
How can a system or process audit identify vulnerabilities?
Отговор
It compares evidence with required configuration and procedure to reveal control gaps.
Карта 633
Въпрос
What security role can Group Policy provide?
Отговор
Centralized Windows configuration of account, application, audit, and system security settings.
Карта 634
Въпрос
What should incident-response training prepare people to do?
Отговор
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Карта 635
Въпрос
Why must governance track local or regional requirements?
Отговор
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Карта 636
Въпрос
How can a dependency become a useful key risk indicator?
Отговор
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Карта 637
Въпрос
What is a business partners agreement?
Отговор
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Карта 638
Въпрос
What makes an audit regulatory?
Отговор
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Карта 639
Въпрос
What is a honeyfile?
Отговор
A decoy file whose access can reveal unauthorized activity.
Карта 640
Въпрос
Why does legal information require explicit protection?
Отговор
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Карта 641
Въпрос
Which indicator can mass file renaming and encryption produce?
Отговор
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Карта 642
Въпрос
What remains with an organization after transferring architecture risk?
Отговор
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Карта 643
Въпрос
When does local console placement provide useful administrative access?
Отговор
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Карта 644
Въпрос
What makes a harmful user action unintentional?
Отговор
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Карта 645
Въпрос
How should an organization harden workstations?
Отговор
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Карта 646
Въпрос
What is journaling in recovery?
Отговор
Recording ordered changes so data can be replayed or restored to a consistent point.
Карта 647
Въпрос
What downtime must a change plan account for?
Отговор
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Карта 648
Въпрос
Why must a privacy program map local or regional law to data flows?
Отговор
The applicable duties can change with the location of the person, organization, processing, or stored data.
Карта 649
Въпрос
Why combine independent preventive controls at different layers?
Отговор
A failure at one layer does not automatically let the same attack succeed at the next layer.
Карта 650
Въпрос
What is passwordless authentication?
Отговор
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Карта 651
Въпрос
How can automation improve security reaction time?
Отговор
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Карта 652
Въпрос
What does record-level encryption protect?
Отговор
Individual records or fields, allowing finer protection than encrypting the entire database.
Карта 653
Въпрос
How can business email compromise misuse urgency?
Отговор
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Карта 654
Въпрос
What does impact measure in risk analysis?
Отговор
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Карта 655
Въпрос
What makes cyber activity part of warfare?
Отговор
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Карта 656
Въпрос
Which indicator can a newly created privileged account produce outside the normal change window?
Отговор
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Карта 657
Въпрос
How can configuration enforcement validate a deployed mitigation?
Отговор
It compares the realized settings with the approved state and corrects or reports drift.
Карта 658
Въпрос
How does validating an alert improve alert tuning?
Отговор
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Карта 659
Въпрос
What data-layer impact can a SQL injection vulnerability create?
Отговор
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Карта 660
Въпрос
What environmental variables can change vulnerability priority?
Отговор
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Карта 661
Въпрос
What security role does SELinux provide?
Отговор
Mandatory access controls that confine processes according to centrally defined policy.
Карта 662
Въпрос
Why review governance documents periodically?
Отговор
Business, technology, threats, and external obligations change.
Карта 663
Въпрос
Why evaluate power requirements for a system design?
Отговор
Power capacity and redundancy constrain availability and recovery.
Карта 664
Въпрос
When is IPsec a better tunnel choice than TLS?
Отговор
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Карта 665
Въпрос
What is a honeytoken?
Отговор
A fake credential or data element that generates a high-confidence alert when used.
Карта 666
Въпрос
What should embedded-system hardening prioritize?
Отговор
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Карта 667
Въпрос
Why must sanitization address data remanence?
Отговор
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Карта 668
Въпрос
Why require rules of engagement for vendor testing?
Отговор
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Карта 669
Въпрос
What does a private data classification indicate?
Отговор
The information concerns an individual or limited internal audience and should not be exposed publicly.
Карта 670
Въпрос
What does a tabletop recovery exercise test?
Отговор
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Карта 671
Въпрос
Why prevent password reuse?
Отговор
One compromised password should not unlock other accounts or services.
Карта 672
Въпрос
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Отговор
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Карта 673
Въпрос
What does transport encryption protect?
Отговор
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Карта 674
Въпрос
How can a voice call become an attack vector?
Отговор
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Карта 675
Въпрос
What should a digital-forensics report document?
Отговор
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Карта 676
Въпрос
What tradeoff comes with an expansionary risk appetite?
Отговор
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Карта 677
Въпрос
What does a known penetration-test environment provide?
Отговор
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Карта 678
Въпрос
Why evaluate compute requirements before deployment?
Отговор
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Карта 679
Въпрос
Why place sensors at network choke points?
Отговор
They can observe traffic crossing important trust boundaries.
Карта 680
Въпрос
What should hybrid or remote-work security training emphasize?
Отговор
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Карта 681
Въпрос
Why plan an application restart separately from a service restart?
Отговор
The application may need its own state handling, user coordination, health checks, and rollback point.
Карта 682
Въпрос
What is a cryptographic vulnerability?
Отговор
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Карта 683
Въпрос
Why report findings by asset owner?
Отговор
Owners need clear accountability and a prioritized remediation queue.
Карта 684
Въпрос
What should guide selection of a secure protocol?
Отговор
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Карта 685
Въпрос
How do centralized and decentralized governance structures differ?
Отговор
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Карта 686
Въпрос
How does privacy-aware design limit data retention?
Отговор
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Карта 687
Въпрос
What does a pressure security sensor detect?
Отговор
Force or weight applied to a protected surface, such as a floor mat or fence line.
Карта 688
Въпрос
What automation costs should a security team plan for?
Отговор
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Карта 689
Въпрос
What should RTOS hardening preserve while reducing attack surface?
Отговор
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Карта 690
Въпрос
What is the goal of disruption-for-chaos activity?
Отговор
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Карта 691
Въпрос
Which indicator can repeated password guessing produce?
Отговор
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Карта 692
Въпрос
How does removing unnecessary software harden a system?
Отговор
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Карта 693
Въпрос
What does NetFlow provide?
Отговор
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Карта 694
Въпрос
How can a dashboard support an investigation?
Отговор
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Карта 695
Въпрос
When should a password be expired?
Отговор
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Карта 696
Въпрос
Why does cryptographic key length matter?
Отговор
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Карта 697
Въпрос
How can an unsecure Bluetooth connection become an attack vector?
Отговор
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Карта 698
Въпрос
What is a key risk indicator?
Отговор
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Карта 699
Въпрос
What should vendor monitoring verify when a contract ends?
Отговор
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Карта 700
Въпрос
What does a sensitive data classification indicate?
Отговор
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Карта 701
Въпрос
What does software-defined networking separate?
Отговор
The control plane that decides traffic behavior from the data plane that forwards traffic.
Карта 702
Въпрос
Where should a web application firewall be placed?
Отговор
In the path of web requests before they reach the protected application.
Карта 703
Въпрос
What does a simulated recovery exercise test?
Отговор
Participants perform realistic response actions in a controlled environment without disrupting production.
Карта 704
Въпрос
How can a team verify that a detective control is effective?
Отговор
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Карта 705
Въпрос
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Отговор
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Карта 706
Въпрос
What makes a vulnerability cloud-specific?
Отговор
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Карта 707
Въпрос
How can insurance respond to vulnerability risk?
Отговор
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Карта 708
Въпрос
How does reputation improve web filtering?
Отговор
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Карта 709
Въпрос
What does an encryption policy establish?
Отговор
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Карта 710
Въпрос
How does a microwave security sensor detect movement?
Отговор
It emits microwave energy and detects changes in the reflected signal caused by motion.
Карта 711
Въпрос
What should IoT-device hardening change before deployment?
Отговор
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Карта 712
Въпрос
Why track software licenses as assets?
Отговор
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Карта 713
Въпрос
What does a password manager improve?
Отговор
It can generate and store unique long passwords so users do not memorize or reuse them.
Карта 714
Въпрос
What makes a ledger open and public?
Отговор
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Карта 715
Въпрос
What should a payment-change request trigger?
Отговор
Independent verification through a known channel before any account or payment detail is changed.
Карта 716
Въпрос
What does preserving digital evidence require?
Отговор
Protecting its integrity, context, access history, and availability from collection through final disposition.
Карта 717
Въпрос
What should a risk report tell decision-makers?
Отговор
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Карта 718
Въпрос
What should an external assessment report provide?
Отговор
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Карта 719
Въпрос
What is a centralized design's main resilience risk?
Отговор
A central dependency can become a bottleneck or single point of failure.
Карта 720
Въпрос
What does mutual TLS add to a TLS-protected service connection?
Отговор
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Карта 721
Въпрос
What should recurring security-awareness reporting show?
Отговор
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Карта 722
Въпрос
Why do legacy applications require extra change planning?
Отговор
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Карта 723
Въпрос
How do a data controller and a data processor differ?
Отговор
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Карта 724
Въпрос
How can orchestration become a single point of failure?
Отговор
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Карта 725
Въпрос
Why should defenses account for a threat actor's sophistication and capability?
Отговор
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Карта 726
Въпрос
How does an injection attack make an application execute unintended instructions?
Отговор
It sends crafted input that an interpreter treats as code or commands instead of data.
Карта 727
Въпрос
What does a host-based firewall control?
Отговор
Inbound and outbound network traffic for one endpoint according to local rules.
Карта 728
Въпрос
Why revise alerting after an incident?
Отговор
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Карта 729
Въпрос
Why include security duties in procurement criteria?
Отговор
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Карта 730
Въпрос
What does a critical data classification indicate?
Отговор
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Карта 731
Въпрос
What infrastructure capacity must support failover?
Отговор
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Карта 732
Въпрос
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Отговор
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Карта 733
Въпрос
How does a remediation exemption differ from an exception?
Отговор
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Карта 734
Въпрос
Why should automated EDR or XDR blocking have an exception and rollback path?
Отговор
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Карта 735
Въпрос
What does a security playbook provide?
Отговор
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Карта 736
Въпрос
How does an ultrasonic security sensor detect movement?
Отговор
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Карта 737
Въпрос
What should a managed mobile device require for Bluetooth connections?
Отговор
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Карта 738
Въпрос
How do password complexity rules differ from password length?
Отговор
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Карта 739
Въпрос
What makes a certificate third-party trusted?
Отговор
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Карта 740
Въпрос
Why is an out-of-band check effective against impersonation?
Отговор
It verifies the request through a separate, previously trusted communication path.
Карта 741
Въпрос
What does a risk exception authorize?
Отговор
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Карта 742
Въпрос
What security challenge grows in a decentralized design?
Отговор
Consistent policy, inventory, monitoring, and patching become harder.
Карта 743
Въпрос
How should controls be selected for an unused network path?
Отговор
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Карта 744
Въпрос
How can a buffer-overflow attack affect an application?
Отговор
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 карти
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo се отваря, за да започнете да учите.