CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
Sellest kaardipakist
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Selle kaardipaki kaardid
Kaart 1
Küsimus
What does an information security policy establish?
Vastus
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kaart 2
Küsimus
What is phishing?
Vastus
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kaart 3
Küsimus
What does a public-key certificate bind to an identity?
Vastus
A public key, together with identifying information and the issuer's signature.
Kaart 4
Küsimus
What is data at rest?
Vastus
Data stored on media such as disks, databases, backups, or mobile devices.
Kaart 5
Küsimus
How does policy-driven access control decide a zero-trust access request?
Vastus
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kaart 6
Küsimus
What does establishing a secure baseline produce?
Vastus
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kaart 7
Küsimus
What is hashing used to verify?
Vastus
Whether data has changed by comparing fixed-length digest values.
Kaart 8
Küsimus
What is impersonation in social engineering?
Vastus
Pretending to be a trusted person or organization to obtain access, data, or action.
Kaart 9
Küsimus
What is virtualization?
Vastus
Abstracting physical compute so multiple isolated guest systems can share a host.
Kaart 10
Küsimus
What is chain of custody?
Vastus
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kaart 11
Küsimus
What is quantitative risk analysis?
Vastus
Estimating risk with numerical values such as money, frequency, or probability.
Kaart 12
Küsimus
What is a phishing awareness campaign?
Vastus
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kaart 13
Küsimus
What is high availability?
Vastus
Designing a service to remain accessible despite expected component failures.
Kaart 14
Küsimus
What is a network security zone?
Vastus
A group of systems with similar trust, function, or control requirements.
Kaart 15
Küsimus
What is risk transfer?
Vastus
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kaart 16
Küsimus
What is media sanitization?
Vastus
Making stored data infeasible to recover for the intended level of protection.
Kaart 17
Küsimus
What does CVSS provide?
Vastus
A standardized way to describe a vulnerability's technical severity characteristics.
Kaart 18
Küsimus
What does security alerting do?
Vastus
It turns matched events or behavior into a notification that the right responder can review.
Kaart 19
Küsimus
What does a firewall rule enforce?
Vastus
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kaart 20
Küsimus
What is deprovisioning?
Vastus
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kaart 21
Küsimus
How does inline placement differ from a tap or monitor port?
Vastus
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kaart 22
Küsimus
What is asymmetric encryption?
Vastus
Encryption that uses a mathematically related public and private key pair.
Kaart 23
Küsimus
What does SPF authorize?
Vastus
Which mail servers may send mail for a domain in the SMTP envelope.
Kaart 24
Küsimus
What is a possession factor?
Vastus
Something the claimant has, such as a cryptographic authenticator.
Kaart 25
Küsimus
What does ordinary TLS usually protect and authenticate?
Vastus
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kaart 26
Küsimus
What is single loss expectancy?
Vastus
The estimated loss from one occurrence of a risk event.
Kaart 27
Küsimus
What does a certificate authority do?
Vastus
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kaart 28
Küsimus
What is a detective control meant to do?
Vastus
Identify that an unwanted event has happened or is happening.
Kaart 29
Küsimus
What is the security purpose of change-control approval?
Vastus
Ensure authorized reviewers assess risk before the production change occurs.
Kaart 30
Küsimus
What is shadow IT?
Vastus
Technology used for organizational work without required approval or oversight.
Kaart 31
Küsimus
What is a buffer overflow vulnerability?
Vastus
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kaart 32
Küsimus
What is ransomware?
Vastus
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kaart 33
Küsimus
How does network segmentation limit an incident?
Vastus
It restricts communication paths and reduces lateral movement between zones.
Kaart 34
Küsimus
How do load balancing and clustering support availability differently?
Vastus
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kaart 35
Küsimus
What is vendor due diligence?
Vastus
Evaluating a provider's security, capability, stability, and fit before commitment.
Kaart 36
Küsimus
Who is a data subject?
Vastus
The person whose personal data is collected or processed.
Kaart 37
Küsimus
What is attestation?
Vastus
A formal assertion or report about a subject matter, often supported by an independent examination.
Kaart 38
Küsimus
What is a replay attack?
Vastus
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kaart 39
Küsimus
What does a wireless site survey establish?
Vastus
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kaart 40
Küsimus
What is the time-of-check stage of a race-condition vulnerability?
Vastus
The application verifies a condition or resource state before acting on it.
Kaart 41
Küsimus
What is a penetration test?
Vastus
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kaart 42
Küsimus
What is a cold recovery site?
Vastus
A facility with basic space and utilities but little preinstalled technology or current data.
Kaart 43
Küsimus
What is data in transit?
Vastus
Data moving between systems or across a network.
Kaart 44
Küsimus
What is a vendor security questionnaire?
Vastus
A structured request for information about a provider's controls and practices.
Kaart 45
Küsimus
How does an internal actor's starting position differ from an external actor's?
Vastus
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kaart 46
Küsimus
What can unexpected account lockouts indicate?
Vastus
Password guessing, credential stuffing, user error, or a broken client.
Kaart 47
Küsimus
How do permissions enforce access control?
Vastus
They specify which actions a subject may perform on a particular resource.
Kaart 48
Küsimus
What is log aggregation?
Vastus
Central collection of logs from multiple sources for search, correlation, and retention.
Kaart 49
Küsimus
Why plan a service restart as part of a change?
Vastus
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kaart 50
Küsimus
What is infrastructure as code?
Vastus
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kaart 51
Küsimus
What should security-awareness program development start with?
Vastus
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kaart 52
Küsimus
What is a voice-based social-engineering attack called?
Vastus
Vishing.
Kaart 53
Küsimus
What happens during incident-response preparation?
Vastus
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kaart 54
Küsimus
What does an offensive penetration-testing team do?
Vastus
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kaart 55
Küsimus
What is federation?
Vastus
One security domain relies on identity assertions from another trusted domain.
Kaart 56
Küsimus
What is asset classification?
Vastus
Grouping an asset by sensitivity, criticality, or required handling.
Kaart 57
Küsimus
What is cross-site scripting?
Vastus
Injection of script-capable content that a browser executes in another site's security context.
Kaart 58
Küsimus
What can IDS or IPS trends reveal?
Vastus
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kaart 59
Küsimus
What can unexpected resource inaccessibility indicate?
Vastus
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kaart 60
Küsimus
What is a corrective control meant to do?
Vastus
Limit damage and restore a secure state after an event.
Kaart 61
Küsimus
How do containers differ from virtual machines?
Vastus
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kaart 62
Küsimus
How does an active security device differ from a passive one?
Vastus
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kaart 63
Küsimus
Why is unsupported software a persistent attack surface?
Vastus
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kaart 64
Küsimus
What is annualized rate of occurrence?
Vastus
The estimated number of times a risk event occurs per year.
Kaart 65
Küsimus
What is an inherence factor?
Vastus
A biometric characteristic of the claimant.
Kaart 66
Küsimus
What do a threat actor's sophistication and capability describe?
Vastus
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kaart 67
Küsimus
What is a SIEM?
Vastus
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kaart 68
Küsimus
What is sideloading?
Vastus
Installing software from outside the platform's approved distribution path.
Kaart 69
Küsimus
What does an IDS or IPS signature match?
Vastus
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kaart 70
Küsimus
Why are embedded systems often difficult to patch?
Vastus
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kaart 71
Küsimus
What is a virtual private network?
Vastus
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kaart 72
Küsimus
What should an initial security-awareness report establish?
Vastus
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kaart 73
Küsimus
What is symmetric encryption?
Vastus
Encryption that uses the same secret key to encrypt and decrypt data.
Kaart 74
Küsimus
What happens during incident detection?
Vastus
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kaart 75
Küsimus
What is recovery time objective?
Vastus
The target maximum time to restore a function after disruption.
Kaart 76
Küsimus
Why prioritize password length?
Vastus
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kaart 77
Küsimus
What must sanitization accomplish before an asset leaves organizational control?
Vastus
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kaart 78
Küsimus
What is a real-time operating system designed to provide?
Vastus
Predictable response timing for tasks with strict deadlines.
Kaart 79
Küsimus
What does fail-open behavior do when a control fails?
Vastus
It permits traffic or access to preserve availability.
Kaart 80
Küsimus
What is jailbreaking or rooting a mobile device?
Vastus
Removing platform restrictions to gain privileged control over the operating system.
Kaart 81
Küsimus
What does network access control enforce?
Vastus
Identity, device posture, and access policy at network connection time and during a session.
Kaart 82
Küsimus
What does data loss prevention do?
Vastus
Detects and may block sensitive data use or transfer that violates policy.
Kaart 83
Küsimus
What security property does a blockchain provide?
Vastus
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kaart 84
Küsimus
What is recovery point objective?
Vastus
The target maximum acceptable data loss measured backward in time.
Kaart 85
Küsimus
How do ICS and SCADA relate?
Vastus
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kaart 86
Küsimus
What does fail-closed behavior do when a control fails?
Vastus
It denies traffic or access to preserve security.
Kaart 87
Küsimus
Which keys create and verify a typical digital signature?
Vastus
The signer creates it with a private key, and others verify it with the corresponding public key.
Kaart 88
Küsimus
What is SQL injection?
Vastus
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kaart 89
Küsimus
What does DKIM verify?
Vastus
That selected message content was signed by a domain and was not altered after signing.
Kaart 90
Küsimus
What is post-incident activity?
Vastus
Learning from the event and improving controls, plans, and recovery based on evidence.
Kaart 91
Küsimus
What characterizes an expansionary risk appetite?
Vastus
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kaart 92
Küsimus
How do centralized and decentralized architectures differ?
Vastus
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kaart 93
Küsimus
What does a certificate revocation list publish?
Vastus
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kaart 94
Küsimus
What is a legal hold?
Vastus
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kaart 95
Küsimus
What is exposure factor in quantitative risk analysis?
Vastus
The estimated percentage of an asset's value lost in one event.
Kaart 96
Küsimus
What is decentralized architecture?
Vastus
Control or service responsibility is distributed across multiple independent components or locations.
Kaart 97
Küsimus
What is tokenization?
Vastus
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kaart 98
Küsimus
How can automation act as a workforce multiplier?
Vastus
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kaart 99
Küsimus
What can endpoint process logs reveal?
Vastus
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kaart 100
Küsimus
What does the CIA triad protect?
Vastus
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kaart 101
Küsimus
How does data masking protect information?
Vastus
It hides selected values or characters while preserving a usable representation.
Kaart 102
Küsimus
How can a national requirement affect security governance?
Vastus
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kaart 103
Küsimus
What do integrations and APIs provide to security orchestration?
Vastus
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kaart 104
Küsimus
What makes a compliance report external?
Vastus
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kaart 105
Küsimus
What does a cryptographic algorithm define?
Vastus
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kaart 106
Küsimus
Why compare systems with a secure baseline regularly?
Vastus
To detect drift, unauthorized changes, and missing hardening.
Kaart 107
Küsimus
What does integrity protect?
Vastus
The accuracy and completeness of data and systems against unauthorized change.
Kaart 108
Küsimus
What does vulnerability classification organize?
Vastus
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kaart 109
Küsimus
What does a password standard define?
Vastus
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kaart 110
Küsimus
What technology capacity must a recovery design plan for?
Vastus
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kaart 111
Küsimus
What does a confidential data classification indicate?
Vastus
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kaart 112
Küsimus
What makes a vendor assessment independent?
Vastus
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kaart 113
Küsimus
What lets a worm spread without attaching itself to another file?
Vastus
It is a standalone program that replicates across reachable systems or services.
Kaart 114
Küsimus
What is microsegmentation?
Vastus
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kaart 115
Küsimus
What can application logs reveal?
Vastus
Transactions, errors, user actions, and application-specific security events.
Kaart 116
Küsimus
What does deploying a secure baseline require?
Vastus
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kaart 117
Küsimus
How can resource-provisioning automation improve security?
Vastus
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kaart 118
Küsimus
What does availability protect?
Vastus
Reliable, timely access to systems and data when authorized users need them.
Kaart 119
Küsimus
Why must a change request describe business impact?
Vastus
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kaart 120
Küsimus
What does an authenticated vulnerability scan add?
Vastus
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kaart 121
Küsimus
What does a change-management procedure specify?
Vastus
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kaart 122
Küsimus
What is a sanction for noncompliance?
Vastus
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kaart 123
Küsimus
How can email deliver a security attack?
Vastus
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kaart 124
Küsimus
What is an internal compliance audit?
Vastus
An organization-led examination of whether selected operations and controls meet defined requirements.
Kaart 125
Küsimus
What is a Trojan?
Vastus
Malware disguised as legitimate or desirable software.
Kaart 126
Küsimus
What is clustering?
Vastus
Multiple systems work together to provide a service and tolerate member failure.
Kaart 127
Küsimus
What makes data regulated?
Vastus
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kaart 128
Küsimus
What does a wireless heat map show?
Vastus
Measured or modeled signal strength and coverage across a physical area.
Kaart 129
Küsimus
How should vendor criticality affect due diligence?
Vastus
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kaart 130
Küsimus
How can a digital signature support non-repudiation?
Vastus
It provides evidence that the holder of a private key signed specific data.
Kaart 131
Küsimus
What should vulnerability prioritization consider beyond severity?
Vastus
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kaart 132
Küsimus
What is a security guideline?
Vastus
Recommended practice that allows judgment unless adopted as a requirement.
Kaart 133
Küsimus
What usually distinguishes a nation-state threat actor?
Vastus
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kaart 134
Küsimus
What is spyware?
Vastus
Software that secretly collects information about a user or system.
Kaart 135
Küsimus
Why maintain an allow list for applications?
Vastus
Only explicitly approved software is permitted to execute.
Kaart 136
Küsimus
How can an image become an attack vector?
Vastus
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kaart 137
Küsimus
What makes a security control technical?
Vastus
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kaart 138
Küsimus
What is identity proofing?
Vastus
Establishing that a person is who they claim to be before issuing an account or credential.
Kaart 139
Küsimus
What is an automated security guardrail?
Vastus
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kaart 140
Küsimus
Why assign an owner to a planned change?
Vastus
To make one party accountable for coordination, execution, and follow-through.
Kaart 141
Küsimus
How can national privacy law affect data handling?
Vastus
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kaart 142
Küsimus
What is continuity of operations?
Vastus
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kaart 143
Küsimus
What security tradeoff comes with BYOD?
Vastus
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kaart 144
Küsimus
How should policies and handbooks support security training?
Vastus
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kaart 145
Küsimus
What is a keylogger?
Vastus
A tool that records keystrokes to capture data such as credentials.
Kaart 146
Küsimus
What makes information a trade secret?
Vastus
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kaart 147
Küsimus
What does authentication establish?
Vastus
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kaart 148
Küsimus
What risk comes from an untrusted file attachment?
Vastus
Opening or parsing it can execute malicious code or expose data.
Kaart 149
Küsimus
How does risk tolerance affect vulnerability remediation?
Vastus
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kaart 150
Küsimus
How can a global requirement affect security governance?
Vastus
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kaart 151
Küsimus
Why should questionnaire answers be supported by evidence?
Vastus
Self-assertions alone may not prove that controls are designed or operating effectively.
Kaart 152
Küsimus
What is an independent third-party audit?
Vastus
An external party with suitable independence examines evidence against defined criteria.
Kaart 153
Küsimus
What do account provisioning and deprovisioning do?
Vastus
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kaart 154
Küsimus
What is an unskilled attacker commonly called?
Vastus
A script kiddie: someone who relies on tools or instructions created by others.
Kaart 155
Küsimus
What is a rootkit?
Vastus
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kaart 156
Küsimus
What does an access control list enforce?
Vastus
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kaart 157
Küsimus
What should system security monitoring observe?
Vastus
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kaart 158
Küsimus
What can operating-system security logs reveal?
Vastus
Authentication, privilege use, policy changes, services, and other host security events.
Kaart 159
Küsimus
Why isolate operational technology from general business networks?
Vastus
To limit attack paths into safety- and availability-critical processes.
Kaart 160
Küsimus
What is the COPE mobile deployment model?
Vastus
The organization owns the device but permits defined personal use while retaining management control.
Kaart 161
Küsimus
What security work belongs in asset acquisition and procurement?
Vastus
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kaart 162
Küsimus
How can user-provisioning automation improve security?
Vastus
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kaart 163
Küsimus
What people capacity must a continuity plan account for?
Vastus
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kaart 164
Küsimus
What do authorization models define?
Vastus
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kaart 165
Küsimus
Why are removable devices an attack vector?
Vastus
They can introduce malware or remove data while bypassing network controls.
Kaart 166
Küsimus
What should predeployment change-test results show?
Vastus
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kaart 167
Küsimus
What is the time-of-use stage of a race-condition vulnerability?
Vastus
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kaart 168
Küsimus
What is data in use?
Vastus
Data actively processed in memory or by an application.
Kaart 169
Küsimus
What does open-source vulnerability intelligence contribute?
Vastus
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kaart 170
Küsimus
What can file-integrity monitoring detect?
Vastus
Unexpected changes to protected files, directories, or configuration.
Kaart 171
Küsimus
Why should deprovisioning be prompt?
Vastus
Former users or roles should not retain usable access.
Kaart 172
Küsimus
What is an acceptable use policy?
Vastus
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kaart 173
Küsimus
What makes a compliance report internal?
Vastus
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kaart 174
Küsimus
What is a logic bomb?
Vastus
Malicious code that activates when a specified condition or time is reached.
Kaart 175
Küsimus
What does a right-to-audit clause provide?
Vastus
Contractual authority to inspect or obtain evidence about agreed controls.
Kaart 176
Küsimus
Where should a forward proxy sit in an enterprise traffic path?
Vastus
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kaart 177
Küsimus
Which cues should make a message look suspicious?
Vastus
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kaart 178
Küsimus
What makes a security control managerial?
Vastus
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kaart 179
Küsimus
What is the CYOD mobile deployment model?
Vastus
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kaart 180
Küsimus
How does client-based vulnerable software differ from an agentless exposure?
Vastus
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kaart 181
Küsimus
What makes a risk assessment recurring?
Vastus
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kaart 182
Küsimus
What does a defensive penetration-testing team practice?
Vastus
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kaart 183
Küsimus
In a zero-trust data plane, what can the subject or system represent?
Vastus
The user, device, workload, or service requesting access to a protected resource.
Kaart 184
Küsimus
What primarily motivates a hacktivist?
Vastus
A political, social, or ideological cause.
Kaart 185
Küsimus
What is bloatware?
Vastus
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kaart 186
Küsimus
Why keep endpoint-protection signatures and engines current?
Vastus
They need current detection logic to recognize newly identified malware and exploit behavior.
Kaart 187
Küsimus
What should application security monitoring observe?
Vastus
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kaart 188
Küsimus
What is role-based access control?
Vastus
Permissions are assigned to roles, and identities receive access through their roles.
Kaart 189
Küsimus
What is geographic dispersal?
Vastus
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kaart 190
Küsimus
What is a malicious update?
Vastus
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kaart 191
Küsimus
What does static application analysis inspect?
Vastus
Source code, bytecode, or compiled code without executing the application.
Kaart 192
Küsimus
What does a firewall access list define?
Vastus
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kaart 193
Küsimus
What does a disaster recovery policy establish?
Vastus
Management expectations for restoring technology and data after a disruptive event.
Kaart 194
Küsimus
How does logical segmentation separate workloads that share physical infrastructure?
Vastus
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kaart 195
Küsimus
How should IDS and IPS placement differ?
Vastus
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kaart 196
Küsimus
What should automated ticket creation capture?
Vastus
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kaart 197
Küsimus
What makes information intellectual property?
Vastus
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kaart 198
Küsimus
What is a backout plan?
Vastus
Predefined steps for safely reversing a failed or harmful change.
Kaart 199
Küsimus
Why is an unsecure wireless network an attack vector?
Vastus
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kaart 200
Küsimus
What is physical brute force?
Vastus
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kaart 201
Küsimus
What is application sandboxing?
Vastus
Running code in a constrained environment with limited access to the host and data.
Kaart 202
Küsimus
Why assign an asset owner?
Vastus
One accountable party must decide its use, protection, and lifecycle.
Kaart 203
Küsimus
What happens during risk identification?
Vastus
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kaart 204
Küsimus
What should an SLA state about breach notification?
Vastus
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kaart 205
Küsimus
How do due diligence and due care differ in compliance?
Vastus
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kaart 206
Küsimus
What is attribute-based access control?
Vastus
Policy evaluates attributes of the subject, resource, action, and environment.
Kaart 207
Küsimus
What does a zero-trust policy engine do?
Vastus
It evaluates policy and signals to decide whether access should be allowed.
Kaart 208
Küsimus
How does a cloud responsibility matrix allocate security duties?
Vastus
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kaart 209
Küsimus
Where should a load balancer sit in a service path?
Vastus
In front of service instances so it can route requests to healthy backends.
Kaart 210
Küsimus
What should the security team do with a reported suspicious message?
Vastus
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kaart 211
Küsimus
What makes an operating-system vulnerability high impact?
Vastus
It can affect every application and security control that relies on the compromised OS.
Kaart 212
Küsimus
What does dynamic application analysis inspect?
Vastus
The behavior and externally visible weaknesses of a running application.
Kaart 213
Küsimus
How can false-positive trends affect IDS or IPS tuning?
Vastus
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kaart 214
Küsimus
What does a business continuity policy establish?
Vastus
Management expectations for sustaining and restoring critical business functions.
Kaart 215
Küsimus
What is a hot recovery site?
Vastus
A ready, synchronized environment intended to take over quickly.
Kaart 216
Küsimus
What makes an insider threat distinct?
Vastus
The actor has legitimate access or organizational knowledge that can be misused.
Kaart 217
Küsimus
What is RFID cloning?
Vastus
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kaart 218
Küsimus
Why apply vendor security updates promptly?
Vastus
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kaart 219
Küsimus
What should infrastructure security monitoring observe?
Vastus
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kaart 220
Küsimus
What can firewall logs reveal?
Vastus
Allowed or denied network connections across controlled boundaries.
Kaart 221
Küsimus
Why minimize open service ports?
Vastus
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kaart 222
Küsimus
What is threat hunting?
Vastus
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kaart 223
Küsimus
What triggers an ad hoc risk assessment?
Vastus
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kaart 224
Küsimus
What makes an assessment external?
Vastus
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kaart 225
Küsimus
What is data sovereignty?
Vastus
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kaart 226
Küsimus
What security boundary does a cellular connection create for a mobile device?
Vastus
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kaart 227
Küsimus
What makes a security control operational?
Vastus
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kaart 228
Küsimus
What is discretionary access control?
Vastus
A resource owner can decide who receives access, within system policy.
Kaart 229
Küsimus
How can careful automation support employee retention?
Vastus
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kaart 230
Küsimus
Why does ease of deployment matter in an architecture decision?
Vastus
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kaart 231
Küsimus
What tradeoff comes with placing an NGFW inline?
Vastus
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kaart 232
Küsimus
What does a zero-trust policy administrator do?
Vastus
It carries out the policy engine's decision, such as creating or ending a session.
Kaart 233
Küsimus
What should a master service agreement define for data return and deletion?
Vastus
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kaart 234
Küsimus
What is an environmental physical attack?
Vastus
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kaart 235
Küsimus
When should a maintenance window be chosen?
Vastus
When disruption and rollback can be managed with the least business impact.
Kaart 236
Küsimus
What is memory injection?
Vastus
Placing malicious code or data into another process's memory so it executes in that process's context.
Kaart 237
Küsimus
What does software composition analysis find?
Vastus
Known risks and license information in third-party dependencies.
Kaart 238
Küsimus
What is DNS filtering?
Vastus
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kaart 239
Küsimus
What should an incident response policy establish?
Vastus
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kaart 240
Küsimus
How can noncompliance cause reputational damage?
Vastus
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kaart 241
Küsimus
What does full-disk encryption protect?
Vastus
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kaart 242
Küsimus
Why are default credentials dangerous?
Vastus
They are widely known or easily discovered and often remain unchanged.
Kaart 243
Küsimus
What makes a risk assessment one-time?
Vastus
It evaluates a defined decision or scope once without an established repeating cadence.
Kaart 244
Küsimus
What is a warm recovery site?
Vastus
A partially equipped environment that needs some data restoration or configuration before use.
Kaart 245
Küsimus
What does application input validation do?
Vastus
It checks that input matches the expected type, length, range, and format before use.
Kaart 246
Küsimus
What should an asset inventory record besides a device name?
Vastus
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kaart 247
Küsimus
What is mandatory access control?
Vastus
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kaart 248
Küsimus
What security benefit does infrastructure as code provide?
Vastus
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kaart 249
Küsimus
When should a public service control fail closed?
Vastus
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kaart 250
Küsimus
What should users do with a suspicious message?
Vastus
Report it through the approved channel without interacting with its links or attachments.
Kaart 251
Küsimus
What usually motivates organized cybercrime?
Vastus
Financial gain through scalable or repeatable criminal activity.
Kaart 252
Küsimus
How can malicious code support a network attack?
Vastus
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kaart 253
Küsimus
When is virtual patching useful?
Vastus
When a network or application control can block exploit traffic before the underlying system can be patched.
Kaart 254
Küsimus
What does security-monitoring reporting provide?
Vastus
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kaart 255
Küsimus
What does data geolocation identify?
Vastus
The physical or legal location where data is stored, processed, or transmitted.
Kaart 256
Küsimus
What does a zero-trust policy enforcement point do?
Vastus
It enables, monitors, and terminates the connection between a subject and a resource.
Kaart 257
Küsimus
What is cryptographic key exchange?
Vastus
A method for parties to establish shared key material over an untrusted channel.
Kaart 258
Küsimus
How can a vendor become a supply-chain attack vector?
Vastus
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kaart 259
Küsimus
Why can legacy hardware remain vulnerable?
Vastus
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kaart 260
Küsimus
What can proprietary vulnerability intelligence add beyond open sources?
Vastus
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kaart 261
Küsimus
How does a centralized proxy apply web filtering?
Vastus
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kaart 262
Küsimus
How can continuous integration and testing improve security automation?
Vastus
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kaart 263
Küsimus
What is containment?
Vastus
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kaart 264
Küsimus
What is a software development lifecycle policy meant to ensure?
Vastus
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kaart 265
Küsimus
What makes risk assessment continuous?
Vastus
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kaart 266
Küsimus
What is a memorandum of agreement?
Vastus
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kaart 267
Küsimus
What makes a penetration test integrated?
Vastus
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kaart 268
Küsimus
How does a DNS amplification attack magnify traffic?
Vastus
It sends small spoofed queries that trigger larger replies toward the victim.
Kaart 269
Küsimus
Why does ease of recovery matter in an architecture decision?
Vastus
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kaart 270
Küsimus
What does 802.1X control before a device receives normal network access?
Vastus
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kaart 271
Küsimus
What is rule-based access control?
Vastus
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kaart 272
Küsimus
What is mobile device management?
Vastus
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kaart 273
Küsimus
What tradeoff comes with a cold recovery site?
Vastus
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kaart 274
Küsimus
Why identify stakeholders before approving a security-sensitive change?
Vastus
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kaart 275
Küsimus
How do attestation and acknowledgement differ?
Vastus
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kaart 276
Küsimus
What does zero-trust adaptive identity mean?
Vastus
Access decisions adjust to current risk signals rather than relying only on a static login.
Kaart 277
Küsimus
What makes a security control physical?
Vastus
It protects facilities or equipment through a tangible barrier or mechanism.
Kaart 278
Küsimus
What is geo-fencing for data?
Vastus
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kaart 279
Küsimus
What does a Trusted Platform Module protect?
Vastus
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kaart 280
Küsimus
Why can a managed service provider amplify risk?
Vastus
Its privileged access and shared tooling can provide a path into many customers.
Kaart 281
Küsimus
What does probability express in risk analysis?
Vastus
A quantified chance that a defined event will occur within stated conditions or time.
Kaart 282
Küsimus
Why can shadow IT create a threat?
Vastus
It bypasses security review, inventory, monitoring, and supported configuration.
Kaart 283
Küsimus
What is on-path interception?
Vastus
An attacker positions between communicating parties to observe or alter traffic.
Kaart 284
Küsimus
Why include encryption in a system-hardening baseline?
Vastus
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kaart 285
Küsimus
Why tune security alerts?
Vastus
To keep useful detections while reducing noise that wastes analyst attention.
Kaart 286
Küsimus
What can IPS or IDS logs contribute to an investigation?
Vastus
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kaart 287
Küsimus
What is VM escape?
Vastus
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kaart 288
Küsimus
How can segmentation reduce vulnerability exposure before a patch is available?
Vastus
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kaart 289
Küsimus
Why should firewall policy name the required ports and protocols explicitly?
Vastus
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kaart 290
Küsimus
What is a change management policy meant to control?
Vastus
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kaart 291
Küsimus
What is a hybrid-cloud architecture?
Vastus
An environment that integrates private or on-premises resources with public cloud services.
Kaart 292
Küsimus
How do AH and ESP differ in the security services they can provide?
Vastus
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kaart 293
Küsimus
What makes user behavior risky?
Vastus
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kaart 294
Küsimus
What is least privilege?
Vastus
Granting only the access needed for the required task and no more.
Kaart 295
Küsimus
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Vastus
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kaart 296
Küsimus
Why discover unmanaged assets?
Vastus
Unknown systems cannot be patched, monitored, or governed reliably.
Kaart 297
Küsimus
What is a service-level agreement?
Vastus
Measurable service commitments and remedies, such as availability or response targets.
Kaart 298
Küsimus
What should govern automated security escalation?
Vastus
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kaart 299
Küsimus
What is platform diversity as a resilience strategy?
Vastus
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kaart 300
Küsimus
How can replayed session material affect an application?
Vastus
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kaart 301
Küsimus
What is an implicit trust zone in zero trust?
Vastus
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kaart 302
Küsimus
What does salting a password hash accomplish?
Vastus
It makes identical passwords hash differently and defeats precomputed hash tables.
Kaart 303
Küsimus
What is spear phishing?
Vastus
Phishing tailored to a specific person, role, or organization.
Kaart 304
Küsimus
What is eradication?
Vastus
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kaart 305
Küsimus
Who is a risk owner?
Vastus
The person accountable for deciding and monitoring how a specific risk is handled.
Kaart 306
Küsimus
What does a partially known penetration-test environment provide?
Vastus
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kaart 307
Küsimus
What is a microservices architecture?
Vastus
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kaart 308
Küsimus
What is a jump server?
Vastus
A hardened intermediary used to reach systems in a restricted management network.
Kaart 309
Küsimus
What can happen when a configuration change is made without dependency analysis?
Vastus
A downstream service can fail even when the changed component works.
Kaart 310
Küsimus
What is resource reuse exposure?
Vastus
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kaart 311
Küsimus
Why does financial information require explicit protection?
Vastus
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kaart 312
Küsimus
What does CVE provide?
Vastus
A common identifier for a publicly disclosed vulnerability.
Kaart 313
Küsimus
Where can DLP controls operate?
Vastus
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kaart 314
Küsimus
What does privileged password vaulting protect?
Vastus
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kaart 315
Küsimus
What does an access-control standard define?
Vastus
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kaart 316
Küsimus
How can automation support compliance monitoring?
Vastus
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kaart 317
Küsimus
What does static code analysis examine?
Vastus
Source or compiled code for weakness patterns without executing the application.
Kaart 318
Küsimus
What actor attribute describes funding, time, and personnel?
Vastus
Resources.
Kaart 319
Küsimus
What is DNS poisoning?
Vastus
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kaart 320
Küsimus
Why change default credentials during hardening?
Vastus
Default secrets are predictable and commonly targeted.
Kaart 321
Küsimus
What does quarantine do after a security alert?
Vastus
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kaart 322
Küsimus
What does key stretching do for stored passwords?
Vastus
It deliberately makes each password guess more computationally expensive.
Kaart 323
Küsimus
What is smishing?
Vastus
Phishing delivered through SMS or another text-messaging service.
Kaart 324
Küsimus
What is qualitative risk analysis?
Vastus
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kaart 325
Küsimus
What is a master service agreement?
Vastus
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kaart 326
Küsimus
What is threat scope reduction?
Vastus
Narrowing the systems, privileges, or paths an attacker can reach.
Kaart 327
Küsimus
Why use a third-party cloud service instead of building locally?
Vastus
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kaart 328
Küsimus
What should determine security-device placement?
Vastus
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kaart 329
Küsimus
What does situational awareness mean for a user?
Vastus
Notice the people, devices, requests, location, and context around a task before acting.
Kaart 330
Küsimus
What does a failover test validate?
Vastus
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kaart 331
Küsimus
What is a preventive control meant to do?
Vastus
Stop an unwanted event before it succeeds.
Kaart 332
Küsimus
What is just-in-time privileged access?
Vastus
Elevated access is granted only when needed and expires after a short approved period.
Kaart 333
Küsimus
What safeguard should security-group automation enforce?
Vastus
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kaart 334
Küsimus
How does a reflected DDoS attack hide and multiply sources?
Vastus
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kaart 335
Küsimus
What is a security misconfiguration?
Vastus
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kaart 336
Küsimus
Why can the same vulnerability have different organizational impact?
Vastus
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kaart 337
Küsimus
What does URL scanning evaluate before a user opens a web destination?
Vastus
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kaart 338
Küsimus
What is the board's security governance role?
Vastus
Provide oversight, set risk direction, and hold executives accountable.
Kaart 339
Küsimus
What does code signing establish?
Vastus
That code came from the holder of the signing key and has not changed since signing.
Kaart 340
Küsimus
How should an asset's classification affect security operations?
Vastus
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kaart 341
Küsimus
How does encryption protect data?
Vastus
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kaart 342
Küsimus
What is a secure enclave?
Vastus
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kaart 343
Küsimus
What is business email compromise?
Vastus
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kaart 344
Küsimus
What is recovery in incident response?
Vastus
Restoring services safely, monitoring them, and returning to normal operations.
Kaart 345
Küsimus
How is single loss expectancy commonly estimated?
Vastus
Asset value multiplied by the exposure factor.
Kaart 346
Küsimus
What does an unknown penetration-test environment provide?
Vastus
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kaart 347
Küsimus
What security boundary does a hypervisor provide?
Vastus
It isolates virtual machines while controlling their access to shared hardware.
Kaart 348
Küsimus
Why does a TLS tunnel not protect a compromised endpoint?
Vastus
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kaart 349
Küsimus
Why update diagrams after an infrastructure change?
Vastus
Operations and incident responders need the documentation to match the deployed environment.
Kaart 350
Küsimus
What does privacy ownership assign?
Vastus
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kaart 351
Küsimus
What does a security control gap analysis compare?
Vastus
The controls required for the target state with the controls currently in place.
Kaart 352
Küsimus
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Vastus
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kaart 353
Küsimus
What is application privilege escalation?
Vastus
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kaart 354
Küsimus
What risk remains when unnecessary software is left installed?
Vastus
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kaart 355
Küsimus
What does SCAP standardize?
Vastus
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kaart 356
Küsimus
What can packet capture reveal?
Vastus
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kaart 357
Küsimus
What makes a privileged credential ephemeral?
Vastus
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kaart 358
Küsimus
How do a statement of work and a work order differ?
Vastus
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kaart 359
Küsimus
Why might multi-cloud improve resilience?
Vastus
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kaart 360
Küsimus
How can a service provider introduce a supply-chain vulnerability?
Vastus
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kaart 361
Küsimus
What is a false positive in vulnerability scanning?
Vastus
A reported weakness that is not actually present or exploitable in the assessed context.
Kaart 362
Küsimus
How do EDR and XDR differ?
Vastus
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kaart 363
Küsimus
What should onboarding and offboarding procedures coordinate?
Vastus
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kaart 364
Küsimus
How should an organization harden managed mobile devices?
Vastus
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kaart 365
Küsimus
What is a certificate signing request?
Vastus
A request containing a public key and subject information for a certificate authority to sign.
Kaart 366
Küsimus
What is pretexting?
Vastus
Using a fabricated role or situation to make a request seem legitimate.
Kaart 367
Küsimus
How is annualized loss expectancy commonly estimated?
Vastus
Single loss expectancy multiplied by annualized rate of occurrence.
Kaart 368
Küsimus
What security consequence follows from containers sharing a kernel?
Vastus
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kaart 369
Küsimus
Where does 802.1X enforce a network admission decision?
Vastus
At the controlled switch port or wireless access point before normal network access is granted.
Kaart 370
Küsimus
What should insider-threat awareness teach?
Vastus
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kaart 371
Küsimus
What access action is suitable for careful automation?
Vastus
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kaart 372
Küsimus
What is an evil twin?
Vastus
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kaarti
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Õpi seda kaardipakki tasutaNibomo avaneb, et saaksid õppimist alustada.
Kaart 373
Küsimus
Does non-human-readable data need less protection?
Vastus
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kaart 374
Küsimus
What does authenticating a system establish?
Vastus
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kaart 375
Küsimus
What does LDAP provide in identity systems?
Vastus
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kaart 376
Küsimus
What is a deterrent control meant to do?
Vastus
Discourage an attacker from attempting an unwanted action.
Kaart 377
Küsimus
Why update procedures after changing a security control?
Vastus
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kaart 378
Küsimus
How does OCSP differ from a certificate revocation list?
Vastus
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kaart 379
Küsimus
What is the goal of data exfiltration?
Vastus
Remove data from its authorized environment without permission.
Kaart 380
Küsimus
What is a watering-hole attack?
Vastus
Compromising a site frequented by the intended targets so their visits expose them.
Kaart 381
Küsimus
How can a hardware provider introduce a supply-chain vulnerability?
Vastus
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kaart 382
Küsimus
What is application forgery?
Vastus
Creating or altering a request, token, or object so the application treats it as authentic.
Kaart 383
Küsimus
How does least privilege mitigate compromise?
Vastus
It limits the actions and resources available to a compromised account or process.
Kaart 384
Küsimus
What is serverless computing?
Vastus
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kaart 385
Küsimus
What makes an infrastructure control effective for a specific risk?
Vastus
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kaart 386
Küsimus
What does parallel recovery processing test?
Vastus
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kaart 387
Küsimus
Which password-authentication method does WPA3-Personal use?
Vastus
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kaart 388
Küsimus
How does data retention affect asset disposal?
Vastus
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kaart 389
Küsimus
What is a false negative in vulnerability scanning?
Vastus
A real weakness that the assessment fails to report.
Kaart 390
Küsimus
What does recurring security scanning add to monitoring?
Vastus
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kaart 391
Küsimus
What should guide port selection for a secure protocol?
Vastus
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kaart 392
Küsimus
What does forensic acquisition create?
Vastus
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kaart 393
Küsimus
How do system owners and data owners divide security accountability?
Vastus
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kaart 394
Küsimus
What does likelihood express in risk analysis?
Vastus
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kaart 395
Küsimus
What is a memorandum of understanding?
Vastus
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kaart 396
Küsimus
What does the right to be forgotten generally require?
Vastus
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kaart 397
Küsimus
What does an audit committee oversee?
Vastus
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kaart 398
Küsimus
What does identity interoperability require?
Vastus
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kaart 399
Küsimus
How does a bollard protect a facility?
Vastus
It blocks or redirects vehicles before they can reach a protected area.
Kaart 400
Küsimus
How can hashing protect a downloaded file?
Vastus
A trusted digest lets the recipient detect whether the file changed.
Kaart 401
Küsimus
What is a credential replay attack?
Vastus
Using captured valid credentials or tokens again without needing to discover the secret.
Kaart 402
Küsimus
How can automation complexity create security risk?
Vastus
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kaart 403
Küsimus
What must an architecture provide when a component cannot be patched?
Vastus
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kaart 404
Küsimus
What makes remote access secure?
Vastus
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kaart 405
Küsimus
What should users verify before connecting removable media or a cable?
Vastus
That the device and connection are approved, expected, and handled under organizational policy.
Kaart 406
Küsimus
What is a self-signed certificate?
Vastus
A certificate signed by its own private key rather than by a separate trusted issuer.
Kaart 407
Küsimus
What is brand impersonation?
Vastus
Using a trusted organization's identity or look to deceive people.
Kaart 408
Küsimus
What characterizes a conservative risk appetite?
Vastus
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kaart 409
Küsimus
What should a managed mobile device verify before using Wi-Fi?
Vastus
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kaart 410
Küsimus
What is a zero-day vulnerability?
Vastus
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kaart 411
Küsimus
What does verification confirm after vulnerability remediation?
Vastus
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kaart 412
Küsimus
What is user and entity behavior analytics?
Vastus
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kaart 413
Küsimus
What does a physical security policy establish?
Vastus
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kaart 414
Küsimus
What does a UPS provide?
Vastus
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kaart 415
Küsimus
What is a nondisclosure agreement?
Vastus
A contract restricting use and disclosure of defined confidential information.
Kaart 416
Küsimus
What should be checked before assigning a user permission?
Vastus
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kaart 417
Küsimus
How does espionage differ from ordinary theft?
Vastus
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kaart 418
Küsimus
What is password spraying?
Vastus
Trying a small set of common passwords across many accounts to avoid lockouts.
Kaart 419
Küsimus
What is the purpose of system isolation during an incident?
Vastus
Stop harmful communication while preserving the system for response and investigation.
Kaart 420
Küsimus
What is a security benchmark?
Vastus
A documented set of recommended configuration checks for a platform or product.
Kaart 421
Küsimus
Which metadata fields give a log record investigative context?
Vastus
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kaart 422
Küsimus
What does an access-control vestibule prevent?
Vastus
It limits tailgating by allowing controlled passage through one door at a time.
Kaart 423
Küsimus
What is version control's security value for configuration?
Vastus
It preserves attributable history and enables review or rollback of changes.
Kaart 424
Küsimus
Why use both internal and external compliance monitoring?
Vastus
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kaart 425
Küsimus
What distinguishes on-premises architecture?
Vastus
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kaart 426
Küsimus
What risk can split tunneling add to a VPN?
Vastus
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kaart 427
Küsimus
What is a certificate root of trust?
Vastus
A trusted root certificate or key from which a client validates a certificate chain.
Kaart 428
Küsimus
What is typosquatting?
Vastus
Registering a look-alike domain based on common typing errors or visual similarity.
Kaart 429
Küsimus
What is root-cause analysis?
Vastus
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kaart 430
Küsimus
What is risk tolerance?
Vastus
The acceptable variation or boundary around a specific objective or risk area.
Kaart 431
Küsimus
What is a security self-assessment?
Vastus
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kaart 432
Küsimus
What does data masking change?
Vastus
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kaart 433
Küsimus
How do wireless authentication protocols let clients prove identity securely?
Vastus
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kaart 434
Küsimus
Why reconcile inventory with network discovery?
Vastus
Differences expose missing records, retired systems, or unauthorized devices.
Kaart 435
Küsimus
Why does sideloading raise mobile risk?
Vastus
It can bypass store review, signing policy, and managed application controls.
Kaart 436
Küsimus
What does an information-sharing organization add to vulnerability management?
Vastus
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kaart 437
Küsimus
What does a web-filter block rule specify?
Vastus
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kaart 438
Küsimus
How do data custodians and data stewards differ?
Vastus
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kaart 439
Küsimus
What is a brute-force password attack?
Vastus
Systematically trying many candidate secrets against an account or protected value.
Kaart 440
Küsimus
What is a compensating control?
Vastus
An alternative safeguard used when the preferred control is impractical or unavailable.
Kaart 441
Küsimus
How can location act as an authentication factor?
Vastus
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kaart 442
Küsimus
Why must security automation remain supportable?
Vastus
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kaart 443
Küsimus
What does a standby generator provide?
Vastus
Longer-duration power during a utility outage, after a startup delay.
Kaart 444
Küsimus
What makes an architecture air-gapped?
Vastus
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kaart 445
Küsimus
What is a software-defined WAN?
Vastus
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kaart 446
Küsimus
What password-management behavior should awareness training reinforce?
Vastus
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kaart 447
Küsimus
What security value does fencing provide?
Vastus
It defines and delays entry across a physical perimeter.
Kaart 448
Küsimus
What is a wildcard certificate?
Vastus
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kaart 449
Küsimus
How does misinformation differ from disinformation?
Vastus
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kaart 450
Küsimus
What is a risk threshold?
Vastus
A defined level that triggers escalation, treatment, or another required response.
Kaart 451
Küsimus
What does a vendor penetration test contribute to assessment?
Vastus
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kaart 452
Küsimus
What is the objective of a service-disruption attack?
Vastus
Make a system or business function unavailable or unreliable.
Kaart 453
Küsimus
What is directory traversal?
Vastus
Manipulating a file path to reach files outside the directory the application intended to expose.
Kaart 454
Küsimus
Why decommission an unsupported system?
Vastus
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kaart 455
Küsimus
Why archive security-monitoring data?
Vastus
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kaart 456
Küsimus
What role does RADIUS commonly play in enterprise Wi-Fi?
Vastus
It centralizes authentication, authorization information, and accounting for network access.
Kaart 457
Küsimus
Why separate the requester and approver of a high-risk change?
Vastus
To reduce error, fraud, and unilateral unauthorized modification.
Kaart 458
Küsimus
Why can a jailbroken device violate a security baseline?
Vastus
It weakens platform isolation and allows unapproved privileged changes.
Kaart 459
Küsimus
When is tokenization especially useful?
Vastus
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kaart 460
Küsimus
Why can dark-web intelligence affect vulnerability priority?
Vastus
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kaart 461
Küsimus
What firewall policy should govern traffic from a screened subnet to internal systems?
Vastus
Deny it by default and allow only explicitly required flows.
Kaart 462
Küsimus
What does SAML commonly carry?
Vastus
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kaart 463
Küsimus
What does a security governance committee do?
Vastus
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kaart 464
Küsimus
How can global privacy requirements affect one data process?
Vastus
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kaart 465
Küsimus
What characterizes an IoT device?
Vastus
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kaart 466
Küsimus
What is a unified threat management appliance?
Vastus
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kaart 467
Küsimus
What does a hardware security module provide?
Vastus
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kaart 468
Küsimus
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Vastus
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kaart 469
Küsimus
What is a tabletop exercise?
Vastus
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kaart 470
Küsimus
What does a risk exemption authorize?
Vastus
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kaart 471
Küsimus
What is a regulatory examination?
Vastus
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kaart 472
Küsimus
What does physical video surveillance primarily provide?
Vastus
Detection and evidence of activity in monitored areas.
Kaart 473
Küsimus
What is a birthday attack against a hash?
Vastus
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kaart 474
Küsimus
Why keep backups both onsite and offsite?
Vastus
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kaart 475
Küsimus
How does technical debt affect security automation?
Vastus
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kaart 476
Küsimus
What should switch hardening restrict first?
Vastus
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kaart 477
Küsimus
What should happen when an asset changes owners?
Vastus
Inventory, access, support responsibility, and data handling should be updated.
Kaart 478
Küsimus
What does evidence of a vendor's internal audits contribute?
Vastus
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kaart 479
Küsimus
What is identity attestation?
Vastus
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kaart 480
Küsimus
Why can standard enterprise patching be unsafe for an RTOS device?
Vastus
A change can disrupt timing guarantees or certified operational behavior.
Kaart 481
Küsimus
What is secure access service edge?
Vastus
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kaart 482
Küsimus
What social-engineering habit should awareness training reinforce?
Vastus
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kaart 483
Küsimus
How can a software provider introduce a supply-chain vulnerability?
Vastus
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kaart 484
Küsimus
Why include internet exposure in remediation priority?
Vastus
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kaart 485
Küsimus
What does a mail gateway inspect?
Vastus
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kaart 486
Küsimus
What is a data controller?
Vastus
The entity that determines why and how personal data is processed.
Kaart 487
Küsimus
How does blackmail motivate a cyberattack?
Vastus
The attacker threatens disclosure or harm unless the victim complies.
Kaart 488
Küsimus
What is a downgrade attack?
Vastus
Forcing parties to use an older or weaker protocol or security mode.
Kaart 489
Küsimus
How does encryption mitigate data exposure?
Vastus
It makes captured data unreadable without the required key.
Kaart 490
Küsimus
How do network and web vulnerability scanners differ?
Vastus
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kaart 491
Küsimus
How can vulnerability-scan data support an investigation?
Vastus
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kaart 492
Küsimus
What is key escrow?
Vastus
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kaart 493
Küsimus
Which human vector commonly uses a fake sign-in page to harvest credentials?
Vastus
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kaart 494
Küsimus
What is risk avoidance?
Vastus
Stopping or not starting the activity that creates the risk.
Kaart 495
Küsimus
What is data obfuscation?
Vastus
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kaart 496
Küsimus
What is a directive control?
Vastus
A safeguard that tells people what behavior or action is required.
Kaart 497
Küsimus
What does a security guard add that a camera cannot?
Vastus
Human judgment and an immediate physical response.
Kaart 498
Küsimus
Why define restricted activities in change management?
Vastus
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kaart 499
Küsimus
What contractual impact can noncompliance create?
Vastus
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kaart 500
Küsimus
What should determine backup frequency?
Vastus
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kaart 501
Küsimus
What should router hardening protect?
Vastus
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kaart 502
Küsimus
What problem does OAuth 2.0 address?
Vastus
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kaart 503
Küsimus
What does SCADA do?
Vastus
It provides supervisory monitoring and control across distributed industrial equipment.
Kaart 504
Küsimus
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Vastus
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kaart 505
Küsimus
What distinguishes a computer virus?
Vastus
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kaart 506
Küsimus
What does a key management system coordinate?
Vastus
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kaart 507
Küsimus
How can an unsecure wired network expose traffic?
Vastus
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kaart 508
Küsimus
Why is vulnerable device firmware hard to remediate?
Vastus
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kaart 509
Küsimus
What does patching change in vulnerability remediation?
Vastus
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kaart 510
Küsimus
What does DMARC add to SPF and DKIM?
Vastus
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kaart 511
Küsimus
How does automation improve security efficiency?
Vastus
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kaart 512
Küsimus
What is a simulation exercise?
Vastus
A more realistic practice in which participants respond to injected events using operational processes.
Kaart 513
Küsimus
What is a data processor?
Vastus
An entity that processes personal data on behalf of a controller.
Kaart 514
Küsimus
What is risk mitigation?
Vastus
Reducing likelihood, impact, or both through controls or process changes.
Kaart 515
Küsimus
Why monitor a vendor after onboarding?
Vastus
Security posture, ownership, services, incidents, and dependencies can change.
Kaart 516
Küsimus
What does a physical penetration test assess?
Vastus
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kaart 517
Küsimus
Why use access badges at a facility?
Vastus
To associate entry attempts with authorized identities and enforce access rules.
Kaart 518
Küsimus
How does permission restriction protect data?
Vastus
Only authorized identities receive the actions and scope their roles require.
Kaart 519
Küsimus
What is the usual objective of ransomware extortion?
Vastus
Force payment by denying access, threatening disclosure, or both.
Kaart 520
Küsimus
What does impossible travel indicate?
Vastus
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kaart 521
Küsimus
What is configuration enforcement?
Vastus
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kaart 522
Küsimus
What does a web vulnerability scanner inspect?
Vastus
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kaart 523
Küsimus
How does cost affect an architecture choice?
Vastus
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kaart 524
Küsimus
What does EAP provide with 802.1X?
Vastus
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kaart 525
Küsimus
What should operational-security training help users protect?
Vastus
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kaart 526
Küsimus
What does a time-of-day access rule do?
Vastus
Allows or denies a requested action according to an approved schedule.
Kaart 527
Küsimus
What should cloud infrastructure hardening establish?
Vastus
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kaart 528
Küsimus
What should an asset owner ensure during offboarding?
Vastus
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kaart 529
Küsimus
Why encrypt backups?
Vastus
Backup media and transfers can expose the same sensitive data as production systems.
Kaart 530
Küsimus
What is steganography?
Vastus
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kaart 531
Küsimus
Which human vector uses a fabricated authority role to justify a sensitive request?
Vastus
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kaart 532
Küsimus
Why does risk transfer not remove accountability?
Vastus
The organization can retain legal, reputational, operational, and oversight consequences.
Kaart 533
Küsimus
Why validate a change after deployment?
Vastus
To confirm the intended result occurred without introducing unacceptable side effects.
Kaart 534
Küsimus
What makes end-of-life hardware a security vulnerability?
Vastus
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kaart 535
Küsimus
What does an audit add to remediation validation?
Vastus
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kaart 536
Küsimus
Why can SPF pass while a message still impersonates a brand?
Vastus
SPF checks the envelope domain, which may differ from the visible From domain.
Kaart 537
Küsimus
What role can a government entity have in security governance?
Vastus
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kaart 538
Küsimus
How do data inventory and retention support privacy governance?
Vastus
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kaart 539
Küsimus
What can concurrent sessions from distant regions indicate?
Vastus
A stolen account or shared credential, subject to VPN and proxy context.
Kaart 540
Küsimus
What does supply-chain analysis examine?
Vastus
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kaart 541
Küsimus
What is the purpose of facility lighting as a control?
Vastus
Deter covert activity and improve observation of people and areas.
Kaart 542
Küsimus
What architecture quality keeps a service usable during component failure?
Vastus
Availability.
Kaart 543
Küsimus
When is fail-open behavior preferable to fail-closed behavior?
Vastus
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kaart 544
Küsimus
Which control function does a login-failure alert provide?
Vastus
Detection; it reveals suspicious authentication activity.
Kaart 545
Küsimus
What does a biometric MFA implementation verify?
Vastus
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kaart 546
Küsimus
How can automation enforce a security baseline?
Vastus
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kaart 547
Küsimus
How do wireless cryptographic protocols protect network traffic?
Vastus
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kaart 548
Küsimus
Why segment sensitive data stores?
Vastus
It limits reachable paths and separates them from lower-trust workloads.
Kaart 549
Küsimus
What must remain secret in an asymmetric key pair?
Vastus
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kaart 550
Küsimus
How can a supplier become a supply-chain attack vector?
Vastus
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kaart 551
Küsimus
What is e-discovery?
Vastus
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kaart 552
Küsimus
What characterizes a neutral risk appetite?
Vastus
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kaart 553
Küsimus
What is passive reconnaissance?
Vastus
Gathering information without directly interacting with the target's systems.
Kaart 554
Küsimus
What does a philosophical motive mean for a threat actor?
Vastus
The actor acts to advance a belief or moral position rather than primarily for money.
Kaart 555
Küsimus
What does unexpected resource consumption indicate?
Vastus
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kaart 556
Küsimus
What does a host-based intrusion prevention system do?
Vastus
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kaart 557
Küsimus
How does agent-based monitoring differ from agentless monitoring?
Vastus
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kaart 558
Küsimus
What can network logs contribute to an investigation?
Vastus
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kaart 559
Küsimus
What is the purpose of a backup restore test?
Vastus
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kaart 560
Küsimus
Why can obsolete hardware become a security risk?
Vastus
It may lack supported firmware, modern protections, or replacement parts.
Kaart 561
Küsimus
What does rescanning confirm after remediation?
Vastus
Whether the scanner can still detect the original finding on the affected asset.
Kaart 562
Küsimus
What should a secure transport method provide?
Vastus
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kaart 563
Küsimus
How can law affect security governance?
Vastus
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kaart 564
Küsimus
What does resilience mean for a security architecture?
Vastus
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kaart 565
Küsimus
Why minimize an infrastructure's attack surface?
Vastus
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kaart 566
Küsimus
What does executing a security-awareness program require?
Vastus
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kaart 567
Küsimus
What does an infrared security sensor detect?
Vastus
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kaart 568
Küsimus
What is a knowledge factor?
Vastus
Something the claimant knows, such as a password.
Kaart 569
Küsimus
Why review allow-list and deny-list impact before a change?
Vastus
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kaart 570
Küsimus
What does partition-level encryption protect?
Vastus
One selected disk partition, leaving other partitions outside that encryption boundary.
Kaart 571
Küsimus
How can instant messaging deliver a security attack?
Vastus
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kaart 572
Küsimus
What can repeated blocked-content events indicate?
Vastus
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kaart 573
Küsimus
What should a server-hardening baseline reduce?
Vastus
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kaart 574
Küsimus
When is physical media destruction appropriate?
Vastus
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kaart 575
Küsimus
What is mean time to repair?
Vastus
The average time required to restore a failed component or service.
Kaart 576
Küsimus
Why disclose conflicts of interest during vendor selection?
Vastus
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kaart 577
Küsimus
What is a fine for noncompliance?
Vastus
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kaart 578
Küsimus
What does a public data classification authorize?
Vastus
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kaart 579
Küsimus
What security benefit comes from standard infrastructure configurations?
Vastus
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kaart 580
Küsimus
How does horizontal scaling increase capacity?
Vastus
It adds more service instances and distributes work among them.
Kaart 581
Küsimus
Why can added connectivity weaken segmentation?
Vastus
Each allowed path can become a route for lateral movement or data escape.
Kaart 582
Küsimus
What coding practice is central to preventing SQL injection?
Vastus
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kaart 583
Küsimus
When is a compensating control appropriate for a vulnerability?
Vastus
When timely removal or patching is infeasible and another control can reduce the risk.
Kaart 584
Küsimus
How does agent-based web filtering enforce policy?
Vastus
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kaart 585
Küsimus
How can regulation differ from an internal policy?
Vastus
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kaart 586
Küsimus
What is a storage snapshot?
Vastus
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kaart 587
Küsimus
What does password age measure?
Vastus
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kaart 588
Küsimus
What does an ethical motive mean in vulnerability research?
Vastus
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kaart 589
Küsimus
What can missing security logs indicate?
Vastus
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kaart 590
Küsimus
Why disable unused ports and protocols?
Vastus
They expose unnecessary communication paths and code that attackers can reach.
Kaart 591
Küsimus
What does antivirus contribute to monitoring?
Vastus
It scans files, memory, or behavior and reports suspected malicious code.
Kaart 592
Küsimus
What is a honeypot?
Vastus
A decoy system or service designed to attract and observe malicious activity.
Kaart 593
Küsimus
What does file-level encryption protect?
Vastus
Selected files independently of whether the rest of the disk or volume is encrypted.
Kaart 594
Küsimus
How can SMS deliver a security attack?
Vastus
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kaart 595
Küsimus
What happens during incident analysis?
Vastus
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kaart 596
Küsimus
What is mean time between failures?
Vastus
The average operating time between repairable failures.
Kaart 597
Küsimus
What is active reconnaissance?
Vastus
Probing or interacting with target systems to discover services and behavior.
Kaart 598
Küsimus
What constraint should guide ICS or SCADA hardening?
Vastus
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kaart 599
Küsimus
Which control function does restoring a clean system image provide?
Vastus
Correction; it returns the system to a known-good state.
Kaart 600
Küsimus
What does responsiveness mean in an architecture decision?
Vastus
How quickly the system and its operators can adapt to demand, failure, or attack.
Kaart 601
Küsimus
How does out-of-band access strengthen remote administration?
Vastus
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kaart 602
Küsimus
What makes user behavior unexpected?
Vastus
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kaart 603
Küsimus
What is a work order?
Vastus
A document authorizing a defined unit of work under an existing agreement.
Kaart 604
Küsimus
What can out-of-cycle logging indicate?
Vastus
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kaart 605
Küsimus
Why update a standard operating procedure after a change?
Vastus
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kaart 606
Küsimus
What coding practice limits cross-site scripting?
Vastus
Context-appropriate output encoding, supported by safe templating and input handling.
Kaart 607
Küsimus
What does a restricted data classification indicate?
Vastus
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kaart 608
Küsimus
How does a bug bounty support responsible disclosure?
Vastus
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kaart 609
Küsimus
What does web-filter content categorization provide?
Vastus
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kaart 610
Küsimus
How do hard and soft authentication tokens differ?
Vastus
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kaart 611
Küsimus
How can industry requirements affect security governance?
Vastus
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kaart 612
Küsimus
How can noncompliance cause loss of a license?
Vastus
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kaart 613
Küsimus
What does volume-level encryption protect?
Vastus
All data within a selected logical storage volume.
Kaart 614
Küsimus
How can impersonation exploit familiarity?
Vastus
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kaart 615
Küsimus
How does RTO guide recovery design?
Vastus
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kaart 616
Küsimus
What is a honeynet?
Vastus
A network of decoy systems used to study or divert attackers.
Kaart 617
Küsimus
What does backup replication provide?
Vastus
Additional synchronized or copied recovery data in another system or location.
Kaart 618
Küsimus
What lets automation scale securely?
Vastus
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kaart 619
Küsimus
Why monitor a hardened computing resource continuously?
Vastus
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kaart 620
Küsimus
Why keep a certificate of destruction?
Vastus
It documents that a disposal provider handled specified media under the agreed process.
Kaart 621
Küsimus
Why consider patch availability before selecting a platform?
Vastus
Unsupported or difficult-to-update components accumulate known exposure.
Kaart 622
Küsimus
Why should remote administration use an encrypted, authenticated protocol?
Vastus
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kaart 623
Küsimus
How can revenge motivate an insider incident?
Vastus
A disgruntled person may damage systems or disclose data to punish the organization.
Kaart 624
Küsimus
What is a published or documented indicator of malicious activity?
Vastus
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kaart 625
Küsimus
Why monitor a system more closely when a mitigation exception is accepted?
Vastus
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kaart 626
Küsimus
What is an SNMP trap?
Vastus
An unsolicited device notification sent to a management system when a configured event occurs.
Kaart 627
Küsimus
How can an automated report support an investigation?
Vastus
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kaart 628
Küsimus
What is a security key?
Vastus
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kaart 629
Küsimus
What does database-level encryption protect?
Vastus
A database or selected database structures through controls managed at the database layer.
Kaart 630
Küsimus
How does brand impersonation exploit trust?
Vastus
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kaart 631
Küsimus
What browser-side impact can a cross-site scripting vulnerability create?
Vastus
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kaart 632
Küsimus
How can a system or process audit identify vulnerabilities?
Vastus
It compares evidence with required configuration and procedure to reveal control gaps.
Kaart 633
Küsimus
What security role can Group Policy provide?
Vastus
Centralized Windows configuration of account, application, audit, and system security settings.
Kaart 634
Küsimus
What should incident-response training prepare people to do?
Vastus
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kaart 635
Küsimus
Why must governance track local or regional requirements?
Vastus
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kaart 636
Küsimus
How can a dependency become a useful key risk indicator?
Vastus
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kaart 637
Küsimus
What is a business partners agreement?
Vastus
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kaart 638
Küsimus
What makes an audit regulatory?
Vastus
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kaart 639
Küsimus
What is a honeyfile?
Vastus
A decoy file whose access can reveal unauthorized activity.
Kaart 640
Küsimus
Why does legal information require explicit protection?
Vastus
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kaart 641
Küsimus
Which indicator can mass file renaming and encryption produce?
Vastus
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kaart 642
Küsimus
What remains with an organization after transferring architecture risk?
Vastus
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kaart 643
Küsimus
When does local console placement provide useful administrative access?
Vastus
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kaart 644
Küsimus
What makes a harmful user action unintentional?
Vastus
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kaart 645
Küsimus
How should an organization harden workstations?
Vastus
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kaart 646
Küsimus
What is journaling in recovery?
Vastus
Recording ordered changes so data can be replayed or restored to a consistent point.
Kaart 647
Küsimus
What downtime must a change plan account for?
Vastus
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kaart 648
Küsimus
Why must a privacy program map local or regional law to data flows?
Vastus
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kaart 649
Küsimus
Why combine independent preventive controls at different layers?
Vastus
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kaart 650
Küsimus
What is passwordless authentication?
Vastus
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kaart 651
Küsimus
How can automation improve security reaction time?
Vastus
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kaart 652
Küsimus
What does record-level encryption protect?
Vastus
Individual records or fields, allowing finer protection than encrypting the entire database.
Kaart 653
Küsimus
How can business email compromise misuse urgency?
Vastus
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kaart 654
Küsimus
What does impact measure in risk analysis?
Vastus
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kaart 655
Küsimus
What makes cyber activity part of warfare?
Vastus
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kaart 656
Küsimus
Which indicator can a newly created privileged account produce outside the normal change window?
Vastus
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kaart 657
Küsimus
How can configuration enforcement validate a deployed mitigation?
Vastus
It compares the realized settings with the approved state and corrects or reports drift.
Kaart 658
Küsimus
How does validating an alert improve alert tuning?
Vastus
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kaart 659
Küsimus
What data-layer impact can a SQL injection vulnerability create?
Vastus
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kaart 660
Küsimus
What environmental variables can change vulnerability priority?
Vastus
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kaart 661
Küsimus
What security role does SELinux provide?
Vastus
Mandatory access controls that confine processes according to centrally defined policy.
Kaart 662
Küsimus
Why review governance documents periodically?
Vastus
Business, technology, threats, and external obligations change.
Kaart 663
Küsimus
Why evaluate power requirements for a system design?
Vastus
Power capacity and redundancy constrain availability and recovery.
Kaart 664
Küsimus
When is IPsec a better tunnel choice than TLS?
Vastus
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kaart 665
Küsimus
What is a honeytoken?
Vastus
A fake credential or data element that generates a high-confidence alert when used.
Kaart 666
Küsimus
What should embedded-system hardening prioritize?
Vastus
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kaart 667
Küsimus
Why must sanitization address data remanence?
Vastus
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kaart 668
Küsimus
Why require rules of engagement for vendor testing?
Vastus
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kaart 669
Küsimus
What does a private data classification indicate?
Vastus
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kaart 670
Küsimus
What does a tabletop recovery exercise test?
Vastus
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kaart 671
Küsimus
Why prevent password reuse?
Vastus
One compromised password should not unlock other accounts or services.
Kaart 672
Küsimus
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Vastus
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kaart 673
Küsimus
What does transport encryption protect?
Vastus
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kaart 674
Küsimus
How can a voice call become an attack vector?
Vastus
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kaart 675
Küsimus
What should a digital-forensics report document?
Vastus
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kaart 676
Küsimus
What tradeoff comes with an expansionary risk appetite?
Vastus
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kaart 677
Küsimus
What does a known penetration-test environment provide?
Vastus
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kaart 678
Küsimus
Why evaluate compute requirements before deployment?
Vastus
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kaart 679
Küsimus
Why place sensors at network choke points?
Vastus
They can observe traffic crossing important trust boundaries.
Kaart 680
Küsimus
What should hybrid or remote-work security training emphasize?
Vastus
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kaart 681
Küsimus
Why plan an application restart separately from a service restart?
Vastus
The application may need its own state handling, user coordination, health checks, and rollback point.
Kaart 682
Küsimus
What is a cryptographic vulnerability?
Vastus
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kaart 683
Küsimus
Why report findings by asset owner?
Vastus
Owners need clear accountability and a prioritized remediation queue.
Kaart 684
Küsimus
What should guide selection of a secure protocol?
Vastus
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kaart 685
Küsimus
How do centralized and decentralized governance structures differ?
Vastus
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kaart 686
Küsimus
How does privacy-aware design limit data retention?
Vastus
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kaart 687
Küsimus
What does a pressure security sensor detect?
Vastus
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kaart 688
Küsimus
What automation costs should a security team plan for?
Vastus
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kaart 689
Küsimus
What should RTOS hardening preserve while reducing attack surface?
Vastus
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kaart 690
Küsimus
What is the goal of disruption-for-chaos activity?
Vastus
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kaart 691
Küsimus
Which indicator can repeated password guessing produce?
Vastus
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kaart 692
Küsimus
How does removing unnecessary software harden a system?
Vastus
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kaart 693
Küsimus
What does NetFlow provide?
Vastus
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kaart 694
Küsimus
How can a dashboard support an investigation?
Vastus
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kaart 695
Küsimus
When should a password be expired?
Vastus
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kaart 696
Küsimus
Why does cryptographic key length matter?
Vastus
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kaart 697
Küsimus
How can an unsecure Bluetooth connection become an attack vector?
Vastus
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kaart 698
Küsimus
What is a key risk indicator?
Vastus
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kaart 699
Küsimus
What should vendor monitoring verify when a contract ends?
Vastus
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kaart 700
Küsimus
What does a sensitive data classification indicate?
Vastus
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kaart 701
Küsimus
What does software-defined networking separate?
Vastus
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kaart 702
Küsimus
Where should a web application firewall be placed?
Vastus
In the path of web requests before they reach the protected application.
Kaart 703
Küsimus
What does a simulated recovery exercise test?
Vastus
Participants perform realistic response actions in a controlled environment without disrupting production.
Kaart 704
Küsimus
How can a team verify that a detective control is effective?
Vastus
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kaart 705
Küsimus
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Vastus
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kaart 706
Küsimus
What makes a vulnerability cloud-specific?
Vastus
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kaart 707
Küsimus
How can insurance respond to vulnerability risk?
Vastus
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kaart 708
Küsimus
How does reputation improve web filtering?
Vastus
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kaart 709
Küsimus
What does an encryption policy establish?
Vastus
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kaart 710
Küsimus
How does a microwave security sensor detect movement?
Vastus
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kaart 711
Küsimus
What should IoT-device hardening change before deployment?
Vastus
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kaart 712
Küsimus
Why track software licenses as assets?
Vastus
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kaart 713
Küsimus
What does a password manager improve?
Vastus
It can generate and store unique long passwords so users do not memorize or reuse them.
Kaart 714
Küsimus
What makes a ledger open and public?
Vastus
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kaart 715
Küsimus
What should a payment-change request trigger?
Vastus
Independent verification through a known channel before any account or payment detail is changed.
Kaart 716
Küsimus
What does preserving digital evidence require?
Vastus
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kaart 717
Küsimus
What should a risk report tell decision-makers?
Vastus
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kaart 718
Küsimus
What should an external assessment report provide?
Vastus
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kaart 719
Küsimus
What is a centralized design's main resilience risk?
Vastus
A central dependency can become a bottleneck or single point of failure.
Kaart 720
Küsimus
What does mutual TLS add to a TLS-protected service connection?
Vastus
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kaart 721
Küsimus
What should recurring security-awareness reporting show?
Vastus
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kaart 722
Küsimus
Why do legacy applications require extra change planning?
Vastus
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kaart 723
Küsimus
How do a data controller and a data processor differ?
Vastus
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kaart 724
Küsimus
How can orchestration become a single point of failure?
Vastus
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kaart 725
Küsimus
Why should defenses account for a threat actor's sophistication and capability?
Vastus
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kaart 726
Küsimus
How does an injection attack make an application execute unintended instructions?
Vastus
It sends crafted input that an interpreter treats as code or commands instead of data.
Kaart 727
Küsimus
What does a host-based firewall control?
Vastus
Inbound and outbound network traffic for one endpoint according to local rules.
Kaart 728
Küsimus
Why revise alerting after an incident?
Vastus
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kaart 729
Küsimus
Why include security duties in procurement criteria?
Vastus
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kaart 730
Küsimus
What does a critical data classification indicate?
Vastus
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kaart 731
Küsimus
What infrastructure capacity must support failover?
Vastus
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kaart 732
Küsimus
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Vastus
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kaart 733
Küsimus
How does a remediation exemption differ from an exception?
Vastus
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kaart 734
Küsimus
Why should automated EDR or XDR blocking have an exception and rollback path?
Vastus
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kaart 735
Küsimus
What does a security playbook provide?
Vastus
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kaart 736
Küsimus
How does an ultrasonic security sensor detect movement?
Vastus
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kaart 737
Küsimus
What should a managed mobile device require for Bluetooth connections?
Vastus
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kaart 738
Küsimus
How do password complexity rules differ from password length?
Vastus
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kaart 739
Küsimus
What makes a certificate third-party trusted?
Vastus
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kaart 740
Küsimus
Why is an out-of-band check effective against impersonation?
Vastus
It verifies the request through a separate, previously trusted communication path.
Kaart 741
Küsimus
What does a risk exception authorize?
Vastus
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kaart 742
Küsimus
What security challenge grows in a decentralized design?
Vastus
Consistent policy, inventory, monitoring, and patching become harder.
Kaart 743
Küsimus
How should controls be selected for an unused network path?
Vastus
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kaart 744
Küsimus
How can a buffer-overflow attack affect an application?
Vastus
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 kaarti
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo avaneb, et saaksid õppimist alustada.