CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
دربارهٔ این دسته
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
کارتهای این دسته
کارت ۱
پرسش
What does an information security policy establish?
پاسخ
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
کارت ۲
پرسش
What is phishing?
پاسخ
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
کارت ۳
پرسش
What does a public-key certificate bind to an identity?
پاسخ
A public key, together with identifying information and the issuer's signature.
کارت ۴
پرسش
What is data at rest?
پاسخ
Data stored on media such as disks, databases, backups, or mobile devices.
کارت ۵
پرسش
How does policy-driven access control decide a zero-trust access request?
پاسخ
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
کارت ۶
پرسش
What does establishing a secure baseline produce?
پاسخ
An approved, documented configuration that defines the required secure state for a class of computing resource.
کارت ۷
پرسش
What is hashing used to verify?
پاسخ
Whether data has changed by comparing fixed-length digest values.
کارت ۸
پرسش
What is impersonation in social engineering?
پاسخ
Pretending to be a trusted person or organization to obtain access, data, or action.
کارت ۹
پرسش
What is virtualization?
پاسخ
Abstracting physical compute so multiple isolated guest systems can share a host.
کارت ۱۰
پرسش
What is chain of custody?
پاسخ
A documented history of who collected, handled, transferred, stored, and examined evidence.
کارت ۱۱
پرسش
What is quantitative risk analysis?
پاسخ
Estimating risk with numerical values such as money, frequency, or probability.
کارت ۱۲
پرسش
What is a phishing awareness campaign?
پاسخ
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
کارت ۱۳
پرسش
What is high availability?
پاسخ
Designing a service to remain accessible despite expected component failures.
کارت ۱۴
پرسش
What is a network security zone?
پاسخ
A group of systems with similar trust, function, or control requirements.
کارت ۱۵
پرسش
What is risk transfer?
پاسخ
Shifting some financial or operational consequence to another party, such as through insurance or contract.
کارت ۱۶
پرسش
What is media sanitization?
پاسخ
Making stored data infeasible to recover for the intended level of protection.
کارت ۱۷
پرسش
What does CVSS provide?
پاسخ
A standardized way to describe a vulnerability's technical severity characteristics.
کارت ۱۸
پرسش
What does security alerting do?
پاسخ
It turns matched events or behavior into a notification that the right responder can review.
کارت ۱۹
پرسش
What does a firewall rule enforce?
پاسخ
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
کارت ۲۰
پرسش
What is deprovisioning?
پاسخ
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
کارت ۲۱
پرسش
How does inline placement differ from a tap or monitor port?
پاسخ
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
کارت ۲۲
پرسش
What is asymmetric encryption?
پاسخ
Encryption that uses a mathematically related public and private key pair.
کارت ۲۳
پرسش
What does SPF authorize?
پاسخ
Which mail servers may send mail for a domain in the SMTP envelope.
کارت ۲۴
پرسش
What is a possession factor?
پاسخ
Something the claimant has, such as a cryptographic authenticator.
کارت ۲۵
پرسش
What does ordinary TLS usually protect and authenticate?
پاسخ
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
کارت ۲۶
پرسش
What is single loss expectancy?
پاسخ
The estimated loss from one occurrence of a risk event.
کارت ۲۷
پرسش
What does a certificate authority do?
پاسخ
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
کارت ۲۸
پرسش
What is a detective control meant to do?
پاسخ
Identify that an unwanted event has happened or is happening.
کارت ۲۹
پرسش
What is the security purpose of change-control approval?
پاسخ
Ensure authorized reviewers assess risk before the production change occurs.
کارت ۳۰
پرسش
What is shadow IT?
پاسخ
Technology used for organizational work without required approval or oversight.
کارت ۳۱
پرسش
What is a buffer overflow vulnerability?
پاسخ
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
کارت ۳۲
پرسش
What is ransomware?
پاسخ
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
کارت ۳۳
پرسش
How does network segmentation limit an incident?
پاسخ
It restricts communication paths and reduces lateral movement between zones.
کارت ۳۴
پرسش
How do load balancing and clustering support availability differently?
پاسخ
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
کارت ۳۵
پرسش
What is vendor due diligence?
پاسخ
Evaluating a provider's security, capability, stability, and fit before commitment.
کارت ۳۶
پرسش
Who is a data subject?
پاسخ
The person whose personal data is collected or processed.
کارت ۳۷
پرسش
What is attestation?
پاسخ
A formal assertion or report about a subject matter, often supported by an independent examination.
کارت ۳۸
پرسش
What is a replay attack?
پاسخ
Valid captured data is retransmitted to repeat an authenticated or authorized action.
کارت ۳۹
پرسش
What does a wireless site survey establish?
پاسخ
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
کارت ۴۰
پرسش
What is the time-of-check stage of a race-condition vulnerability?
پاسخ
The application verifies a condition or resource state before acting on it.
کارت ۴۱
پرسش
What is a penetration test?
پاسخ
An authorized attempt to exploit weaknesses and demonstrate practical impact.
کارت ۴۲
پرسش
What is a cold recovery site?
پاسخ
A facility with basic space and utilities but little preinstalled technology or current data.
کارت ۴۳
پرسش
What is data in transit?
پاسخ
Data moving between systems or across a network.
کارت ۴۴
پرسش
What is a vendor security questionnaire?
پاسخ
A structured request for information about a provider's controls and practices.
کارت ۴۵
پرسش
How does an internal actor's starting position differ from an external actor's?
پاسخ
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
کارت ۴۶
پرسش
What can unexpected account lockouts indicate?
پاسخ
Password guessing, credential stuffing, user error, or a broken client.
کارت ۴۷
پرسش
How do permissions enforce access control?
پاسخ
They specify which actions a subject may perform on a particular resource.
کارت ۴۸
پرسش
What is log aggregation?
پاسخ
Central collection of logs from multiple sources for search, correlation, and retention.
کارت ۴۹
پرسش
Why plan a service restart as part of a change?
پاسخ
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
کارت ۵۰
پرسش
What is infrastructure as code?
پاسخ
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
کارت ۵۱
پرسش
What should security-awareness program development start with?
پاسخ
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
کارت ۵۲
پرسش
What is a voice-based social-engineering attack called?
پاسخ
Vishing.
کارت ۵۳
پرسش
What happens during incident-response preparation?
پاسخ
Teams establish people, tools, access, communications, training, and procedures before an incident.
کارت ۵۴
پرسش
What does an offensive penetration-testing team do?
پاسخ
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
کارت ۵۵
پرسش
What is federation?
پاسخ
One security domain relies on identity assertions from another trusted domain.
کارت ۵۶
پرسش
What is asset classification?
پاسخ
Grouping an asset by sensitivity, criticality, or required handling.
کارت ۵۷
پرسش
What is cross-site scripting?
پاسخ
Injection of script-capable content that a browser executes in another site's security context.
کارت ۵۸
پرسش
What can IDS or IPS trends reveal?
پاسخ
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
کارت ۵۹
پرسش
What can unexpected resource inaccessibility indicate?
پاسخ
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
کارت ۶۰
پرسش
What is a corrective control meant to do?
پاسخ
Limit damage and restore a secure state after an event.
کارت ۶۱
پرسش
How do containers differ from virtual machines?
پاسخ
Containers share the host kernel; virtual machines normally run separate guest operating systems.
کارت ۶۲
پرسش
How does an active security device differ from a passive one?
پاسخ
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
کارت ۶۳
پرسش
Why is unsupported software a persistent attack surface?
پاسخ
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
کارت ۶۴
پرسش
What is annualized rate of occurrence?
پاسخ
The estimated number of times a risk event occurs per year.
کارت ۶۵
پرسش
What is an inherence factor?
پاسخ
A biometric characteristic of the claimant.
کارت ۶۶
پرسش
What do a threat actor's sophistication and capability describe?
پاسخ
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
کارت ۶۷
پرسش
What is a SIEM?
پاسخ
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
کارت ۶۸
پرسش
What is sideloading?
پاسخ
Installing software from outside the platform's approved distribution path.
کارت ۶۹
پرسش
What does an IDS or IPS signature match?
پاسخ
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
کارت ۷۰
پرسش
Why are embedded systems often difficult to patch?
پاسخ
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
کارت ۷۱
پرسش
What is a virtual private network?
پاسخ
An encrypted logical connection that carries private traffic across an untrusted or shared network.
کارت ۷۲
پرسش
What should an initial security-awareness report establish?
پاسخ
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
کارت ۷۳
پرسش
What is symmetric encryption?
پاسخ
Encryption that uses the same secret key to encrypt and decrypt data.
کارت ۷۴
پرسش
What happens during incident detection?
پاسخ
Monitoring or a report identifies activity that may meet the organization's incident criteria.
کارت ۷۵
پرسش
What is recovery time objective?
پاسخ
The target maximum time to restore a function after disruption.
کارت ۷۶
پرسش
Why prioritize password length?
پاسخ
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
کارت ۷۷
پرسش
What must sanitization accomplish before an asset leaves organizational control?
پاسخ
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
کارت ۷۸
پرسش
What is a real-time operating system designed to provide?
پاسخ
Predictable response timing for tasks with strict deadlines.
کارت ۷۹
پرسش
What does fail-open behavior do when a control fails?
پاسخ
It permits traffic or access to preserve availability.
کارت ۸۰
پرسش
What is jailbreaking or rooting a mobile device?
پاسخ
Removing platform restrictions to gain privileged control over the operating system.
کارت ۸۱
پرسش
What does network access control enforce?
پاسخ
Identity, device posture, and access policy at network connection time and during a session.
کارت ۸۲
پرسش
What does data loss prevention do?
پاسخ
Detects and may block sensitive data use or transfer that violates policy.
کارت ۸۳
پرسش
What security property does a blockchain provide?
پاسخ
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
کارت ۸۴
پرسش
What is recovery point objective?
پاسخ
The target maximum acceptable data loss measured backward in time.
کارت ۸۵
پرسش
How do ICS and SCADA relate?
پاسخ
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
کارت ۸۶
پرسش
What does fail-closed behavior do when a control fails?
پاسخ
It denies traffic or access to preserve security.
کارت ۸۷
پرسش
Which keys create and verify a typical digital signature?
پاسخ
The signer creates it with a private key, and others verify it with the corresponding public key.
کارت ۸۸
پرسش
What is SQL injection?
پاسخ
Input that alters the structure or meaning of a database query because code and data were not safely separated.
کارت ۸۹
پرسش
What does DKIM verify?
پاسخ
That selected message content was signed by a domain and was not altered after signing.
کارت ۹۰
پرسش
What is post-incident activity?
پاسخ
Learning from the event and improving controls, plans, and recovery based on evidence.
کارت ۹۱
پرسش
What characterizes an expansionary risk appetite?
پاسخ
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
کارت ۹۲
پرسش
How do centralized and decentralized architectures differ?
پاسخ
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
کارت ۹۳
پرسش
What does a certificate revocation list publish?
پاسخ
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
کارت ۹۴
پرسش
What is a legal hold?
پاسخ
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
کارت ۹۵
پرسش
What is exposure factor in quantitative risk analysis?
پاسخ
The estimated percentage of an asset's value lost in one event.
کارت ۹۶
پرسش
What is decentralized architecture?
پاسخ
Control or service responsibility is distributed across multiple independent components or locations.
کارت ۹۷
پرسش
What is tokenization?
پاسخ
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
کارت ۹۸
پرسش
How can automation act as a workforce multiplier?
پاسخ
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
کارت ۹۹
پرسش
What can endpoint process logs reveal?
پاسخ
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
کارت ۱۰۰
پرسش
What does the CIA triad protect?
پاسخ
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
کارت ۱۰۱
پرسش
How does data masking protect information?
پاسخ
It hides selected values or characters while preserving a usable representation.
کارت ۱۰۲
پرسش
How can a national requirement affect security governance?
پاسخ
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
کارت ۱۰۳
پرسش
What do integrations and APIs provide to security orchestration?
پاسخ
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
کارت ۱۰۴
پرسش
What makes a compliance report external?
پاسخ
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
کارت ۱۰۵
پرسش
What does a cryptographic algorithm define?
پاسخ
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
کارت ۱۰۶
پرسش
Why compare systems with a secure baseline regularly?
پاسخ
To detect drift, unauthorized changes, and missing hardening.
کارت ۱۰۷
پرسش
What does integrity protect?
پاسخ
The accuracy and completeness of data and systems against unauthorized change.
کارت ۱۰۸
پرسش
What does vulnerability classification organize?
پاسخ
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
کارت ۱۰۹
پرسش
What does a password standard define?
پاسخ
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
کارت ۱۱۰
پرسش
What technology capacity must a recovery design plan for?
پاسخ
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
کارت ۱۱۱
پرسش
What does a confidential data classification indicate?
پاسخ
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
کارت ۱۱۲
پرسش
What makes a vendor assessment independent?
پاسخ
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
کارت ۱۱۳
پرسش
What lets a worm spread without attaching itself to another file?
پاسخ
It is a standalone program that replicates across reachable systems or services.
کارت ۱۱۴
پرسش
What is microsegmentation?
پاسخ
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
کارت ۱۱۵
پرسش
What can application logs reveal?
پاسخ
Transactions, errors, user actions, and application-specific security events.
کارت ۱۱۶
پرسش
What does deploying a secure baseline require?
پاسخ
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
کارت ۱۱۷
پرسش
How can resource-provisioning automation improve security?
پاسخ
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
کارت ۱۱۸
پرسش
What does availability protect?
پاسخ
Reliable, timely access to systems and data when authorized users need them.
کارت ۱۱۹
پرسش
Why must a change request describe business impact?
پاسخ
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
کارت ۱۲۰
پرسش
What does an authenticated vulnerability scan add?
پاسخ
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
کارت ۱۲۱
پرسش
What does a change-management procedure specify?
پاسخ
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
کارت ۱۲۲
پرسش
What is a sanction for noncompliance?
پاسخ
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
کارت ۱۲۳
پرسش
How can email deliver a security attack?
پاسخ
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
کارت ۱۲۴
پرسش
What is an internal compliance audit?
پاسخ
An organization-led examination of whether selected operations and controls meet defined requirements.
کارت ۱۲۵
پرسش
What is a Trojan?
پاسخ
Malware disguised as legitimate or desirable software.
کارت ۱۲۶
پرسش
What is clustering?
پاسخ
Multiple systems work together to provide a service and tolerate member failure.
کارت ۱۲۷
پرسش
What makes data regulated?
پاسخ
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
کارت ۱۲۸
پرسش
What does a wireless heat map show?
پاسخ
Measured or modeled signal strength and coverage across a physical area.
کارت ۱۲۹
پرسش
How should vendor criticality affect due diligence?
پاسخ
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
کارت ۱۳۰
پرسش
How can a digital signature support non-repudiation?
پاسخ
It provides evidence that the holder of a private key signed specific data.
کارت ۱۳۱
پرسش
What should vulnerability prioritization consider beyond severity?
پاسخ
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
کارت ۱۳۲
پرسش
What is a security guideline?
پاسخ
Recommended practice that allows judgment unless adopted as a requirement.
کارت ۱۳۳
پرسش
What usually distinguishes a nation-state threat actor?
پاسخ
Strategic objectives, substantial resources, patience, and advanced operational capability.
کارت ۱۳۴
پرسش
What is spyware?
پاسخ
Software that secretly collects information about a user or system.
کارت ۱۳۵
پرسش
Why maintain an allow list for applications?
پاسخ
Only explicitly approved software is permitted to execute.
کارت ۱۳۶
پرسش
How can an image become an attack vector?
پاسخ
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
کارت ۱۳۷
پرسش
What makes a security control technical?
پاسخ
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
کارت ۱۳۸
پرسش
What is identity proofing?
پاسخ
Establishing that a person is who they claim to be before issuing an account or credential.
کارت ۱۳۹
پرسش
What is an automated security guardrail?
پاسخ
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
کارت ۱۴۰
پرسش
Why assign an owner to a planned change?
پاسخ
To make one party accountable for coordination, execution, and follow-through.
کارت ۱۴۱
پرسش
How can national privacy law affect data handling?
پاسخ
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
کارت ۱۴۲
پرسش
What is continuity of operations?
پاسخ
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
کارت ۱۴۳
پرسش
What security tradeoff comes with BYOD?
پاسخ
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
کارت ۱۴۴
پرسش
How should policies and handbooks support security training?
پاسخ
They provide accessible, current rules and reporting steps that training can apply to real situations.
کارت ۱۴۵
پرسش
What is a keylogger?
پاسخ
A tool that records keystrokes to capture data such as credentials.
کارت ۱۴۶
پرسش
What makes information a trade secret?
پاسخ
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
کارت ۱۴۷
پرسش
What does authentication establish?
پاسخ
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
کارت ۱۴۸
پرسش
What risk comes from an untrusted file attachment?
پاسخ
Opening or parsing it can execute malicious code or expose data.
کارت ۱۴۹
پرسش
How does risk tolerance affect vulnerability remediation?
پاسخ
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
کارت ۱۵۰
پرسش
How can a global requirement affect security governance?
پاسخ
It can require a common control and oversight approach across multiple countries while local obligations still apply.
کارت ۱۵۱
پرسش
Why should questionnaire answers be supported by evidence?
پاسخ
Self-assertions alone may not prove that controls are designed or operating effectively.
کارت ۱۵۲
پرسش
What is an independent third-party audit?
پاسخ
An external party with suitable independence examines evidence against defined criteria.
کارت ۱۵۳
پرسش
What do account provisioning and deprovisioning do?
پاسخ
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
کارت ۱۵۴
پرسش
What is an unskilled attacker commonly called?
پاسخ
A script kiddie: someone who relies on tools or instructions created by others.
کارت ۱۵۵
پرسش
What is a rootkit?
پاسخ
Software designed to maintain privileged, concealed access by altering or subverting the system.
کارت ۱۵۶
پرسش
What does an access control list enforce?
پاسخ
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
کارت ۱۵۷
پرسش
What should system security monitoring observe?
پاسخ
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
کارت ۱۵۸
پرسش
What can operating-system security logs reveal?
پاسخ
Authentication, privilege use, policy changes, services, and other host security events.
کارت ۱۵۹
پرسش
Why isolate operational technology from general business networks?
پاسخ
To limit attack paths into safety- and availability-critical processes.
کارت ۱۶۰
پرسش
What is the COPE mobile deployment model?
پاسخ
The organization owns the device but permits defined personal use while retaining management control.
کارت ۱۶۱
پرسش
What security work belongs in asset acquisition and procurement?
پاسخ
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
کارت ۱۶۲
پرسش
How can user-provisioning automation improve security?
پاسخ
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
کارت ۱۶۳
پرسش
What people capacity must a continuity plan account for?
پاسخ
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
کارت ۱۶۴
پرسش
What do authorization models define?
پاسخ
How permissions are assigned to authenticated subjects and evaluated for requested actions.
کارت ۱۶۵
پرسش
Why are removable devices an attack vector?
پاسخ
They can introduce malware or remove data while bypassing network controls.
کارت ۱۶۶
پرسش
What should predeployment change-test results show?
پاسخ
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
کارت ۱۶۷
پرسش
What is the time-of-use stage of a race-condition vulnerability?
پاسخ
The application acts on a resource after the check, creating a gap in which another process may change the resource.
کارت ۱۶۸
پرسش
What is data in use?
پاسخ
Data actively processed in memory or by an application.
کارت ۱۶۹
پرسش
What does open-source vulnerability intelligence contribute?
پاسخ
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
کارت ۱۷۰
پرسش
What can file-integrity monitoring detect?
پاسخ
Unexpected changes to protected files, directories, or configuration.
کارت ۱۷۱
پرسش
Why should deprovisioning be prompt?
پاسخ
Former users or roles should not retain usable access.
کارت ۱۷۲
پرسش
What is an acceptable use policy?
پاسخ
Rules for permitted and prohibited use of organizational systems, accounts, and data.
کارت ۱۷۳
پرسش
What makes a compliance report internal?
پاسخ
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
کارت ۱۷۴
پرسش
What is a logic bomb?
پاسخ
Malicious code that activates when a specified condition or time is reached.
کارت ۱۷۵
پرسش
What does a right-to-audit clause provide?
پاسخ
Contractual authority to inspect or obtain evidence about agreed controls.
کارت ۱۷۶
پرسش
Where should a forward proxy sit in an enterprise traffic path?
پاسخ
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
کارت ۱۷۷
پرسش
Which cues should make a message look suspicious?
پاسخ
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
کارت ۱۷۸
پرسش
What makes a security control managerial?
پاسخ
It directs risk and governance through decisions such as policies, assessments, and oversight.
کارت ۱۷۹
پرسش
What is the CYOD mobile deployment model?
پاسخ
The user selects from organization-approved device options that remain subject to corporate security requirements.
کارت ۱۸۰
پرسش
How does client-based vulnerable software differ from an agentless exposure?
پاسخ
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
کارت ۱۸۱
پرسش
What makes a risk assessment recurring?
پاسخ
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
کارت ۱۸۲
پرسش
What does a defensive penetration-testing team practice?
پاسخ
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
کارت ۱۸۳
پرسش
In a zero-trust data plane, what can the subject or system represent?
پاسخ
The user, device, workload, or service requesting access to a protected resource.
کارت ۱۸۴
پرسش
What primarily motivates a hacktivist?
پاسخ
A political, social, or ideological cause.
کارت ۱۸۵
پرسش
What is bloatware?
پاسخ
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
کارت ۱۸۶
پرسش
Why keep endpoint-protection signatures and engines current?
پاسخ
They need current detection logic to recognize newly identified malware and exploit behavior.
کارت ۱۸۷
پرسش
What should application security monitoring observe?
پاسخ
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
کارت ۱۸۸
پرسش
What is role-based access control?
پاسخ
Permissions are assigned to roles, and identities receive access through their roles.
کارت ۱۸۹
پرسش
What is geographic dispersal?
پاسخ
Placing redundant resources in separate locations so one regional event does not affect all copies.
کارت ۱۹۰
پرسش
What is a malicious update?
پاسخ
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
کارت ۱۹۱
پرسش
What does static application analysis inspect?
پاسخ
Source code, bytecode, or compiled code without executing the application.
کارت ۱۹۲
پرسش
What does a firewall access list define?
پاسخ
An ordered set of traffic-matching conditions and the action applied when a condition matches.
کارت ۱۹۳
پرسش
What does a disaster recovery policy establish?
پاسخ
Management expectations for restoring technology and data after a disruptive event.
کارت ۱۹۴
پرسش
How does logical segmentation separate workloads that share physical infrastructure?
پاسخ
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
کارت ۱۹۵
پرسش
How should IDS and IPS placement differ?
پاسخ
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
کارت ۱۹۶
پرسش
What should automated ticket creation capture?
پاسخ
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
کارت ۱۹۷
پرسش
What makes information intellectual property?
پاسخ
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
کارت ۱۹۸
پرسش
What is a backout plan?
پاسخ
Predefined steps for safely reversing a failed or harmful change.
کارت ۱۹۹
پرسش
Why is an unsecure wireless network an attack vector?
پاسخ
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
کارت ۲۰۰
پرسش
What is physical brute force?
پاسخ
Using force to defeat a lock, barrier, enclosure, or other physical control.
کارت ۲۰۱
پرسش
What is application sandboxing?
پاسخ
Running code in a constrained environment with limited access to the host and data.
کارت ۲۰۲
پرسش
Why assign an asset owner?
پاسخ
One accountable party must decide its use, protection, and lifecycle.
کارت ۲۰۳
پرسش
What happens during risk identification?
پاسخ
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
کارت ۲۰۴
پرسش
What should an SLA state about breach notification?
پاسخ
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
کارت ۲۰۵
پرسش
How do due diligence and due care differ in compliance?
پاسخ
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
کارت ۲۰۶
پرسش
What is attribute-based access control?
پاسخ
Policy evaluates attributes of the subject, resource, action, and environment.
کارت ۲۰۷
پرسش
What does a zero-trust policy engine do?
پاسخ
It evaluates policy and signals to decide whether access should be allowed.
کارت ۲۰۸
پرسش
How does a cloud responsibility matrix allocate security duties?
پاسخ
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
کارت ۲۰۹
پرسش
Where should a load balancer sit in a service path?
پاسخ
In front of service instances so it can route requests to healthy backends.
کارت ۲۱۰
پرسش
What should the security team do with a reported suspicious message?
پاسخ
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
کارت ۲۱۱
پرسش
What makes an operating-system vulnerability high impact?
پاسخ
It can affect every application and security control that relies on the compromised OS.
کارت ۲۱۲
پرسش
What does dynamic application analysis inspect?
پاسخ
The behavior and externally visible weaknesses of a running application.
کارت ۲۱۳
پرسش
How can false-positive trends affect IDS or IPS tuning?
پاسخ
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
کارت ۲۱۴
پرسش
What does a business continuity policy establish?
پاسخ
Management expectations for sustaining and restoring critical business functions.
کارت ۲۱۵
پرسش
What is a hot recovery site?
پاسخ
A ready, synchronized environment intended to take over quickly.
کارت ۲۱۶
پرسش
What makes an insider threat distinct?
پاسخ
The actor has legitimate access or organizational knowledge that can be misused.
کارت ۲۱۷
پرسش
What is RFID cloning?
پاسخ
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
کارت ۲۱۸
پرسش
Why apply vendor security updates promptly?
پاسخ
They remove known weaknesses before attackers can exploit the unpatched exposure.
کارت ۲۱۹
پرسش
What should infrastructure security monitoring observe?
پاسخ
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
کارت ۲۲۰
پرسش
What can firewall logs reveal?
پاسخ
Allowed or denied network connections across controlled boundaries.
کارت ۲۲۱
پرسش
Why minimize open service ports?
پاسخ
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
کارت ۲۲۲
پرسش
What is threat hunting?
پاسخ
A proactive search for evidence of malicious activity that existing detections have not confirmed.
کارت ۲۲۳
پرسش
What triggers an ad hoc risk assessment?
پاسخ
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
کارت ۲۲۴
پرسش
What makes an assessment external?
پاسخ
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
کارت ۲۲۵
پرسش
What is data sovereignty?
پاسخ
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
کارت ۲۲۶
پرسش
What security boundary does a cellular connection create for a mobile device?
پاسخ
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
کارت ۲۲۷
پرسش
What makes a security control operational?
پاسخ
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
کارت ۲۲۸
پرسش
What is discretionary access control?
پاسخ
A resource owner can decide who receives access, within system policy.
کارت ۲۲۹
پرسش
How can careful automation support employee retention?
پاسخ
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
کارت ۲۳۰
پرسش
Why does ease of deployment matter in an architecture decision?
پاسخ
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
کارت ۲۳۱
پرسش
What tradeoff comes with placing an NGFW inline?
پاسخ
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
کارت ۲۳۲
پرسش
What does a zero-trust policy administrator do?
پاسخ
It carries out the policy engine's decision, such as creating or ending a session.
کارت ۲۳۳
پرسش
What should a master service agreement define for data return and deletion?
پاسخ
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
کارت ۲۳۴
پرسش
What is an environmental physical attack?
پاسخ
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
کارت ۲۳۵
پرسش
When should a maintenance window be chosen?
پاسخ
When disruption and rollback can be managed with the least business impact.
کارت ۲۳۶
پرسش
What is memory injection?
پاسخ
Placing malicious code or data into another process's memory so it executes in that process's context.
کارت ۲۳۷
پرسش
What does software composition analysis find?
پاسخ
Known risks and license information in third-party dependencies.
کارت ۲۳۸
پرسش
What is DNS filtering?
پاسخ
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
کارت ۲۳۹
پرسش
What should an incident response policy establish?
پاسخ
Authority, scope, reporting duties, and organizational commitment for incident handling.
کارت ۲۴۰
پرسش
How can noncompliance cause reputational damage?
پاسخ
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
کارت ۲۴۱
پرسش
What does full-disk encryption protect?
پاسخ
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
کارت ۲۴۲
پرسش
Why are default credentials dangerous?
پاسخ
They are widely known or easily discovered and often remain unchanged.
کارت ۲۴۳
پرسش
What makes a risk assessment one-time?
پاسخ
It evaluates a defined decision or scope once without an established repeating cadence.
کارت ۲۴۴
پرسش
What is a warm recovery site?
پاسخ
A partially equipped environment that needs some data restoration or configuration before use.
کارت ۲۴۵
پرسش
What does application input validation do?
پاسخ
It checks that input matches the expected type, length, range, and format before use.
کارت ۲۴۶
پرسش
What should an asset inventory record besides a device name?
پاسخ
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
کارت ۲۴۷
پرسش
What is mandatory access control?
پاسخ
A central authority enforces access through labels and rules that ordinary owners cannot override.
کارت ۲۴۸
پرسش
What security benefit does infrastructure as code provide?
پاسخ
Repeatable, reviewable deployments that reduce undocumented configuration drift.
کارت ۲۴۹
پرسش
When should a public service control fail closed?
پاسخ
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
کارت ۲۵۰
پرسش
What should users do with a suspicious message?
پاسخ
Report it through the approved channel without interacting with its links or attachments.
کارت ۲۵۱
پرسش
What usually motivates organized cybercrime?
پاسخ
Financial gain through scalable or repeatable criminal activity.
کارت ۲۵۲
پرسش
How can malicious code support a network attack?
پاسخ
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
کارت ۲۵۳
پرسش
When is virtual patching useful?
پاسخ
When a network or application control can block exploit traffic before the underlying system can be patched.
کارت ۲۵۴
پرسش
What does security-monitoring reporting provide?
پاسخ
A summarized, audience-appropriate view of findings, trends, risk, and response status.
کارت ۲۵۵
پرسش
What does data geolocation identify?
پاسخ
The physical or legal location where data is stored, processed, or transmitted.
کارت ۲۵۶
پرسش
What does a zero-trust policy enforcement point do?
پاسخ
It enables, monitors, and terminates the connection between a subject and a resource.
کارت ۲۵۷
پرسش
What is cryptographic key exchange?
پاسخ
A method for parties to establish shared key material over an untrusted channel.
کارت ۲۵۸
پرسش
How can a vendor become a supply-chain attack vector?
پاسخ
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
کارت ۲۵۹
پرسش
Why can legacy hardware remain vulnerable?
پاسخ
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
کارت ۲۶۰
پرسش
What can proprietary vulnerability intelligence add beyond open sources?
پاسخ
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
کارت ۲۶۱
پرسش
How does a centralized proxy apply web filtering?
پاسخ
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
کارت ۲۶۲
پرسش
How can continuous integration and testing improve security automation?
پاسخ
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
کارت ۲۶۳
پرسش
What is containment?
پاسخ
Limiting an incident's spread or damage while preserving necessary operations and evidence.
کارت ۲۶۴
پرسش
What is a software development lifecycle policy meant to ensure?
پاسخ
Security requirements and checks are integrated throughout design, development, release, and maintenance.
کارت ۲۶۵
پرسش
What makes risk assessment continuous?
پاسخ
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
کارت ۲۶۶
پرسش
What is a memorandum of agreement?
پاسخ
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
کارت ۲۶۷
پرسش
What makes a penetration test integrated?
پاسخ
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
کارت ۲۶۸
پرسش
How does a DNS amplification attack magnify traffic?
پاسخ
It sends small spoofed queries that trigger larger replies toward the victim.
کارت ۲۶۹
پرسش
Why does ease of recovery matter in an architecture decision?
پاسخ
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
کارت ۲۷۰
پرسش
What does 802.1X control before a device receives normal network access?
پاسخ
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
کارت ۲۷۱
پرسش
What is rule-based access control?
پاسخ
System-wide rules grant or deny access based on conditions such as network, time, or action.
کارت ۲۷۲
پرسش
What is mobile device management?
پاسخ
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
کارت ۲۷۳
پرسش
What tradeoff comes with a cold recovery site?
پاسخ
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
کارت ۲۷۴
پرسش
Why identify stakeholders before approving a security-sensitive change?
پاسخ
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
کارت ۲۷۵
پرسش
How do attestation and acknowledgement differ?
پاسخ
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
کارت ۲۷۶
پرسش
What does zero-trust adaptive identity mean?
پاسخ
Access decisions adjust to current risk signals rather than relying only on a static login.
کارت ۲۷۷
پرسش
What makes a security control physical?
پاسخ
It protects facilities or equipment through a tangible barrier or mechanism.
کارت ۲۷۸
پرسش
What is geo-fencing for data?
پاسخ
Enforcing location-based boundaries on where data or services may be accessed or operated.
کارت ۲۷۹
پرسش
What does a Trusted Platform Module protect?
پاسخ
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
کارت ۲۸۰
پرسش
Why can a managed service provider amplify risk?
پاسخ
Its privileged access and shared tooling can provide a path into many customers.
کارت ۲۸۱
پرسش
What does probability express in risk analysis?
پاسخ
A quantified chance that a defined event will occur within stated conditions or time.
کارت ۲۸۲
پرسش
Why can shadow IT create a threat?
پاسخ
It bypasses security review, inventory, monitoring, and supported configuration.
کارت ۲۸۳
پرسش
What is on-path interception?
پاسخ
An attacker positions between communicating parties to observe or alter traffic.
کارت ۲۸۴
پرسش
Why include encryption in a system-hardening baseline?
پاسخ
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
کارت ۲۸۵
پرسش
Why tune security alerts?
پاسخ
To keep useful detections while reducing noise that wastes analyst attention.
کارت ۲۸۶
پرسش
What can IPS or IDS logs contribute to an investigation?
پاسخ
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
کارت ۲۸۷
پرسش
What is VM escape?
پاسخ
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
کارت ۲۸۸
پرسش
How can segmentation reduce vulnerability exposure before a patch is available?
پاسخ
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
کارت ۲۸۹
پرسش
Why should firewall policy name the required ports and protocols explicitly?
پاسخ
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
کارت ۲۹۰
پرسش
What is a change management policy meant to control?
پاسخ
How changes are requested, assessed, approved, tested, implemented, and reviewed.
کارت ۲۹۱
پرسش
What is a hybrid-cloud architecture?
پاسخ
An environment that integrates private or on-premises resources with public cloud services.
کارت ۲۹۲
پرسش
How do AH and ESP differ in the security services they can provide?
پاسخ
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
کارت ۲۹۳
پرسش
What makes user behavior risky?
پاسخ
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
کارت ۲۹۴
پرسش
What is least privilege?
پاسخ
Granting only the access needed for the required task and no more.
کارت ۲۹۵
پرسش
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
پاسخ
Transmission to HTTPS, script access, and cross-site sending, respectively.
کارت ۲۹۶
پرسش
Why discover unmanaged assets?
پاسخ
Unknown systems cannot be patched, monitored, or governed reliably.
کارت ۲۹۷
پرسش
What is a service-level agreement?
پاسخ
Measurable service commitments and remedies, such as availability or response targets.
کارت ۲۹۸
پرسش
What should govern automated security escalation?
پاسخ
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
کارت ۲۹۹
پرسش
What is platform diversity as a resilience strategy?
پاسخ
Using different implementations so one common flaw or failure is less likely to affect every copy.
کارت ۳۰۰
پرسش
How can replayed session material affect an application?
پاسخ
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
کارت ۳۰۱
پرسش
What is an implicit trust zone in zero trust?
پاسخ
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
کارت ۳۰۲
پرسش
What does salting a password hash accomplish?
پاسخ
It makes identical passwords hash differently and defeats precomputed hash tables.
کارت ۳۰۳
پرسش
What is spear phishing?
پاسخ
Phishing tailored to a specific person, role, or organization.
کارت ۳۰۴
پرسش
What is eradication?
پاسخ
Removing the attacker's access, malicious artifacts, and exploited conditions.
کارت ۳۰۵
پرسش
Who is a risk owner?
پاسخ
The person accountable for deciding and monitoring how a specific risk is handled.
کارت ۳۰۶
پرسش
What does a partially known penetration-test environment provide?
پاسخ
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
کارت ۳۰۷
پرسش
What is a microservices architecture?
پاسخ
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
کارت ۳۰۸
پرسش
What is a jump server?
پاسخ
A hardened intermediary used to reach systems in a restricted management network.
کارت ۳۰۹
پرسش
What can happen when a configuration change is made without dependency analysis?
پاسخ
A downstream service can fail even when the changed component works.
کارت ۳۱۰
پرسش
What is resource reuse exposure?
پاسخ
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
کارت ۳۱۱
پرسش
Why does financial information require explicit protection?
پاسخ
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
کارت ۳۱۲
پرسش
What does CVE provide?
پاسخ
A common identifier for a publicly disclosed vulnerability.
کارت ۳۱۳
پرسش
Where can DLP controls operate?
پاسخ
On endpoints, networks, email, and cloud services, depending on the product and visibility.
کارت ۳۱۴
پرسش
What does privileged password vaulting protect?
پاسخ
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
کارت ۳۱۵
پرسش
What does an access-control standard define?
پاسخ
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
کارت ۳۱۶
پرسش
How can automation support compliance monitoring?
پاسخ
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
کارت ۳۱۷
پرسش
What does static code analysis examine?
پاسخ
Source or compiled code for weakness patterns without executing the application.
کارت ۳۱۸
پرسش
What actor attribute describes funding, time, and personnel?
پاسخ
Resources.
کارت ۳۱۹
پرسش
What is DNS poisoning?
پاسخ
Introducing false DNS data so names resolve to attacker-chosen destinations.
کارت ۳۲۰
پرسش
Why change default credentials during hardening?
پاسخ
Default secrets are predictable and commonly targeted.
کارت ۳۲۱
پرسش
What does quarantine do after a security alert?
پاسخ
It restricts a suspected asset or object while analysts validate and remediate the risk.
کارت ۳۲۲
پرسش
What does key stretching do for stored passwords?
پاسخ
It deliberately makes each password guess more computationally expensive.
کارت ۳۲۳
پرسش
What is smishing?
پاسخ
Phishing delivered through SMS or another text-messaging service.
کارت ۳۲۴
پرسش
What is qualitative risk analysis?
پاسخ
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
کارت ۳۲۵
پرسش
What is a master service agreement?
پاسخ
An umbrella contract establishing general legal and commercial terms for ongoing work.
کارت ۳۲۶
پرسش
What is threat scope reduction?
پاسخ
Narrowing the systems, privileges, or paths an attacker can reach.
کارت ۳۲۷
پرسش
Why use a third-party cloud service instead of building locally?
پاسخ
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
کارت ۳۲۸
پرسش
What should determine security-device placement?
پاسخ
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
کارت ۳۲۹
پرسش
What does situational awareness mean for a user?
پاسخ
Notice the people, devices, requests, location, and context around a task before acting.
کارت ۳۳۰
پرسش
What does a failover test validate?
پاسخ
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
کارت ۳۳۱
پرسش
What is a preventive control meant to do?
پاسخ
Stop an unwanted event before it succeeds.
کارت ۳۳۲
پرسش
What is just-in-time privileged access?
پاسخ
Elevated access is granted only when needed and expires after a short approved period.
کارت ۳۳۳
پرسش
What safeguard should security-group automation enforce?
پاسخ
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
کارت ۳۳۴
پرسش
How does a reflected DDoS attack hide and multiply sources?
پاسخ
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
کارت ۳۳۵
پرسش
What is a security misconfiguration?
پاسخ
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
کارت ۳۳۶
پرسش
Why can the same vulnerability have different organizational impact?
پاسخ
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
کارت ۳۳۷
پرسش
What does URL scanning evaluate before a user opens a web destination?
پاسخ
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
کارت ۳۳۸
پرسش
What is the board's security governance role?
پاسخ
Provide oversight, set risk direction, and hold executives accountable.
کارت ۳۳۹
پرسش
What does code signing establish?
پاسخ
That code came from the holder of the signing key and has not changed since signing.
کارت ۳۴۰
پرسش
How should an asset's classification affect security operations?
پاسخ
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
کارت ۳۴۱
پرسش
How does encryption protect data?
پاسخ
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
کارت ۳۴۲
پرسش
What is a secure enclave?
پاسخ
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
کارت ۳۴۳
پرسش
What is business email compromise?
پاسخ
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
کارت ۳۴۴
پرسش
What is recovery in incident response?
پاسخ
Restoring services safely, monitoring them, and returning to normal operations.
کارت ۳۴۵
پرسش
How is single loss expectancy commonly estimated?
پاسخ
Asset value multiplied by the exposure factor.
کارت ۳۴۶
پرسش
What does an unknown penetration-test environment provide?
پاسخ
The tester begins with little or no internal information, modeling an external attacker's discovery process.
کارت ۳۴۷
پرسش
What security boundary does a hypervisor provide?
پاسخ
It isolates virtual machines while controlling their access to shared hardware.
کارت ۳۴۸
پرسش
Why does a TLS tunnel not protect a compromised endpoint?
پاسخ
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
کارت ۳۴۹
پرسش
Why update diagrams after an infrastructure change?
پاسخ
Operations and incident responders need the documentation to match the deployed environment.
کارت ۳۵۰
پرسش
What does privacy ownership assign?
پاسخ
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
کارت ۳۵۱
پرسش
What does a security control gap analysis compare?
پاسخ
The controls required for the target state with the controls currently in place.
کارت ۳۵۲
پرسش
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
پاسخ
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
کارت ۳۵۳
پرسش
What is application privilege escalation?
پاسخ
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
کارت ۳۵۴
پرسش
What risk remains when unnecessary software is left installed?
پاسخ
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
کارت ۳۵۵
پرسش
What does SCAP standardize?
پاسخ
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
کارت ۳۵۶
پرسش
What can packet capture reveal?
پاسخ
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
کارت ۳۵۷
پرسش
What makes a privileged credential ephemeral?
پاسخ
It is created for a limited task or session and expires or is destroyed automatically after that use.
کارت ۳۵۸
پرسش
How do a statement of work and a work order differ?
پاسخ
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
کارت ۳۵۹
پرسش
Why might multi-cloud improve resilience?
پاسخ
A provider-wide failure need not stop workloads that can run independently elsewhere.
کارت ۳۶۰
پرسش
How can a service provider introduce a supply-chain vulnerability?
پاسخ
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
کارت ۳۶۱
پرسش
What is a false positive in vulnerability scanning?
پاسخ
A reported weakness that is not actually present or exploitable in the assessed context.
کارت ۳۶۲
پرسش
How do EDR and XDR differ?
پاسخ
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
کارت ۳۶۳
پرسش
What should onboarding and offboarding procedures coordinate?
پاسخ
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
کارت ۳۶۴
پرسش
How should an organization harden managed mobile devices?
پاسخ
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
کارت ۳۶۵
پرسش
What is a certificate signing request?
پاسخ
A request containing a public key and subject information for a certificate authority to sign.
کارت ۳۶۶
پرسش
What is pretexting?
پاسخ
Using a fabricated role or situation to make a request seem legitimate.
کارت ۳۶۷
پرسش
How is annualized loss expectancy commonly estimated?
پاسخ
Single loss expectancy multiplied by annualized rate of occurrence.
کارت ۳۶۸
پرسش
What security consequence follows from containers sharing a kernel?
پاسخ
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
کارت ۳۶۹
پرسش
Where does 802.1X enforce a network admission decision?
پاسخ
At the controlled switch port or wireless access point before normal network access is granted.
کارت ۳۷۰
پرسش
What should insider-threat awareness teach?
پاسخ
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
کارت ۳۷۱
پرسش
What access action is suitable for careful automation?
پاسخ
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
کارت ۳۷۲
پرسش
What is an evil twin?
پاسخ
A rogue wireless network made to resemble a legitimate one so users connect to it.
۷۴۴ کارت
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
این دسته را رایگان مطالعه کنیدNibomo باز میشود تا بتوانید مطالعه را شروع کنید.
کارت ۳۷۳
پرسش
Does non-human-readable data need less protection?
پاسخ
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
کارت ۳۷۴
پرسش
What does authenticating a system establish?
پاسخ
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
کارت ۳۷۵
پرسش
What does LDAP provide in identity systems?
پاسخ
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
کارت ۳۷۶
پرسش
What is a deterrent control meant to do?
پاسخ
Discourage an attacker from attempting an unwanted action.
کارت ۳۷۷
پرسش
Why update procedures after changing a security control?
پاسخ
Staff need accurate steps for operating, monitoring, and recovering the new control.
کارت ۳۷۸
پرسش
How does OCSP differ from a certificate revocation list?
پاسخ
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
کارت ۳۷۹
پرسش
What is the goal of data exfiltration?
پاسخ
Remove data from its authorized environment without permission.
کارت ۳۸۰
پرسش
What is a watering-hole attack?
پاسخ
Compromising a site frequented by the intended targets so their visits expose them.
کارت ۳۸۱
پرسش
How can a hardware provider introduce a supply-chain vulnerability?
پاسخ
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
کارت ۳۸۲
پرسش
What is application forgery?
پاسخ
Creating or altering a request, token, or object so the application treats it as authentic.
کارت ۳۸۳
پرسش
How does least privilege mitigate compromise?
پاسخ
It limits the actions and resources available to a compromised account or process.
کارت ۳۸۴
پرسش
What is serverless computing?
پاسخ
A model where the provider manages servers and the customer deploys event-driven code or functions.
کارت ۳۸۵
پرسش
What makes an infrastructure control effective for a specific risk?
پاسخ
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
کارت ۳۸۶
پرسش
What does parallel recovery processing test?
پاسخ
Whether primary and alternate environments can run together consistently before a controlled cutover.
کارت ۳۸۷
پرسش
Which password-authentication method does WPA3-Personal use?
پاسخ
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
کارت ۳۸۸
پرسش
How does data retention affect asset disposal?
پاسخ
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
کارت ۳۸۹
پرسش
What is a false negative in vulnerability scanning?
پاسخ
A real weakness that the assessment fails to report.
کارت ۳۹۰
پرسش
What does recurring security scanning add to monitoring?
پاسخ
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
کارت ۳۹۱
پرسش
What should guide port selection for a secure protocol?
پاسخ
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
کارت ۳۹۲
پرسش
What does forensic acquisition create?
پاسخ
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
کارت ۳۹۳
پرسش
How do system owners and data owners divide security accountability?
پاسخ
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
کارت ۳۹۴
پرسش
What does likelihood express in risk analysis?
پاسخ
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
کارت ۳۹۵
پرسش
What is a memorandum of understanding?
پاسخ
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
کارت ۳۹۶
پرسش
What does the right to be forgotten generally require?
پاسخ
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
کارت ۳۹۷
پرسش
What does an audit committee oversee?
پاسخ
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
کارت ۳۹۸
پرسش
What does identity interoperability require?
پاسخ
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
کارت ۳۹۹
پرسش
How does a bollard protect a facility?
پاسخ
It blocks or redirects vehicles before they can reach a protected area.
کارت ۴۰۰
پرسش
How can hashing protect a downloaded file?
پاسخ
A trusted digest lets the recipient detect whether the file changed.
کارت ۴۰۱
پرسش
What is a credential replay attack?
پاسخ
Using captured valid credentials or tokens again without needing to discover the secret.
کارت ۴۰۲
پرسش
How can automation complexity create security risk?
پاسخ
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
کارت ۴۰۳
پرسش
What must an architecture provide when a component cannot be patched?
پاسخ
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
کارت ۴۰۴
پرسش
What makes remote access secure?
پاسخ
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
کارت ۴۰۵
پرسش
What should users verify before connecting removable media or a cable?
پاسخ
That the device and connection are approved, expected, and handled under organizational policy.
کارت ۴۰۶
پرسش
What is a self-signed certificate?
پاسخ
A certificate signed by its own private key rather than by a separate trusted issuer.
کارت ۴۰۷
پرسش
What is brand impersonation?
پاسخ
Using a trusted organization's identity or look to deceive people.
کارت ۴۰۸
پرسش
What characterizes a conservative risk appetite?
پاسخ
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
کارت ۴۰۹
پرسش
What should a managed mobile device verify before using Wi-Fi?
پاسخ
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
کارت ۴۱۰
پرسش
What is a zero-day vulnerability?
پاسخ
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
کارت ۴۱۱
پرسش
What does verification confirm after vulnerability remediation?
پاسخ
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
کارت ۴۱۲
پرسش
What is user and entity behavior analytics?
پاسخ
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
کارت ۴۱۳
پرسش
What does a physical security policy establish?
پاسخ
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
کارت ۴۱۴
پرسش
What does a UPS provide?
پاسخ
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
کارت ۴۱۵
پرسش
What is a nondisclosure agreement?
پاسخ
A contract restricting use and disclosure of defined confidential information.
کارت ۴۱۶
پرسش
What should be checked before assigning a user permission?
پاسخ
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
کارت ۴۱۷
پرسش
How does espionage differ from ordinary theft?
پاسخ
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
کارت ۴۱۸
پرسش
What is password spraying?
پاسخ
Trying a small set of common passwords across many accounts to avoid lockouts.
کارت ۴۱۹
پرسش
What is the purpose of system isolation during an incident?
پاسخ
Stop harmful communication while preserving the system for response and investigation.
کارت ۴۲۰
پرسش
What is a security benchmark?
پاسخ
A documented set of recommended configuration checks for a platform or product.
کارت ۴۲۱
پرسش
Which metadata fields give a log record investigative context?
پاسخ
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
کارت ۴۲۲
پرسش
What does an access-control vestibule prevent?
پاسخ
It limits tailgating by allowing controlled passage through one door at a time.
کارت ۴۲۳
پرسش
What is version control's security value for configuration?
پاسخ
It preserves attributable history and enables review or rollback of changes.
کارت ۴۲۴
پرسش
Why use both internal and external compliance monitoring?
پاسخ
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
کارت ۴۲۵
پرسش
What distinguishes on-premises architecture?
پاسخ
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
کارت ۴۲۶
پرسش
What risk can split tunneling add to a VPN?
پاسخ
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
کارت ۴۲۷
پرسش
What is a certificate root of trust?
پاسخ
A trusted root certificate or key from which a client validates a certificate chain.
کارت ۴۲۸
پرسش
What is typosquatting?
پاسخ
Registering a look-alike domain based on common typing errors or visual similarity.
کارت ۴۲۹
پرسش
What is root-cause analysis?
پاسخ
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
کارت ۴۳۰
پرسش
What is risk tolerance?
پاسخ
The acceptable variation or boundary around a specific objective or risk area.
کارت ۴۳۱
پرسش
What is a security self-assessment?
پاسخ
A structured internal evaluation in which the organization measures its own controls against selected criteria.
کارت ۴۳۲
پرسش
What does data masking change?
پاسخ
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
کارت ۴۳۳
پرسش
How do wireless authentication protocols let clients prove identity securely?
پاسخ
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
کارت ۴۳۴
پرسش
Why reconcile inventory with network discovery?
پاسخ
Differences expose missing records, retired systems, or unauthorized devices.
کارت ۴۳۵
پرسش
Why does sideloading raise mobile risk?
پاسخ
It can bypass store review, signing policy, and managed application controls.
کارت ۴۳۶
پرسش
What does an information-sharing organization add to vulnerability management?
پاسخ
Sector or community intelligence about relevant threats, incidents, and defensive action.
کارت ۴۳۷
پرسش
What does a web-filter block rule specify?
پاسخ
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
کارت ۴۳۸
پرسش
How do data custodians and data stewards differ?
پاسخ
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
کارت ۴۳۹
پرسش
What is a brute-force password attack?
پاسخ
Systematically trying many candidate secrets against an account or protected value.
کارت ۴۴۰
پرسش
What is a compensating control?
پاسخ
An alternative safeguard used when the preferred control is impractical or unavailable.
کارت ۴۴۱
پرسش
How can location act as an authentication factor?
پاسخ
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
کارت ۴۴۲
پرسش
Why must security automation remain supportable?
پاسخ
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
کارت ۴۴۳
پرسش
What does a standby generator provide?
پاسخ
Longer-duration power during a utility outage, after a startup delay.
کارت ۴۴۴
پرسش
What makes an architecture air-gapped?
پاسخ
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
کارت ۴۴۵
پرسش
What is a software-defined WAN?
پاسخ
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
کارت ۴۴۶
پرسش
What password-management behavior should awareness training reinforce?
پاسخ
Use unique long passwords through an approved manager and report suspected compromise promptly.
کارت ۴۴۷
پرسش
What security value does fencing provide?
پاسخ
It defines and delays entry across a physical perimeter.
کارت ۴۴۸
پرسش
What is a wildcard certificate?
پاسخ
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
کارت ۴۴۹
پرسش
How does misinformation differ from disinformation?
پاسخ
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
کارت ۴۵۰
پرسش
What is a risk threshold?
پاسخ
A defined level that triggers escalation, treatment, or another required response.
کارت ۴۵۱
پرسش
What does a vendor penetration test contribute to assessment?
پاسخ
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
کارت ۴۵۲
پرسش
What is the objective of a service-disruption attack?
پاسخ
Make a system or business function unavailable or unreliable.
کارت ۴۵۳
پرسش
What is directory traversal?
پاسخ
Manipulating a file path to reach files outside the directory the application intended to expose.
کارت ۴۵۴
پرسش
Why decommission an unsupported system?
پاسخ
Removing it eliminates an exposure that can no longer be patched or securely maintained.
کارت ۴۵۵
پرسش
Why archive security-monitoring data?
پاسخ
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
کارت ۴۵۶
پرسش
What role does RADIUS commonly play in enterprise Wi-Fi?
پاسخ
It centralizes authentication, authorization information, and accounting for network access.
کارت ۴۵۷
پرسش
Why separate the requester and approver of a high-risk change?
پاسخ
To reduce error, fraud, and unilateral unauthorized modification.
کارت ۴۵۸
پرسش
Why can a jailbroken device violate a security baseline?
پاسخ
It weakens platform isolation and allows unapproved privileged changes.
کارت ۴۵۹
پرسش
When is tokenization especially useful?
پاسخ
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
کارت ۴۶۰
پرسش
Why can dark-web intelligence affect vulnerability priority?
پاسخ
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
کارت ۴۶۱
پرسش
What firewall policy should govern traffic from a screened subnet to internal systems?
پاسخ
Deny it by default and allow only explicitly required flows.
کارت ۴۶۲
پرسش
What does SAML commonly carry?
پاسخ
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
کارت ۴۶۳
پرسش
What does a security governance committee do?
پاسخ
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
کارت ۴۶۴
پرسش
How can global privacy requirements affect one data process?
پاسخ
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
کارت ۴۶۵
پرسش
What characterizes an IoT device?
پاسخ
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
کارت ۴۶۶
پرسش
What is a unified threat management appliance?
پاسخ
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
کارت ۴۶۷
پرسش
What does a hardware security module provide?
پاسخ
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
کارت ۴۶۸
پرسش
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
پاسخ
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
کارت ۴۶۹
پرسش
What is a tabletop exercise?
پاسخ
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
کارت ۴۷۰
پرسش
What does a risk exemption authorize?
پاسخ
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
کارت ۴۷۱
پرسش
What is a regulatory examination?
پاسخ
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
کارت ۴۷۲
پرسش
What does physical video surveillance primarily provide?
پاسخ
Detection and evidence of activity in monitored areas.
کارت ۴۷۳
پرسش
What is a birthday attack against a hash?
پاسخ
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
کارت ۴۷۴
پرسش
Why keep backups both onsite and offsite?
پاسخ
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
کارت ۴۷۵
پرسش
How does technical debt affect security automation?
پاسخ
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
کارت ۴۷۶
پرسش
What should switch hardening restrict first?
پاسخ
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
کارت ۴۷۷
پرسش
What should happen when an asset changes owners?
پاسخ
Inventory, access, support responsibility, and data handling should be updated.
کارت ۴۷۸
پرسش
What does evidence of a vendor's internal audits contribute?
پاسخ
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
کارت ۴۷۹
پرسش
What is identity attestation?
پاسخ
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
کارت ۴۸۰
پرسش
Why can standard enterprise patching be unsafe for an RTOS device?
پاسخ
A change can disrupt timing guarantees or certified operational behavior.
کارت ۴۸۱
پرسش
What is secure access service edge?
پاسخ
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
کارت ۴۸۲
پرسش
What social-engineering habit should awareness training reinforce?
پاسخ
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
کارت ۴۸۳
پرسش
How can a software provider introduce a supply-chain vulnerability?
پاسخ
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
کارت ۴۸۴
پرسش
Why include internet exposure in remediation priority?
پاسخ
A reachable vulnerable service usually has more attack opportunity than an isolated one.
کارت ۴۸۵
پرسش
What does a mail gateway inspect?
پاسخ
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
کارت ۴۸۶
پرسش
What is a data controller?
پاسخ
The entity that determines why and how personal data is processed.
کارت ۴۸۷
پرسش
How does blackmail motivate a cyberattack?
پاسخ
The attacker threatens disclosure or harm unless the victim complies.
کارت ۴۸۸
پرسش
What is a downgrade attack?
پاسخ
Forcing parties to use an older or weaker protocol or security mode.
کارت ۴۸۹
پرسش
How does encryption mitigate data exposure?
پاسخ
It makes captured data unreadable without the required key.
کارت ۴۹۰
پرسش
How do network and web vulnerability scanners differ?
پاسخ
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
کارت ۴۹۱
پرسش
How can vulnerability-scan data support an investigation?
پاسخ
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
کارت ۴۹۲
پرسش
What is key escrow?
پاسخ
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
کارت ۴۹۳
پرسش
Which human vector commonly uses a fake sign-in page to harvest credentials?
پاسخ
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
کارت ۴۹۴
پرسش
What is risk avoidance?
پاسخ
Stopping or not starting the activity that creates the risk.
کارت ۴۹۵
پرسش
What is data obfuscation?
پاسخ
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
کارت ۴۹۶
پرسش
What is a directive control?
پاسخ
A safeguard that tells people what behavior or action is required.
کارت ۴۹۷
پرسش
What does a security guard add that a camera cannot?
پاسخ
Human judgment and an immediate physical response.
کارت ۴۹۸
پرسش
Why define restricted activities in change management?
پاسخ
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
کارت ۴۹۹
پرسش
What contractual impact can noncompliance create?
پاسخ
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
کارت ۵۰۰
پرسش
What should determine backup frequency?
پاسخ
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
کارت ۵۰۱
پرسش
What should router hardening protect?
پاسخ
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
کارت ۵۰۲
پرسش
What problem does OAuth 2.0 address?
پاسخ
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
کارت ۵۰۳
پرسش
What does SCADA do?
پاسخ
It provides supervisory monitoring and control across distributed industrial equipment.
کارت ۵۰۴
پرسش
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
پاسخ
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
کارت ۵۰۵
پرسش
What distinguishes a computer virus?
پاسخ
It attaches to a host file or program and spreads when that infected host executes or is shared.
کارت ۵۰۶
پرسش
What does a key management system coordinate?
پاسخ
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
کارت ۵۰۷
پرسش
How can an unsecure wired network expose traffic?
پاسخ
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
کارت ۵۰۸
پرسش
Why is vulnerable device firmware hard to remediate?
پاسخ
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
کارت ۵۰۹
پرسش
What does patching change in vulnerability remediation?
پاسخ
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
کارت ۵۱۰
پرسش
What does DMARC add to SPF and DKIM?
پاسخ
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
کارت ۵۱۱
پرسش
How does automation improve security efficiency?
پاسخ
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
کارت ۵۱۲
پرسش
What is a simulation exercise?
پاسخ
A more realistic practice in which participants respond to injected events using operational processes.
کارت ۵۱۳
پرسش
What is a data processor?
پاسخ
An entity that processes personal data on behalf of a controller.
کارت ۵۱۴
پرسش
What is risk mitigation?
پاسخ
Reducing likelihood, impact, or both through controls or process changes.
کارت ۵۱۵
پرسش
Why monitor a vendor after onboarding?
پاسخ
Security posture, ownership, services, incidents, and dependencies can change.
کارت ۵۱۶
پرسش
What does a physical penetration test assess?
پاسخ
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
کارت ۵۱۷
پرسش
Why use access badges at a facility?
پاسخ
To associate entry attempts with authorized identities and enforce access rules.
کارت ۵۱۸
پرسش
How does permission restriction protect data?
پاسخ
Only authorized identities receive the actions and scope their roles require.
کارت ۵۱۹
پرسش
What is the usual objective of ransomware extortion?
پاسخ
Force payment by denying access, threatening disclosure, or both.
کارت ۵۲۰
پرسش
What does impossible travel indicate?
پاسخ
One identity appears to authenticate from distant locations too quickly for legitimate travel.
کارت ۵۲۱
پرسش
What is configuration enforcement?
پاسخ
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
کارت ۵۲۲
پرسش
What does a web vulnerability scanner inspect?
پاسخ
Running web behavior for issues such as unsafe input handling and insecure configuration.
کارت ۵۲۳
پرسش
How does cost affect an architecture choice?
پاسخ
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
کارت ۵۲۴
پرسش
What does EAP provide with 802.1X?
پاسخ
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
کارت ۵۲۵
پرسش
What should operational-security training help users protect?
پاسخ
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
کارت ۵۲۶
پرسش
What does a time-of-day access rule do?
پاسخ
Allows or denies a requested action according to an approved schedule.
کارت ۵۲۷
پرسش
What should cloud infrastructure hardening establish?
پاسخ
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
کارت ۵۲۸
پرسش
What should an asset owner ensure during offboarding?
پاسخ
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
کارت ۵۲۹
پرسش
Why encrypt backups?
پاسخ
Backup media and transfers can expose the same sensitive data as production systems.
کارت ۵۳۰
پرسش
What is steganography?
پاسخ
Hiding the existence of data inside another medium rather than merely encrypting its contents.
کارت ۵۳۱
پرسش
Which human vector uses a fabricated authority role to justify a sensitive request?
پاسخ
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
کارت ۵۳۲
پرسش
Why does risk transfer not remove accountability?
پاسخ
The organization can retain legal, reputational, operational, and oversight consequences.
کارت ۵۳۳
پرسش
Why validate a change after deployment?
پاسخ
To confirm the intended result occurred without introducing unacceptable side effects.
کارت ۵۳۴
پرسش
What makes end-of-life hardware a security vulnerability?
پاسخ
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
کارت ۵۳۵
پرسش
What does an audit add to remediation validation?
پاسخ
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
کارت ۵۳۶
پرسش
Why can SPF pass while a message still impersonates a brand?
پاسخ
SPF checks the envelope domain, which may differ from the visible From domain.
کارت ۵۳۷
پرسش
What role can a government entity have in security governance?
پاسخ
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
کارت ۵۳۸
پرسش
How do data inventory and retention support privacy governance?
پاسخ
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
کارت ۵۳۹
پرسش
What can concurrent sessions from distant regions indicate?
پاسخ
A stolen account or shared credential, subject to VPN and proxy context.
کارت ۵۴۰
پرسش
What does supply-chain analysis examine?
پاسخ
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
کارت ۵۴۱
پرسش
What is the purpose of facility lighting as a control?
پاسخ
Deter covert activity and improve observation of people and areas.
کارت ۵۴۲
پرسش
What architecture quality keeps a service usable during component failure?
پاسخ
Availability.
کارت ۵۴۳
پرسش
When is fail-open behavior preferable to fail-closed behavior?
پاسخ
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
کارت ۵۴۴
پرسش
Which control function does a login-failure alert provide?
پاسخ
Detection; it reveals suspicious authentication activity.
کارت ۵۴۵
پرسش
What does a biometric MFA implementation verify?
پاسخ
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
کارت ۵۴۶
پرسش
How can automation enforce a security baseline?
پاسخ
It compares realized settings with the approved state and reports or corrects unauthorized drift.
کارت ۵۴۷
پرسش
How do wireless cryptographic protocols protect network traffic?
پاسخ
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
کارت ۵۴۸
پرسش
Why segment sensitive data stores?
پاسخ
It limits reachable paths and separates them from lower-trust workloads.
کارت ۵۴۹
پرسش
What must remain secret in an asymmetric key pair?
پاسخ
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
کارت ۵۵۰
پرسش
How can a supplier become a supply-chain attack vector?
پاسخ
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
کارت ۵۵۱
پرسش
What is e-discovery?
پاسخ
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
کارت ۵۵۲
پرسش
What characterizes a neutral risk appetite?
پاسخ
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
کارت ۵۵۳
پرسش
What is passive reconnaissance?
پاسخ
Gathering information without directly interacting with the target's systems.
کارت ۵۵۴
پرسش
What does a philosophical motive mean for a threat actor?
پاسخ
The actor acts to advance a belief or moral position rather than primarily for money.
کارت ۵۵۵
پرسش
What does unexpected resource consumption indicate?
پاسخ
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
کارت ۵۵۶
پرسش
What does a host-based intrusion prevention system do?
پاسخ
It monitors activity on one host and can block behavior that matches exploit or attack rules.
کارت ۵۵۷
پرسش
How does agent-based monitoring differ from agentless monitoring?
پاسخ
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
کارت ۵۵۸
پرسش
What can network logs contribute to an investigation?
پاسخ
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
کارت ۵۵۹
پرسش
What is the purpose of a backup restore test?
پاسخ
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
کارت ۵۶۰
پرسش
Why can obsolete hardware become a security risk?
پاسخ
It may lack supported firmware, modern protections, or replacement parts.
کارت ۵۶۱
پرسش
What does rescanning confirm after remediation?
پاسخ
Whether the scanner can still detect the original finding on the affected asset.
کارت ۵۶۲
پرسش
What should a secure transport method provide?
پاسخ
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
کارت ۵۶۳
پرسش
How can law affect security governance?
پاسخ
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
کارت ۵۶۴
پرسش
What does resilience mean for a security architecture?
پاسخ
The ability to withstand disruption, adapt, and recover while preserving essential functions.
کارت ۵۶۵
پرسش
Why minimize an infrastructure's attack surface?
پاسخ
Fewer exposed services and paths leave fewer opportunities for exploitation.
کارت ۵۶۶
پرسش
What does executing a security-awareness program require?
پاسخ
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
کارت ۵۶۷
پرسش
What does an infrared security sensor detect?
پاسخ
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
کارت ۵۶۸
پرسش
What is a knowledge factor?
پاسخ
Something the claimant knows, such as a password.
کارت ۵۶۹
پرسش
Why review allow-list and deny-list impact before a change?
پاسخ
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
کارت ۵۷۰
پرسش
What does partition-level encryption protect?
پاسخ
One selected disk partition, leaving other partitions outside that encryption boundary.
کارت ۵۷۱
پرسش
How can instant messaging deliver a security attack?
پاسخ
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
کارت ۵۷۲
پرسش
What can repeated blocked-content events indicate?
پاسخ
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
کارت ۵۷۳
پرسش
What should a server-hardening baseline reduce?
پاسخ
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
کارت ۵۷۴
پرسش
When is physical media destruction appropriate?
پاسخ
When reuse is unnecessary or sanitization cannot provide adequate assurance.
کارت ۵۷۵
پرسش
What is mean time to repair?
پاسخ
The average time required to restore a failed component or service.
کارت ۵۷۶
پرسش
Why disclose conflicts of interest during vendor selection?
پاسخ
A personal or financial relationship can bias evaluation away from the organization's requirements.
کارت ۵۷۷
پرسش
What is a fine for noncompliance?
پاسخ
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
کارت ۵۷۸
پرسش
What does a public data classification authorize?
پاسخ
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
کارت ۵۷۹
پرسش
What security benefit comes from standard infrastructure configurations?
پاسخ
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
کارت ۵۸۰
پرسش
How does horizontal scaling increase capacity?
پاسخ
It adds more service instances and distributes work among them.
کارت ۵۸۱
پرسش
Why can added connectivity weaken segmentation?
پاسخ
Each allowed path can become a route for lateral movement or data escape.
کارت ۵۸۲
پرسش
What coding practice is central to preventing SQL injection?
پاسخ
Use parameterized queries so untrusted values remain data rather than executable query syntax.
کارت ۵۸۳
پرسش
When is a compensating control appropriate for a vulnerability?
پاسخ
When timely removal or patching is infeasible and another control can reduce the risk.
کارت ۵۸۴
پرسش
How does agent-based web filtering enforce policy?
پاسخ
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
کارت ۵۸۵
پرسش
How can regulation differ from an internal policy?
پاسخ
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
کارت ۵۸۶
پرسش
What is a storage snapshot?
پاسخ
A point-in-time representation of data or system state, whose independence depends on how it is stored.
کارت ۵۸۷
پرسش
What does password age measure?
پاسخ
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
کارت ۵۸۸
پرسش
What does an ethical motive mean in vulnerability research?
پاسخ
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
کارت ۵۸۹
پرسش
What can missing security logs indicate?
پاسخ
Logging failure, tampering, retention misconfiguration, or an inactive source.
کارت ۵۹۰
پرسش
Why disable unused ports and protocols?
پاسخ
They expose unnecessary communication paths and code that attackers can reach.
کارت ۵۹۱
پرسش
What does antivirus contribute to monitoring?
پاسخ
It scans files, memory, or behavior and reports suspected malicious code.
کارت ۵۹۲
پرسش
What is a honeypot?
پاسخ
A decoy system or service designed to attract and observe malicious activity.
کارت ۵۹۳
پرسش
What does file-level encryption protect?
پاسخ
Selected files independently of whether the rest of the disk or volume is encrypted.
کارت ۵۹۴
پرسش
How can SMS deliver a security attack?
پاسخ
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
کارت ۵۹۵
پرسش
What happens during incident analysis?
پاسخ
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
کارت ۵۹۶
پرسش
What is mean time between failures?
پاسخ
The average operating time between repairable failures.
کارت ۵۹۷
پرسش
What is active reconnaissance?
پاسخ
Probing or interacting with target systems to discover services and behavior.
کارت ۵۹۸
پرسش
What constraint should guide ICS or SCADA hardening?
پاسخ
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
کارت ۵۹۹
پرسش
Which control function does restoring a clean system image provide?
پاسخ
Correction; it returns the system to a known-good state.
کارت ۶۰۰
پرسش
What does responsiveness mean in an architecture decision?
پاسخ
How quickly the system and its operators can adapt to demand, failure, or attack.
کارت ۶۰۱
پرسش
How does out-of-band access strengthen remote administration?
پاسخ
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
کارت ۶۰۲
پرسش
What makes user behavior unexpected?
پاسخ
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
کارت ۶۰۳
پرسش
What is a work order?
پاسخ
A document authorizing a defined unit of work under an existing agreement.
کارت ۶۰۴
پرسش
What can out-of-cycle logging indicate?
پاسخ
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
کارت ۶۰۵
پرسش
Why update a standard operating procedure after a change?
پاسخ
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
کارت ۶۰۶
پرسش
What coding practice limits cross-site scripting?
پاسخ
Context-appropriate output encoding, supported by safe templating and input handling.
کارت ۶۰۷
پرسش
What does a restricted data classification indicate?
پاسخ
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
کارت ۶۰۸
پرسش
How does a bug bounty support responsible disclosure?
پاسخ
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
کارت ۶۰۹
پرسش
What does web-filter content categorization provide?
پاسخ
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
کارت ۶۱۰
پرسش
How do hard and soft authentication tokens differ?
پاسخ
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
کارت ۶۱۱
پرسش
How can industry requirements affect security governance?
پاسخ
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
کارت ۶۱۲
پرسش
How can noncompliance cause loss of a license?
پاسخ
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
کارت ۶۱۳
پرسش
What does volume-level encryption protect?
پاسخ
All data within a selected logical storage volume.
کارت ۶۱۴
پرسش
How can impersonation exploit familiarity?
پاسخ
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
کارت ۶۱۵
پرسش
How does RTO guide recovery design?
پاسخ
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
کارت ۶۱۶
پرسش
What is a honeynet?
پاسخ
A network of decoy systems used to study or divert attackers.
کارت ۶۱۷
پرسش
What does backup replication provide?
پاسخ
Additional synchronized or copied recovery data in another system or location.
کارت ۶۱۸
پرسش
What lets automation scale securely?
پاسخ
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
کارت ۶۱۹
پرسش
Why monitor a hardened computing resource continuously?
پاسخ
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
کارت ۶۲۰
پرسش
Why keep a certificate of destruction?
پاسخ
It documents that a disposal provider handled specified media under the agreed process.
کارت ۶۲۱
پرسش
Why consider patch availability before selecting a platform?
پاسخ
Unsupported or difficult-to-update components accumulate known exposure.
کارت ۶۲۲
پرسش
Why should remote administration use an encrypted, authenticated protocol?
پاسخ
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
کارت ۶۲۳
پرسش
How can revenge motivate an insider incident?
پاسخ
A disgruntled person may damage systems or disclose data to punish the organization.
کارت ۶۲۴
پرسش
What is a published or documented indicator of malicious activity?
پاسخ
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
کارت ۶۲۵
پرسش
Why monitor a system more closely when a mitigation exception is accepted?
پاسخ
Monitoring can reveal exploitation or control failure while the documented exception remains open.
کارت ۶۲۶
پرسش
What is an SNMP trap?
پاسخ
An unsolicited device notification sent to a management system when a configured event occurs.
کارت ۶۲۷
پرسش
How can an automated report support an investigation?
پاسخ
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
کارت ۶۲۸
پرسش
What is a security key?
پاسخ
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
کارت ۶۲۹
پرسش
What does database-level encryption protect?
پاسخ
A database or selected database structures through controls managed at the database layer.
کارت ۶۳۰
پرسش
How does brand impersonation exploit trust?
پاسخ
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
کارت ۶۳۱
پرسش
What browser-side impact can a cross-site scripting vulnerability create?
پاسخ
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
کارت ۶۳۲
پرسش
How can a system or process audit identify vulnerabilities?
پاسخ
It compares evidence with required configuration and procedure to reveal control gaps.
کارت ۶۳۳
پرسش
What security role can Group Policy provide?
پاسخ
Centralized Windows configuration of account, application, audit, and system security settings.
کارت ۶۳۴
پرسش
What should incident-response training prepare people to do?
پاسخ
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
کارت ۶۳۵
پرسش
Why must governance track local or regional requirements?
پاسخ
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
کارت ۶۳۶
پرسش
How can a dependency become a useful key risk indicator?
پاسخ
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
کارت ۶۳۷
پرسش
What is a business partners agreement?
پاسخ
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
کارت ۶۳۸
پرسش
What makes an audit regulatory?
پاسخ
It evaluates compliance with requirements established or enforced by a government or delegated authority.
کارت ۶۳۹
پرسش
What is a honeyfile?
پاسخ
A decoy file whose access can reveal unauthorized activity.
کارت ۶۴۰
پرسش
Why does legal information require explicit protection?
پاسخ
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
کارت ۶۴۱
پرسش
Which indicator can mass file renaming and encryption produce?
پاسخ
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
کارت ۶۴۲
پرسش
What remains with an organization after transferring architecture risk?
پاسخ
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
کارت ۶۴۳
پرسش
When does local console placement provide useful administrative access?
پاسخ
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
کارت ۶۴۴
پرسش
What makes a harmful user action unintentional?
پاسخ
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
کارت ۶۴۵
پرسش
How should an organization harden workstations?
پاسخ
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
کارت ۶۴۶
پرسش
What is journaling in recovery?
پاسخ
Recording ordered changes so data can be replayed or restored to a consistent point.
کارت ۶۴۷
پرسش
What downtime must a change plan account for?
پاسخ
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
کارت ۶۴۸
پرسش
Why must a privacy program map local or regional law to data flows?
پاسخ
The applicable duties can change with the location of the person, organization, processing, or stored data.
کارت ۶۴۹
پرسش
Why combine independent preventive controls at different layers?
پاسخ
A failure at one layer does not automatically let the same attack succeed at the next layer.
کارت ۶۵۰
پرسش
What is passwordless authentication?
پاسخ
A flow that does not require the user to enter a memorized password, often using public-key credentials.
کارت ۶۵۱
پرسش
How can automation improve security reaction time?
پاسخ
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
کارت ۶۵۲
پرسش
What does record-level encryption protect?
پاسخ
Individual records or fields, allowing finer protection than encrypting the entire database.
کارت ۶۵۳
پرسش
How can business email compromise misuse urgency?
پاسخ
It pressures an employee to bypass normal verification for a payment, credential, or data request.
کارت ۶۵۴
پرسش
What does impact measure in risk analysis?
پاسخ
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
کارت ۶۵۵
پرسش
What makes cyber activity part of warfare?
پاسخ
It supports military or state conflict objectives such as disruption, intelligence, or influence.
کارت ۶۵۶
پرسش
Which indicator can a newly created privileged account produce outside the normal change window?
پاسخ
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
کارت ۶۵۷
پرسش
How can configuration enforcement validate a deployed mitigation?
پاسخ
It compares the realized settings with the approved state and corrects or reports drift.
کارت ۶۵۸
پرسش
How does validating an alert improve alert tuning?
پاسخ
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
کارت ۶۵۹
پرسش
What data-layer impact can a SQL injection vulnerability create?
پاسخ
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
کارت ۶۶۰
پرسش
What environmental variables can change vulnerability priority?
پاسخ
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
کارت ۶۶۱
پرسش
What security role does SELinux provide?
پاسخ
Mandatory access controls that confine processes according to centrally defined policy.
کارت ۶۶۲
پرسش
Why review governance documents periodically?
پاسخ
Business, technology, threats, and external obligations change.
کارت ۶۶۳
پرسش
Why evaluate power requirements for a system design?
پاسخ
Power capacity and redundancy constrain availability and recovery.
کارت ۶۶۴
پرسش
When is IPsec a better tunnel choice than TLS?
پاسخ
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
کارت ۶۶۵
پرسش
What is a honeytoken?
پاسخ
A fake credential or data element that generates a high-confidence alert when used.
کارت ۶۶۶
پرسش
What should embedded-system hardening prioritize?
پاسخ
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
کارت ۶۶۷
پرسش
Why must sanitization address data remanence?
پاسخ
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
کارت ۶۶۸
پرسش
Why require rules of engagement for vendor testing?
پاسخ
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
کارت ۶۶۹
پرسش
What does a private data classification indicate?
پاسخ
The information concerns an individual or limited internal audience and should not be exposed publicly.
کارت ۶۷۰
پرسش
What does a tabletop recovery exercise test?
پاسخ
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
کارت ۶۷۱
پرسش
Why prevent password reuse?
پاسخ
One compromised password should not unlock other accounts or services.
کارت ۶۷۲
پرسش
Which malicious-activity indicator is unexplained sustained CPU or memory use?
پاسخ
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
کارت ۶۷۳
پرسش
What does transport encryption protect?
پاسخ
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
کارت ۶۷۴
پرسش
How can a voice call become an attack vector?
پاسخ
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
کارت ۶۷۵
پرسش
What should a digital-forensics report document?
پاسخ
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
کارت ۶۷۶
پرسش
What tradeoff comes with an expansionary risk appetite?
پاسخ
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
کارت ۶۷۷
پرسش
What does a known penetration-test environment provide?
پاسخ
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
کارت ۶۷۸
پرسش
Why evaluate compute requirements before deployment?
پاسخ
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
کارت ۶۷۹
پرسش
Why place sensors at network choke points?
پاسخ
They can observe traffic crossing important trust boundaries.
کارت ۶۸۰
پرسش
What should hybrid or remote-work security training emphasize?
پاسخ
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
کارت ۶۸۱
پرسش
Why plan an application restart separately from a service restart?
پاسخ
The application may need its own state handling, user coordination, health checks, and rollback point.
کارت ۶۸۲
پرسش
What is a cryptographic vulnerability?
پاسخ
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
کارت ۶۸۳
پرسش
Why report findings by asset owner?
پاسخ
Owners need clear accountability and a prioritized remediation queue.
کارت ۶۸۴
پرسش
What should guide selection of a secure protocol?
پاسخ
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
کارت ۶۸۵
پرسش
How do centralized and decentralized governance structures differ?
پاسخ
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
کارت ۶۸۶
پرسش
How does privacy-aware design limit data retention?
پاسخ
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
کارت ۶۸۷
پرسش
What does a pressure security sensor detect?
پاسخ
Force or weight applied to a protected surface, such as a floor mat or fence line.
کارت ۶۸۸
پرسش
What automation costs should a security team plan for?
پاسخ
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
کارت ۶۸۹
پرسش
What should RTOS hardening preserve while reducing attack surface?
پاسخ
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
کارت ۶۹۰
پرسش
What is the goal of disruption-for-chaos activity?
پاسخ
Create instability or damage itself rather than pursue a clear financial or intelligence return.
کارت ۶۹۱
پرسش
Which indicator can repeated password guessing produce?
پاسخ
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
کارت ۶۹۲
پرسش
How does removing unnecessary software harden a system?
پاسخ
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
کارت ۶۹۳
پرسش
What does NetFlow provide?
پاسخ
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
کارت ۶۹۴
پرسش
How can a dashboard support an investigation?
پاسخ
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
کارت ۶۹۵
پرسش
When should a password be expired?
پاسخ
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
کارت ۶۹۶
پرسش
Why does cryptographic key length matter?
پاسخ
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
کارت ۶۹۷
پرسش
How can an unsecure Bluetooth connection become an attack vector?
پاسخ
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
کارت ۶۹۸
پرسش
What is a key risk indicator?
پاسخ
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
کارت ۶۹۹
پرسش
What should vendor monitoring verify when a contract ends?
پاسخ
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
کارت ۷۰۰
پرسش
What does a sensitive data classification indicate?
پاسخ
The information needs safeguards because unauthorized access, change, or loss could cause harm.
کارت ۷۰۱
پرسش
What does software-defined networking separate?
پاسخ
The control plane that decides traffic behavior from the data plane that forwards traffic.
کارت ۷۰۲
پرسش
Where should a web application firewall be placed?
پاسخ
In the path of web requests before they reach the protected application.
کارت ۷۰۳
پرسش
What does a simulated recovery exercise test?
پاسخ
Participants perform realistic response actions in a controlled environment without disrupting production.
کارت ۷۰۴
پرسش
How can a team verify that a detective control is effective?
پاسخ
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
کارت ۷۰۵
پرسش
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
پاسخ
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
کارت ۷۰۶
پرسش
What makes a vulnerability cloud-specific?
پاسخ
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
کارت ۷۰۷
پرسش
How can insurance respond to vulnerability risk?
پاسخ
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
کارت ۷۰۸
پرسش
How does reputation improve web filtering?
پاسخ
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
کارت ۷۰۹
پرسش
What does an encryption policy establish?
پاسخ
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
کارت ۷۱۰
پرسش
How does a microwave security sensor detect movement?
پاسخ
It emits microwave energy and detects changes in the reflected signal caused by motion.
کارت ۷۱۱
پرسش
What should IoT-device hardening change before deployment?
پاسخ
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
کارت ۷۱۲
پرسش
Why track software licenses as assets?
پاسخ
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
کارت ۷۱۳
پرسش
What does a password manager improve?
پاسخ
It can generate and store unique long passwords so users do not memorize or reuse them.
کارت ۷۱۴
پرسش
What makes a ledger open and public?
پاسخ
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
کارت ۷۱۵
پرسش
What should a payment-change request trigger?
پاسخ
Independent verification through a known channel before any account or payment detail is changed.
کارت ۷۱۶
پرسش
What does preserving digital evidence require?
پاسخ
Protecting its integrity, context, access history, and availability from collection through final disposition.
کارت ۷۱۷
پرسش
What should a risk report tell decision-makers?
پاسخ
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
کارت ۷۱۸
پرسش
What should an external assessment report provide?
پاسخ
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
کارت ۷۱۹
پرسش
What is a centralized design's main resilience risk?
پاسخ
A central dependency can become a bottleneck or single point of failure.
کارت ۷۲۰
پرسش
What does mutual TLS add to a TLS-protected service connection?
پاسخ
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
کارت ۷۲۱
پرسش
What should recurring security-awareness reporting show?
پاسخ
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
کارت ۷۲۲
پرسش
Why do legacy applications require extra change planning?
پاسخ
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
کارت ۷۲۳
پرسش
How do a data controller and a data processor differ?
پاسخ
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
کارت ۷۲۴
پرسش
How can orchestration become a single point of failure?
پاسخ
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
کارت ۷۲۵
پرسش
Why should defenses account for a threat actor's sophistication and capability?
پاسخ
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
کارت ۷۲۶
پرسش
How does an injection attack make an application execute unintended instructions?
پاسخ
It sends crafted input that an interpreter treats as code or commands instead of data.
کارت ۷۲۷
پرسش
What does a host-based firewall control?
پاسخ
Inbound and outbound network traffic for one endpoint according to local rules.
کارت ۷۲۸
پرسش
Why revise alerting after an incident?
پاسخ
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
کارت ۷۲۹
پرسش
Why include security duties in procurement criteria?
پاسخ
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
کارت ۷۳۰
پرسش
What does a critical data classification indicate?
پاسخ
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
کارت ۷۳۱
پرسش
What infrastructure capacity must support failover?
پاسخ
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
کارت ۷۳۲
پرسش
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
پاسخ
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
کارت ۷۳۳
پرسش
How does a remediation exemption differ from an exception?
پاسخ
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
کارت ۷۳۴
پرسش
Why should automated EDR or XDR blocking have an exception and rollback path?
پاسخ
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
کارت ۷۳۵
پرسش
What does a security playbook provide?
پاسخ
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
کارت ۷۳۶
پرسش
How does an ultrasonic security sensor detect movement?
پاسخ
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
کارت ۷۳۷
پرسش
What should a managed mobile device require for Bluetooth connections?
پاسخ
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
کارت ۷۳۸
پرسش
How do password complexity rules differ from password length?
پاسخ
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
کارت ۷۳۹
پرسش
What makes a certificate third-party trusted?
پاسخ
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
کارت ۷۴۰
پرسش
Why is an out-of-band check effective against impersonation?
پاسخ
It verifies the request through a separate, previously trusted communication path.
کارت ۷۴۱
پرسش
What does a risk exception authorize?
پاسخ
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
کارت ۷۴۲
پرسش
What security challenge grows in a decentralized design?
پاسخ
Consistent policy, inventory, monitoring, and patching become harder.
کارت ۷۴۳
پرسش
How should controls be selected for an unused network path?
پاسخ
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
کارت ۷۴۴
پرسش
How can a buffer-overflow attack affect an application?
پاسخ
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
۷۴۴ کارت
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo باز میشود تا بتوانید مطالعه را شروع کنید.