CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
Tietoja tästä pakasta
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Tämän pakan kortit
Kortti 1
Kysymys
What does an information security policy establish?
Vastaus
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kortti 2
Kysymys
What is phishing?
Vastaus
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kortti 3
Kysymys
What does a public-key certificate bind to an identity?
Vastaus
A public key, together with identifying information and the issuer's signature.
Kortti 4
Kysymys
What is data at rest?
Vastaus
Data stored on media such as disks, databases, backups, or mobile devices.
Kortti 5
Kysymys
How does policy-driven access control decide a zero-trust access request?
Vastaus
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kortti 6
Kysymys
What does establishing a secure baseline produce?
Vastaus
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kortti 7
Kysymys
What is hashing used to verify?
Vastaus
Whether data has changed by comparing fixed-length digest values.
Kortti 8
Kysymys
What is impersonation in social engineering?
Vastaus
Pretending to be a trusted person or organization to obtain access, data, or action.
Kortti 9
Kysymys
What is virtualization?
Vastaus
Abstracting physical compute so multiple isolated guest systems can share a host.
Kortti 10
Kysymys
What is chain of custody?
Vastaus
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kortti 11
Kysymys
What is quantitative risk analysis?
Vastaus
Estimating risk with numerical values such as money, frequency, or probability.
Kortti 12
Kysymys
What is a phishing awareness campaign?
Vastaus
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kortti 13
Kysymys
What is high availability?
Vastaus
Designing a service to remain accessible despite expected component failures.
Kortti 14
Kysymys
What is a network security zone?
Vastaus
A group of systems with similar trust, function, or control requirements.
Kortti 15
Kysymys
What is risk transfer?
Vastaus
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kortti 16
Kysymys
What is media sanitization?
Vastaus
Making stored data infeasible to recover for the intended level of protection.
Kortti 17
Kysymys
What does CVSS provide?
Vastaus
A standardized way to describe a vulnerability's technical severity characteristics.
Kortti 18
Kysymys
What does security alerting do?
Vastaus
It turns matched events or behavior into a notification that the right responder can review.
Kortti 19
Kysymys
What does a firewall rule enforce?
Vastaus
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kortti 20
Kysymys
What is deprovisioning?
Vastaus
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kortti 21
Kysymys
How does inline placement differ from a tap or monitor port?
Vastaus
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kortti 22
Kysymys
What is asymmetric encryption?
Vastaus
Encryption that uses a mathematically related public and private key pair.
Kortti 23
Kysymys
What does SPF authorize?
Vastaus
Which mail servers may send mail for a domain in the SMTP envelope.
Kortti 24
Kysymys
What is a possession factor?
Vastaus
Something the claimant has, such as a cryptographic authenticator.
Kortti 25
Kysymys
What does ordinary TLS usually protect and authenticate?
Vastaus
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kortti 26
Kysymys
What is single loss expectancy?
Vastaus
The estimated loss from one occurrence of a risk event.
Kortti 27
Kysymys
What does a certificate authority do?
Vastaus
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kortti 28
Kysymys
What is a detective control meant to do?
Vastaus
Identify that an unwanted event has happened or is happening.
Kortti 29
Kysymys
What is the security purpose of change-control approval?
Vastaus
Ensure authorized reviewers assess risk before the production change occurs.
Kortti 30
Kysymys
What is shadow IT?
Vastaus
Technology used for organizational work without required approval or oversight.
Kortti 31
Kysymys
What is a buffer overflow vulnerability?
Vastaus
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kortti 32
Kysymys
What is ransomware?
Vastaus
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kortti 33
Kysymys
How does network segmentation limit an incident?
Vastaus
It restricts communication paths and reduces lateral movement between zones.
Kortti 34
Kysymys
How do load balancing and clustering support availability differently?
Vastaus
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kortti 35
Kysymys
What is vendor due diligence?
Vastaus
Evaluating a provider's security, capability, stability, and fit before commitment.
Kortti 36
Kysymys
Who is a data subject?
Vastaus
The person whose personal data is collected or processed.
Kortti 37
Kysymys
What is attestation?
Vastaus
A formal assertion or report about a subject matter, often supported by an independent examination.
Kortti 38
Kysymys
What is a replay attack?
Vastaus
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kortti 39
Kysymys
What does a wireless site survey establish?
Vastaus
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kortti 40
Kysymys
What is the time-of-check stage of a race-condition vulnerability?
Vastaus
The application verifies a condition or resource state before acting on it.
Kortti 41
Kysymys
What is a penetration test?
Vastaus
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kortti 42
Kysymys
What is a cold recovery site?
Vastaus
A facility with basic space and utilities but little preinstalled technology or current data.
Kortti 43
Kysymys
What is data in transit?
Vastaus
Data moving between systems or across a network.
Kortti 44
Kysymys
What is a vendor security questionnaire?
Vastaus
A structured request for information about a provider's controls and practices.
Kortti 45
Kysymys
How does an internal actor's starting position differ from an external actor's?
Vastaus
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kortti 46
Kysymys
What can unexpected account lockouts indicate?
Vastaus
Password guessing, credential stuffing, user error, or a broken client.
Kortti 47
Kysymys
How do permissions enforce access control?
Vastaus
They specify which actions a subject may perform on a particular resource.
Kortti 48
Kysymys
What is log aggregation?
Vastaus
Central collection of logs from multiple sources for search, correlation, and retention.
Kortti 49
Kysymys
Why plan a service restart as part of a change?
Vastaus
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kortti 50
Kysymys
What is infrastructure as code?
Vastaus
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kortti 51
Kysymys
What should security-awareness program development start with?
Vastaus
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kortti 52
Kysymys
What is a voice-based social-engineering attack called?
Vastaus
Vishing.
Kortti 53
Kysymys
What happens during incident-response preparation?
Vastaus
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kortti 54
Kysymys
What does an offensive penetration-testing team do?
Vastaus
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kortti 55
Kysymys
What is federation?
Vastaus
One security domain relies on identity assertions from another trusted domain.
Kortti 56
Kysymys
What is asset classification?
Vastaus
Grouping an asset by sensitivity, criticality, or required handling.
Kortti 57
Kysymys
What is cross-site scripting?
Vastaus
Injection of script-capable content that a browser executes in another site's security context.
Kortti 58
Kysymys
What can IDS or IPS trends reveal?
Vastaus
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kortti 59
Kysymys
What can unexpected resource inaccessibility indicate?
Vastaus
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kortti 60
Kysymys
What is a corrective control meant to do?
Vastaus
Limit damage and restore a secure state after an event.
Kortti 61
Kysymys
How do containers differ from virtual machines?
Vastaus
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kortti 62
Kysymys
How does an active security device differ from a passive one?
Vastaus
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kortti 63
Kysymys
Why is unsupported software a persistent attack surface?
Vastaus
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kortti 64
Kysymys
What is annualized rate of occurrence?
Vastaus
The estimated number of times a risk event occurs per year.
Kortti 65
Kysymys
What is an inherence factor?
Vastaus
A biometric characteristic of the claimant.
Kortti 66
Kysymys
What do a threat actor's sophistication and capability describe?
Vastaus
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kortti 67
Kysymys
What is a SIEM?
Vastaus
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kortti 68
Kysymys
What is sideloading?
Vastaus
Installing software from outside the platform's approved distribution path.
Kortti 69
Kysymys
What does an IDS or IPS signature match?
Vastaus
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kortti 70
Kysymys
Why are embedded systems often difficult to patch?
Vastaus
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kortti 71
Kysymys
What is a virtual private network?
Vastaus
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kortti 72
Kysymys
What should an initial security-awareness report establish?
Vastaus
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kortti 73
Kysymys
What is symmetric encryption?
Vastaus
Encryption that uses the same secret key to encrypt and decrypt data.
Kortti 74
Kysymys
What happens during incident detection?
Vastaus
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kortti 75
Kysymys
What is recovery time objective?
Vastaus
The target maximum time to restore a function after disruption.
Kortti 76
Kysymys
Why prioritize password length?
Vastaus
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kortti 77
Kysymys
What must sanitization accomplish before an asset leaves organizational control?
Vastaus
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kortti 78
Kysymys
What is a real-time operating system designed to provide?
Vastaus
Predictable response timing for tasks with strict deadlines.
Kortti 79
Kysymys
What does fail-open behavior do when a control fails?
Vastaus
It permits traffic or access to preserve availability.
Kortti 80
Kysymys
What is jailbreaking or rooting a mobile device?
Vastaus
Removing platform restrictions to gain privileged control over the operating system.
Kortti 81
Kysymys
What does network access control enforce?
Vastaus
Identity, device posture, and access policy at network connection time and during a session.
Kortti 82
Kysymys
What does data loss prevention do?
Vastaus
Detects and may block sensitive data use or transfer that violates policy.
Kortti 83
Kysymys
What security property does a blockchain provide?
Vastaus
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kortti 84
Kysymys
What is recovery point objective?
Vastaus
The target maximum acceptable data loss measured backward in time.
Kortti 85
Kysymys
How do ICS and SCADA relate?
Vastaus
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kortti 86
Kysymys
What does fail-closed behavior do when a control fails?
Vastaus
It denies traffic or access to preserve security.
Kortti 87
Kysymys
Which keys create and verify a typical digital signature?
Vastaus
The signer creates it with a private key, and others verify it with the corresponding public key.
Kortti 88
Kysymys
What is SQL injection?
Vastaus
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kortti 89
Kysymys
What does DKIM verify?
Vastaus
That selected message content was signed by a domain and was not altered after signing.
Kortti 90
Kysymys
What is post-incident activity?
Vastaus
Learning from the event and improving controls, plans, and recovery based on evidence.
Kortti 91
Kysymys
What characterizes an expansionary risk appetite?
Vastaus
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kortti 92
Kysymys
How do centralized and decentralized architectures differ?
Vastaus
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kortti 93
Kysymys
What does a certificate revocation list publish?
Vastaus
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kortti 94
Kysymys
What is a legal hold?
Vastaus
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kortti 95
Kysymys
What is exposure factor in quantitative risk analysis?
Vastaus
The estimated percentage of an asset's value lost in one event.
Kortti 96
Kysymys
What is decentralized architecture?
Vastaus
Control or service responsibility is distributed across multiple independent components or locations.
Kortti 97
Kysymys
What is tokenization?
Vastaus
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kortti 98
Kysymys
How can automation act as a workforce multiplier?
Vastaus
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kortti 99
Kysymys
What can endpoint process logs reveal?
Vastaus
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kortti 100
Kysymys
What does the CIA triad protect?
Vastaus
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kortti 101
Kysymys
How does data masking protect information?
Vastaus
It hides selected values or characters while preserving a usable representation.
Kortti 102
Kysymys
How can a national requirement affect security governance?
Vastaus
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kortti 103
Kysymys
What do integrations and APIs provide to security orchestration?
Vastaus
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kortti 104
Kysymys
What makes a compliance report external?
Vastaus
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kortti 105
Kysymys
What does a cryptographic algorithm define?
Vastaus
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kortti 106
Kysymys
Why compare systems with a secure baseline regularly?
Vastaus
To detect drift, unauthorized changes, and missing hardening.
Kortti 107
Kysymys
What does integrity protect?
Vastaus
The accuracy and completeness of data and systems against unauthorized change.
Kortti 108
Kysymys
What does vulnerability classification organize?
Vastaus
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kortti 109
Kysymys
What does a password standard define?
Vastaus
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kortti 110
Kysymys
What technology capacity must a recovery design plan for?
Vastaus
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kortti 111
Kysymys
What does a confidential data classification indicate?
Vastaus
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kortti 112
Kysymys
What makes a vendor assessment independent?
Vastaus
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kortti 113
Kysymys
What lets a worm spread without attaching itself to another file?
Vastaus
It is a standalone program that replicates across reachable systems or services.
Kortti 114
Kysymys
What is microsegmentation?
Vastaus
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kortti 115
Kysymys
What can application logs reveal?
Vastaus
Transactions, errors, user actions, and application-specific security events.
Kortti 116
Kysymys
What does deploying a secure baseline require?
Vastaus
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kortti 117
Kysymys
How can resource-provisioning automation improve security?
Vastaus
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kortti 118
Kysymys
What does availability protect?
Vastaus
Reliable, timely access to systems and data when authorized users need them.
Kortti 119
Kysymys
Why must a change request describe business impact?
Vastaus
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kortti 120
Kysymys
What does an authenticated vulnerability scan add?
Vastaus
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kortti 121
Kysymys
What does a change-management procedure specify?
Vastaus
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kortti 122
Kysymys
What is a sanction for noncompliance?
Vastaus
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kortti 123
Kysymys
How can email deliver a security attack?
Vastaus
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kortti 124
Kysymys
What is an internal compliance audit?
Vastaus
An organization-led examination of whether selected operations and controls meet defined requirements.
Kortti 125
Kysymys
What is a Trojan?
Vastaus
Malware disguised as legitimate or desirable software.
Kortti 126
Kysymys
What is clustering?
Vastaus
Multiple systems work together to provide a service and tolerate member failure.
Kortti 127
Kysymys
What makes data regulated?
Vastaus
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kortti 128
Kysymys
What does a wireless heat map show?
Vastaus
Measured or modeled signal strength and coverage across a physical area.
Kortti 129
Kysymys
How should vendor criticality affect due diligence?
Vastaus
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kortti 130
Kysymys
How can a digital signature support non-repudiation?
Vastaus
It provides evidence that the holder of a private key signed specific data.
Kortti 131
Kysymys
What should vulnerability prioritization consider beyond severity?
Vastaus
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kortti 132
Kysymys
What is a security guideline?
Vastaus
Recommended practice that allows judgment unless adopted as a requirement.
Kortti 133
Kysymys
What usually distinguishes a nation-state threat actor?
Vastaus
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kortti 134
Kysymys
What is spyware?
Vastaus
Software that secretly collects information about a user or system.
Kortti 135
Kysymys
Why maintain an allow list for applications?
Vastaus
Only explicitly approved software is permitted to execute.
Kortti 136
Kysymys
How can an image become an attack vector?
Vastaus
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kortti 137
Kysymys
What makes a security control technical?
Vastaus
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kortti 138
Kysymys
What is identity proofing?
Vastaus
Establishing that a person is who they claim to be before issuing an account or credential.
Kortti 139
Kysymys
What is an automated security guardrail?
Vastaus
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kortti 140
Kysymys
Why assign an owner to a planned change?
Vastaus
To make one party accountable for coordination, execution, and follow-through.
Kortti 141
Kysymys
How can national privacy law affect data handling?
Vastaus
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kortti 142
Kysymys
What is continuity of operations?
Vastaus
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kortti 143
Kysymys
What security tradeoff comes with BYOD?
Vastaus
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kortti 144
Kysymys
How should policies and handbooks support security training?
Vastaus
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kortti 145
Kysymys
What is a keylogger?
Vastaus
A tool that records keystrokes to capture data such as credentials.
Kortti 146
Kysymys
What makes information a trade secret?
Vastaus
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kortti 147
Kysymys
What does authentication establish?
Vastaus
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kortti 148
Kysymys
What risk comes from an untrusted file attachment?
Vastaus
Opening or parsing it can execute malicious code or expose data.
Kortti 149
Kysymys
How does risk tolerance affect vulnerability remediation?
Vastaus
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kortti 150
Kysymys
How can a global requirement affect security governance?
Vastaus
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kortti 151
Kysymys
Why should questionnaire answers be supported by evidence?
Vastaus
Self-assertions alone may not prove that controls are designed or operating effectively.
Kortti 152
Kysymys
What is an independent third-party audit?
Vastaus
An external party with suitable independence examines evidence against defined criteria.
Kortti 153
Kysymys
What do account provisioning and deprovisioning do?
Vastaus
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kortti 154
Kysymys
What is an unskilled attacker commonly called?
Vastaus
A script kiddie: someone who relies on tools or instructions created by others.
Kortti 155
Kysymys
What is a rootkit?
Vastaus
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kortti 156
Kysymys
What does an access control list enforce?
Vastaus
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kortti 157
Kysymys
What should system security monitoring observe?
Vastaus
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kortti 158
Kysymys
What can operating-system security logs reveal?
Vastaus
Authentication, privilege use, policy changes, services, and other host security events.
Kortti 159
Kysymys
Why isolate operational technology from general business networks?
Vastaus
To limit attack paths into safety- and availability-critical processes.
Kortti 160
Kysymys
What is the COPE mobile deployment model?
Vastaus
The organization owns the device but permits defined personal use while retaining management control.
Kortti 161
Kysymys
What security work belongs in asset acquisition and procurement?
Vastaus
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kortti 162
Kysymys
How can user-provisioning automation improve security?
Vastaus
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kortti 163
Kysymys
What people capacity must a continuity plan account for?
Vastaus
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kortti 164
Kysymys
What do authorization models define?
Vastaus
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kortti 165
Kysymys
Why are removable devices an attack vector?
Vastaus
They can introduce malware or remove data while bypassing network controls.
Kortti 166
Kysymys
What should predeployment change-test results show?
Vastaus
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kortti 167
Kysymys
What is the time-of-use stage of a race-condition vulnerability?
Vastaus
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kortti 168
Kysymys
What is data in use?
Vastaus
Data actively processed in memory or by an application.
Kortti 169
Kysymys
What does open-source vulnerability intelligence contribute?
Vastaus
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kortti 170
Kysymys
What can file-integrity monitoring detect?
Vastaus
Unexpected changes to protected files, directories, or configuration.
Kortti 171
Kysymys
Why should deprovisioning be prompt?
Vastaus
Former users or roles should not retain usable access.
Kortti 172
Kysymys
What is an acceptable use policy?
Vastaus
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kortti 173
Kysymys
What makes a compliance report internal?
Vastaus
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kortti 174
Kysymys
What is a logic bomb?
Vastaus
Malicious code that activates when a specified condition or time is reached.
Kortti 175
Kysymys
What does a right-to-audit clause provide?
Vastaus
Contractual authority to inspect or obtain evidence about agreed controls.
Kortti 176
Kysymys
Where should a forward proxy sit in an enterprise traffic path?
Vastaus
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kortti 177
Kysymys
Which cues should make a message look suspicious?
Vastaus
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kortti 178
Kysymys
What makes a security control managerial?
Vastaus
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kortti 179
Kysymys
What is the CYOD mobile deployment model?
Vastaus
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kortti 180
Kysymys
How does client-based vulnerable software differ from an agentless exposure?
Vastaus
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kortti 181
Kysymys
What makes a risk assessment recurring?
Vastaus
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kortti 182
Kysymys
What does a defensive penetration-testing team practice?
Vastaus
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kortti 183
Kysymys
In a zero-trust data plane, what can the subject or system represent?
Vastaus
The user, device, workload, or service requesting access to a protected resource.
Kortti 184
Kysymys
What primarily motivates a hacktivist?
Vastaus
A political, social, or ideological cause.
Kortti 185
Kysymys
What is bloatware?
Vastaus
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kortti 186
Kysymys
Why keep endpoint-protection signatures and engines current?
Vastaus
They need current detection logic to recognize newly identified malware and exploit behavior.
Kortti 187
Kysymys
What should application security monitoring observe?
Vastaus
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kortti 188
Kysymys
What is role-based access control?
Vastaus
Permissions are assigned to roles, and identities receive access through their roles.
Kortti 189
Kysymys
What is geographic dispersal?
Vastaus
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kortti 190
Kysymys
What is a malicious update?
Vastaus
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kortti 191
Kysymys
What does static application analysis inspect?
Vastaus
Source code, bytecode, or compiled code without executing the application.
Kortti 192
Kysymys
What does a firewall access list define?
Vastaus
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kortti 193
Kysymys
What does a disaster recovery policy establish?
Vastaus
Management expectations for restoring technology and data after a disruptive event.
Kortti 194
Kysymys
How does logical segmentation separate workloads that share physical infrastructure?
Vastaus
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kortti 195
Kysymys
How should IDS and IPS placement differ?
Vastaus
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kortti 196
Kysymys
What should automated ticket creation capture?
Vastaus
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kortti 197
Kysymys
What makes information intellectual property?
Vastaus
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kortti 198
Kysymys
What is a backout plan?
Vastaus
Predefined steps for safely reversing a failed or harmful change.
Kortti 199
Kysymys
Why is an unsecure wireless network an attack vector?
Vastaus
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kortti 200
Kysymys
What is physical brute force?
Vastaus
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kortti 201
Kysymys
What is application sandboxing?
Vastaus
Running code in a constrained environment with limited access to the host and data.
Kortti 202
Kysymys
Why assign an asset owner?
Vastaus
One accountable party must decide its use, protection, and lifecycle.
Kortti 203
Kysymys
What happens during risk identification?
Vastaus
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kortti 204
Kysymys
What should an SLA state about breach notification?
Vastaus
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kortti 205
Kysymys
How do due diligence and due care differ in compliance?
Vastaus
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kortti 206
Kysymys
What is attribute-based access control?
Vastaus
Policy evaluates attributes of the subject, resource, action, and environment.
Kortti 207
Kysymys
What does a zero-trust policy engine do?
Vastaus
It evaluates policy and signals to decide whether access should be allowed.
Kortti 208
Kysymys
How does a cloud responsibility matrix allocate security duties?
Vastaus
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kortti 209
Kysymys
Where should a load balancer sit in a service path?
Vastaus
In front of service instances so it can route requests to healthy backends.
Kortti 210
Kysymys
What should the security team do with a reported suspicious message?
Vastaus
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kortti 211
Kysymys
What makes an operating-system vulnerability high impact?
Vastaus
It can affect every application and security control that relies on the compromised OS.
Kortti 212
Kysymys
What does dynamic application analysis inspect?
Vastaus
The behavior and externally visible weaknesses of a running application.
Kortti 213
Kysymys
How can false-positive trends affect IDS or IPS tuning?
Vastaus
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kortti 214
Kysymys
What does a business continuity policy establish?
Vastaus
Management expectations for sustaining and restoring critical business functions.
Kortti 215
Kysymys
What is a hot recovery site?
Vastaus
A ready, synchronized environment intended to take over quickly.
Kortti 216
Kysymys
What makes an insider threat distinct?
Vastaus
The actor has legitimate access or organizational knowledge that can be misused.
Kortti 217
Kysymys
What is RFID cloning?
Vastaus
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kortti 218
Kysymys
Why apply vendor security updates promptly?
Vastaus
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kortti 219
Kysymys
What should infrastructure security monitoring observe?
Vastaus
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kortti 220
Kysymys
What can firewall logs reveal?
Vastaus
Allowed or denied network connections across controlled boundaries.
Kortti 221
Kysymys
Why minimize open service ports?
Vastaus
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kortti 222
Kysymys
What is threat hunting?
Vastaus
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kortti 223
Kysymys
What triggers an ad hoc risk assessment?
Vastaus
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kortti 224
Kysymys
What makes an assessment external?
Vastaus
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kortti 225
Kysymys
What is data sovereignty?
Vastaus
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kortti 226
Kysymys
What security boundary does a cellular connection create for a mobile device?
Vastaus
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kortti 227
Kysymys
What makes a security control operational?
Vastaus
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kortti 228
Kysymys
What is discretionary access control?
Vastaus
A resource owner can decide who receives access, within system policy.
Kortti 229
Kysymys
How can careful automation support employee retention?
Vastaus
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kortti 230
Kysymys
Why does ease of deployment matter in an architecture decision?
Vastaus
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kortti 231
Kysymys
What tradeoff comes with placing an NGFW inline?
Vastaus
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kortti 232
Kysymys
What does a zero-trust policy administrator do?
Vastaus
It carries out the policy engine's decision, such as creating or ending a session.
Kortti 233
Kysymys
What should a master service agreement define for data return and deletion?
Vastaus
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kortti 234
Kysymys
What is an environmental physical attack?
Vastaus
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kortti 235
Kysymys
When should a maintenance window be chosen?
Vastaus
When disruption and rollback can be managed with the least business impact.
Kortti 236
Kysymys
What is memory injection?
Vastaus
Placing malicious code or data into another process's memory so it executes in that process's context.
Kortti 237
Kysymys
What does software composition analysis find?
Vastaus
Known risks and license information in third-party dependencies.
Kortti 238
Kysymys
What is DNS filtering?
Vastaus
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kortti 239
Kysymys
What should an incident response policy establish?
Vastaus
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kortti 240
Kysymys
How can noncompliance cause reputational damage?
Vastaus
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kortti 241
Kysymys
What does full-disk encryption protect?
Vastaus
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kortti 242
Kysymys
Why are default credentials dangerous?
Vastaus
They are widely known or easily discovered and often remain unchanged.
Kortti 243
Kysymys
What makes a risk assessment one-time?
Vastaus
It evaluates a defined decision or scope once without an established repeating cadence.
Kortti 244
Kysymys
What is a warm recovery site?
Vastaus
A partially equipped environment that needs some data restoration or configuration before use.
Kortti 245
Kysymys
What does application input validation do?
Vastaus
It checks that input matches the expected type, length, range, and format before use.
Kortti 246
Kysymys
What should an asset inventory record besides a device name?
Vastaus
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kortti 247
Kysymys
What is mandatory access control?
Vastaus
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kortti 248
Kysymys
What security benefit does infrastructure as code provide?
Vastaus
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kortti 249
Kysymys
When should a public service control fail closed?
Vastaus
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kortti 250
Kysymys
What should users do with a suspicious message?
Vastaus
Report it through the approved channel without interacting with its links or attachments.
Kortti 251
Kysymys
What usually motivates organized cybercrime?
Vastaus
Financial gain through scalable or repeatable criminal activity.
Kortti 252
Kysymys
How can malicious code support a network attack?
Vastaus
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kortti 253
Kysymys
When is virtual patching useful?
Vastaus
When a network or application control can block exploit traffic before the underlying system can be patched.
Kortti 254
Kysymys
What does security-monitoring reporting provide?
Vastaus
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kortti 255
Kysymys
What does data geolocation identify?
Vastaus
The physical or legal location where data is stored, processed, or transmitted.
Kortti 256
Kysymys
What does a zero-trust policy enforcement point do?
Vastaus
It enables, monitors, and terminates the connection between a subject and a resource.
Kortti 257
Kysymys
What is cryptographic key exchange?
Vastaus
A method for parties to establish shared key material over an untrusted channel.
Kortti 258
Kysymys
How can a vendor become a supply-chain attack vector?
Vastaus
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kortti 259
Kysymys
Why can legacy hardware remain vulnerable?
Vastaus
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kortti 260
Kysymys
What can proprietary vulnerability intelligence add beyond open sources?
Vastaus
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kortti 261
Kysymys
How does a centralized proxy apply web filtering?
Vastaus
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kortti 262
Kysymys
How can continuous integration and testing improve security automation?
Vastaus
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kortti 263
Kysymys
What is containment?
Vastaus
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kortti 264
Kysymys
What is a software development lifecycle policy meant to ensure?
Vastaus
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kortti 265
Kysymys
What makes risk assessment continuous?
Vastaus
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kortti 266
Kysymys
What is a memorandum of agreement?
Vastaus
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kortti 267
Kysymys
What makes a penetration test integrated?
Vastaus
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kortti 268
Kysymys
How does a DNS amplification attack magnify traffic?
Vastaus
It sends small spoofed queries that trigger larger replies toward the victim.
Kortti 269
Kysymys
Why does ease of recovery matter in an architecture decision?
Vastaus
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kortti 270
Kysymys
What does 802.1X control before a device receives normal network access?
Vastaus
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kortti 271
Kysymys
What is rule-based access control?
Vastaus
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kortti 272
Kysymys
What is mobile device management?
Vastaus
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kortti 273
Kysymys
What tradeoff comes with a cold recovery site?
Vastaus
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kortti 274
Kysymys
Why identify stakeholders before approving a security-sensitive change?
Vastaus
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kortti 275
Kysymys
How do attestation and acknowledgement differ?
Vastaus
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kortti 276
Kysymys
What does zero-trust adaptive identity mean?
Vastaus
Access decisions adjust to current risk signals rather than relying only on a static login.
Kortti 277
Kysymys
What makes a security control physical?
Vastaus
It protects facilities or equipment through a tangible barrier or mechanism.
Kortti 278
Kysymys
What is geo-fencing for data?
Vastaus
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kortti 279
Kysymys
What does a Trusted Platform Module protect?
Vastaus
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kortti 280
Kysymys
Why can a managed service provider amplify risk?
Vastaus
Its privileged access and shared tooling can provide a path into many customers.
Kortti 281
Kysymys
What does probability express in risk analysis?
Vastaus
A quantified chance that a defined event will occur within stated conditions or time.
Kortti 282
Kysymys
Why can shadow IT create a threat?
Vastaus
It bypasses security review, inventory, monitoring, and supported configuration.
Kortti 283
Kysymys
What is on-path interception?
Vastaus
An attacker positions between communicating parties to observe or alter traffic.
Kortti 284
Kysymys
Why include encryption in a system-hardening baseline?
Vastaus
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kortti 285
Kysymys
Why tune security alerts?
Vastaus
To keep useful detections while reducing noise that wastes analyst attention.
Kortti 286
Kysymys
What can IPS or IDS logs contribute to an investigation?
Vastaus
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kortti 287
Kysymys
What is VM escape?
Vastaus
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kortti 288
Kysymys
How can segmentation reduce vulnerability exposure before a patch is available?
Vastaus
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kortti 289
Kysymys
Why should firewall policy name the required ports and protocols explicitly?
Vastaus
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kortti 290
Kysymys
What is a change management policy meant to control?
Vastaus
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kortti 291
Kysymys
What is a hybrid-cloud architecture?
Vastaus
An environment that integrates private or on-premises resources with public cloud services.
Kortti 292
Kysymys
How do AH and ESP differ in the security services they can provide?
Vastaus
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kortti 293
Kysymys
What makes user behavior risky?
Vastaus
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kortti 294
Kysymys
What is least privilege?
Vastaus
Granting only the access needed for the required task and no more.
Kortti 295
Kysymys
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Vastaus
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kortti 296
Kysymys
Why discover unmanaged assets?
Vastaus
Unknown systems cannot be patched, monitored, or governed reliably.
Kortti 297
Kysymys
What is a service-level agreement?
Vastaus
Measurable service commitments and remedies, such as availability or response targets.
Kortti 298
Kysymys
What should govern automated security escalation?
Vastaus
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kortti 299
Kysymys
What is platform diversity as a resilience strategy?
Vastaus
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kortti 300
Kysymys
How can replayed session material affect an application?
Vastaus
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kortti 301
Kysymys
What is an implicit trust zone in zero trust?
Vastaus
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kortti 302
Kysymys
What does salting a password hash accomplish?
Vastaus
It makes identical passwords hash differently and defeats precomputed hash tables.
Kortti 303
Kysymys
What is spear phishing?
Vastaus
Phishing tailored to a specific person, role, or organization.
Kortti 304
Kysymys
What is eradication?
Vastaus
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kortti 305
Kysymys
Who is a risk owner?
Vastaus
The person accountable for deciding and monitoring how a specific risk is handled.
Kortti 306
Kysymys
What does a partially known penetration-test environment provide?
Vastaus
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kortti 307
Kysymys
What is a microservices architecture?
Vastaus
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kortti 308
Kysymys
What is a jump server?
Vastaus
A hardened intermediary used to reach systems in a restricted management network.
Kortti 309
Kysymys
What can happen when a configuration change is made without dependency analysis?
Vastaus
A downstream service can fail even when the changed component works.
Kortti 310
Kysymys
What is resource reuse exposure?
Vastaus
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kortti 311
Kysymys
Why does financial information require explicit protection?
Vastaus
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kortti 312
Kysymys
What does CVE provide?
Vastaus
A common identifier for a publicly disclosed vulnerability.
Kortti 313
Kysymys
Where can DLP controls operate?
Vastaus
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kortti 314
Kysymys
What does privileged password vaulting protect?
Vastaus
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kortti 315
Kysymys
What does an access-control standard define?
Vastaus
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kortti 316
Kysymys
How can automation support compliance monitoring?
Vastaus
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kortti 317
Kysymys
What does static code analysis examine?
Vastaus
Source or compiled code for weakness patterns without executing the application.
Kortti 318
Kysymys
What actor attribute describes funding, time, and personnel?
Vastaus
Resources.
Kortti 319
Kysymys
What is DNS poisoning?
Vastaus
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kortti 320
Kysymys
Why change default credentials during hardening?
Vastaus
Default secrets are predictable and commonly targeted.
Kortti 321
Kysymys
What does quarantine do after a security alert?
Vastaus
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kortti 322
Kysymys
What does key stretching do for stored passwords?
Vastaus
It deliberately makes each password guess more computationally expensive.
Kortti 323
Kysymys
What is smishing?
Vastaus
Phishing delivered through SMS or another text-messaging service.
Kortti 324
Kysymys
What is qualitative risk analysis?
Vastaus
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kortti 325
Kysymys
What is a master service agreement?
Vastaus
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kortti 326
Kysymys
What is threat scope reduction?
Vastaus
Narrowing the systems, privileges, or paths an attacker can reach.
Kortti 327
Kysymys
Why use a third-party cloud service instead of building locally?
Vastaus
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kortti 328
Kysymys
What should determine security-device placement?
Vastaus
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kortti 329
Kysymys
What does situational awareness mean for a user?
Vastaus
Notice the people, devices, requests, location, and context around a task before acting.
Kortti 330
Kysymys
What does a failover test validate?
Vastaus
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kortti 331
Kysymys
What is a preventive control meant to do?
Vastaus
Stop an unwanted event before it succeeds.
Kortti 332
Kysymys
What is just-in-time privileged access?
Vastaus
Elevated access is granted only when needed and expires after a short approved period.
Kortti 333
Kysymys
What safeguard should security-group automation enforce?
Vastaus
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kortti 334
Kysymys
How does a reflected DDoS attack hide and multiply sources?
Vastaus
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kortti 335
Kysymys
What is a security misconfiguration?
Vastaus
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kortti 336
Kysymys
Why can the same vulnerability have different organizational impact?
Vastaus
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kortti 337
Kysymys
What does URL scanning evaluate before a user opens a web destination?
Vastaus
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kortti 338
Kysymys
What is the board's security governance role?
Vastaus
Provide oversight, set risk direction, and hold executives accountable.
Kortti 339
Kysymys
What does code signing establish?
Vastaus
That code came from the holder of the signing key and has not changed since signing.
Kortti 340
Kysymys
How should an asset's classification affect security operations?
Vastaus
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kortti 341
Kysymys
How does encryption protect data?
Vastaus
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kortti 342
Kysymys
What is a secure enclave?
Vastaus
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kortti 343
Kysymys
What is business email compromise?
Vastaus
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kortti 344
Kysymys
What is recovery in incident response?
Vastaus
Restoring services safely, monitoring them, and returning to normal operations.
Kortti 345
Kysymys
How is single loss expectancy commonly estimated?
Vastaus
Asset value multiplied by the exposure factor.
Kortti 346
Kysymys
What does an unknown penetration-test environment provide?
Vastaus
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kortti 347
Kysymys
What security boundary does a hypervisor provide?
Vastaus
It isolates virtual machines while controlling their access to shared hardware.
Kortti 348
Kysymys
Why does a TLS tunnel not protect a compromised endpoint?
Vastaus
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kortti 349
Kysymys
Why update diagrams after an infrastructure change?
Vastaus
Operations and incident responders need the documentation to match the deployed environment.
Kortti 350
Kysymys
What does privacy ownership assign?
Vastaus
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kortti 351
Kysymys
What does a security control gap analysis compare?
Vastaus
The controls required for the target state with the controls currently in place.
Kortti 352
Kysymys
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Vastaus
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kortti 353
Kysymys
What is application privilege escalation?
Vastaus
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kortti 354
Kysymys
What risk remains when unnecessary software is left installed?
Vastaus
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kortti 355
Kysymys
What does SCAP standardize?
Vastaus
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kortti 356
Kysymys
What can packet capture reveal?
Vastaus
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kortti 357
Kysymys
What makes a privileged credential ephemeral?
Vastaus
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kortti 358
Kysymys
How do a statement of work and a work order differ?
Vastaus
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kortti 359
Kysymys
Why might multi-cloud improve resilience?
Vastaus
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kortti 360
Kysymys
How can a service provider introduce a supply-chain vulnerability?
Vastaus
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kortti 361
Kysymys
What is a false positive in vulnerability scanning?
Vastaus
A reported weakness that is not actually present or exploitable in the assessed context.
Kortti 362
Kysymys
How do EDR and XDR differ?
Vastaus
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kortti 363
Kysymys
What should onboarding and offboarding procedures coordinate?
Vastaus
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kortti 364
Kysymys
How should an organization harden managed mobile devices?
Vastaus
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kortti 365
Kysymys
What is a certificate signing request?
Vastaus
A request containing a public key and subject information for a certificate authority to sign.
Kortti 366
Kysymys
What is pretexting?
Vastaus
Using a fabricated role or situation to make a request seem legitimate.
Kortti 367
Kysymys
How is annualized loss expectancy commonly estimated?
Vastaus
Single loss expectancy multiplied by annualized rate of occurrence.
Kortti 368
Kysymys
What security consequence follows from containers sharing a kernel?
Vastaus
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kortti 369
Kysymys
Where does 802.1X enforce a network admission decision?
Vastaus
At the controlled switch port or wireless access point before normal network access is granted.
Kortti 370
Kysymys
What should insider-threat awareness teach?
Vastaus
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kortti 371
Kysymys
What access action is suitable for careful automation?
Vastaus
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kortti 372
Kysymys
What is an evil twin?
Vastaus
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 korttia
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Opiskele tätä pakkaa ilmaiseksiNibomo avautuu, jotta voit aloittaa opiskelun.
Kortti 373
Kysymys
Does non-human-readable data need less protection?
Vastaus
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kortti 374
Kysymys
What does authenticating a system establish?
Vastaus
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kortti 375
Kysymys
What does LDAP provide in identity systems?
Vastaus
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kortti 376
Kysymys
What is a deterrent control meant to do?
Vastaus
Discourage an attacker from attempting an unwanted action.
Kortti 377
Kysymys
Why update procedures after changing a security control?
Vastaus
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kortti 378
Kysymys
How does OCSP differ from a certificate revocation list?
Vastaus
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kortti 379
Kysymys
What is the goal of data exfiltration?
Vastaus
Remove data from its authorized environment without permission.
Kortti 380
Kysymys
What is a watering-hole attack?
Vastaus
Compromising a site frequented by the intended targets so their visits expose them.
Kortti 381
Kysymys
How can a hardware provider introduce a supply-chain vulnerability?
Vastaus
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kortti 382
Kysymys
What is application forgery?
Vastaus
Creating or altering a request, token, or object so the application treats it as authentic.
Kortti 383
Kysymys
How does least privilege mitigate compromise?
Vastaus
It limits the actions and resources available to a compromised account or process.
Kortti 384
Kysymys
What is serverless computing?
Vastaus
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kortti 385
Kysymys
What makes an infrastructure control effective for a specific risk?
Vastaus
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kortti 386
Kysymys
What does parallel recovery processing test?
Vastaus
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kortti 387
Kysymys
Which password-authentication method does WPA3-Personal use?
Vastaus
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kortti 388
Kysymys
How does data retention affect asset disposal?
Vastaus
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kortti 389
Kysymys
What is a false negative in vulnerability scanning?
Vastaus
A real weakness that the assessment fails to report.
Kortti 390
Kysymys
What does recurring security scanning add to monitoring?
Vastaus
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kortti 391
Kysymys
What should guide port selection for a secure protocol?
Vastaus
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kortti 392
Kysymys
What does forensic acquisition create?
Vastaus
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kortti 393
Kysymys
How do system owners and data owners divide security accountability?
Vastaus
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kortti 394
Kysymys
What does likelihood express in risk analysis?
Vastaus
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kortti 395
Kysymys
What is a memorandum of understanding?
Vastaus
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kortti 396
Kysymys
What does the right to be forgotten generally require?
Vastaus
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kortti 397
Kysymys
What does an audit committee oversee?
Vastaus
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kortti 398
Kysymys
What does identity interoperability require?
Vastaus
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kortti 399
Kysymys
How does a bollard protect a facility?
Vastaus
It blocks or redirects vehicles before they can reach a protected area.
Kortti 400
Kysymys
How can hashing protect a downloaded file?
Vastaus
A trusted digest lets the recipient detect whether the file changed.
Kortti 401
Kysymys
What is a credential replay attack?
Vastaus
Using captured valid credentials or tokens again without needing to discover the secret.
Kortti 402
Kysymys
How can automation complexity create security risk?
Vastaus
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kortti 403
Kysymys
What must an architecture provide when a component cannot be patched?
Vastaus
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kortti 404
Kysymys
What makes remote access secure?
Vastaus
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kortti 405
Kysymys
What should users verify before connecting removable media or a cable?
Vastaus
That the device and connection are approved, expected, and handled under organizational policy.
Kortti 406
Kysymys
What is a self-signed certificate?
Vastaus
A certificate signed by its own private key rather than by a separate trusted issuer.
Kortti 407
Kysymys
What is brand impersonation?
Vastaus
Using a trusted organization's identity or look to deceive people.
Kortti 408
Kysymys
What characterizes a conservative risk appetite?
Vastaus
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kortti 409
Kysymys
What should a managed mobile device verify before using Wi-Fi?
Vastaus
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kortti 410
Kysymys
What is a zero-day vulnerability?
Vastaus
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kortti 411
Kysymys
What does verification confirm after vulnerability remediation?
Vastaus
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kortti 412
Kysymys
What is user and entity behavior analytics?
Vastaus
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kortti 413
Kysymys
What does a physical security policy establish?
Vastaus
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kortti 414
Kysymys
What does a UPS provide?
Vastaus
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kortti 415
Kysymys
What is a nondisclosure agreement?
Vastaus
A contract restricting use and disclosure of defined confidential information.
Kortti 416
Kysymys
What should be checked before assigning a user permission?
Vastaus
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kortti 417
Kysymys
How does espionage differ from ordinary theft?
Vastaus
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kortti 418
Kysymys
What is password spraying?
Vastaus
Trying a small set of common passwords across many accounts to avoid lockouts.
Kortti 419
Kysymys
What is the purpose of system isolation during an incident?
Vastaus
Stop harmful communication while preserving the system for response and investigation.
Kortti 420
Kysymys
What is a security benchmark?
Vastaus
A documented set of recommended configuration checks for a platform or product.
Kortti 421
Kysymys
Which metadata fields give a log record investigative context?
Vastaus
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kortti 422
Kysymys
What does an access-control vestibule prevent?
Vastaus
It limits tailgating by allowing controlled passage through one door at a time.
Kortti 423
Kysymys
What is version control's security value for configuration?
Vastaus
It preserves attributable history and enables review or rollback of changes.
Kortti 424
Kysymys
Why use both internal and external compliance monitoring?
Vastaus
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kortti 425
Kysymys
What distinguishes on-premises architecture?
Vastaus
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kortti 426
Kysymys
What risk can split tunneling add to a VPN?
Vastaus
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kortti 427
Kysymys
What is a certificate root of trust?
Vastaus
A trusted root certificate or key from which a client validates a certificate chain.
Kortti 428
Kysymys
What is typosquatting?
Vastaus
Registering a look-alike domain based on common typing errors or visual similarity.
Kortti 429
Kysymys
What is root-cause analysis?
Vastaus
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kortti 430
Kysymys
What is risk tolerance?
Vastaus
The acceptable variation or boundary around a specific objective or risk area.
Kortti 431
Kysymys
What is a security self-assessment?
Vastaus
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kortti 432
Kysymys
What does data masking change?
Vastaus
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kortti 433
Kysymys
How do wireless authentication protocols let clients prove identity securely?
Vastaus
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kortti 434
Kysymys
Why reconcile inventory with network discovery?
Vastaus
Differences expose missing records, retired systems, or unauthorized devices.
Kortti 435
Kysymys
Why does sideloading raise mobile risk?
Vastaus
It can bypass store review, signing policy, and managed application controls.
Kortti 436
Kysymys
What does an information-sharing organization add to vulnerability management?
Vastaus
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kortti 437
Kysymys
What does a web-filter block rule specify?
Vastaus
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kortti 438
Kysymys
How do data custodians and data stewards differ?
Vastaus
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kortti 439
Kysymys
What is a brute-force password attack?
Vastaus
Systematically trying many candidate secrets against an account or protected value.
Kortti 440
Kysymys
What is a compensating control?
Vastaus
An alternative safeguard used when the preferred control is impractical or unavailable.
Kortti 441
Kysymys
How can location act as an authentication factor?
Vastaus
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kortti 442
Kysymys
Why must security automation remain supportable?
Vastaus
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kortti 443
Kysymys
What does a standby generator provide?
Vastaus
Longer-duration power during a utility outage, after a startup delay.
Kortti 444
Kysymys
What makes an architecture air-gapped?
Vastaus
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kortti 445
Kysymys
What is a software-defined WAN?
Vastaus
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kortti 446
Kysymys
What password-management behavior should awareness training reinforce?
Vastaus
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kortti 447
Kysymys
What security value does fencing provide?
Vastaus
It defines and delays entry across a physical perimeter.
Kortti 448
Kysymys
What is a wildcard certificate?
Vastaus
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kortti 449
Kysymys
How does misinformation differ from disinformation?
Vastaus
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kortti 450
Kysymys
What is a risk threshold?
Vastaus
A defined level that triggers escalation, treatment, or another required response.
Kortti 451
Kysymys
What does a vendor penetration test contribute to assessment?
Vastaus
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kortti 452
Kysymys
What is the objective of a service-disruption attack?
Vastaus
Make a system or business function unavailable or unreliable.
Kortti 453
Kysymys
What is directory traversal?
Vastaus
Manipulating a file path to reach files outside the directory the application intended to expose.
Kortti 454
Kysymys
Why decommission an unsupported system?
Vastaus
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kortti 455
Kysymys
Why archive security-monitoring data?
Vastaus
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kortti 456
Kysymys
What role does RADIUS commonly play in enterprise Wi-Fi?
Vastaus
It centralizes authentication, authorization information, and accounting for network access.
Kortti 457
Kysymys
Why separate the requester and approver of a high-risk change?
Vastaus
To reduce error, fraud, and unilateral unauthorized modification.
Kortti 458
Kysymys
Why can a jailbroken device violate a security baseline?
Vastaus
It weakens platform isolation and allows unapproved privileged changes.
Kortti 459
Kysymys
When is tokenization especially useful?
Vastaus
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kortti 460
Kysymys
Why can dark-web intelligence affect vulnerability priority?
Vastaus
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kortti 461
Kysymys
What firewall policy should govern traffic from a screened subnet to internal systems?
Vastaus
Deny it by default and allow only explicitly required flows.
Kortti 462
Kysymys
What does SAML commonly carry?
Vastaus
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kortti 463
Kysymys
What does a security governance committee do?
Vastaus
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kortti 464
Kysymys
How can global privacy requirements affect one data process?
Vastaus
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kortti 465
Kysymys
What characterizes an IoT device?
Vastaus
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kortti 466
Kysymys
What is a unified threat management appliance?
Vastaus
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kortti 467
Kysymys
What does a hardware security module provide?
Vastaus
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kortti 468
Kysymys
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Vastaus
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kortti 469
Kysymys
What is a tabletop exercise?
Vastaus
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kortti 470
Kysymys
What does a risk exemption authorize?
Vastaus
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kortti 471
Kysymys
What is a regulatory examination?
Vastaus
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kortti 472
Kysymys
What does physical video surveillance primarily provide?
Vastaus
Detection and evidence of activity in monitored areas.
Kortti 473
Kysymys
What is a birthday attack against a hash?
Vastaus
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kortti 474
Kysymys
Why keep backups both onsite and offsite?
Vastaus
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kortti 475
Kysymys
How does technical debt affect security automation?
Vastaus
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kortti 476
Kysymys
What should switch hardening restrict first?
Vastaus
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kortti 477
Kysymys
What should happen when an asset changes owners?
Vastaus
Inventory, access, support responsibility, and data handling should be updated.
Kortti 478
Kysymys
What does evidence of a vendor's internal audits contribute?
Vastaus
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kortti 479
Kysymys
What is identity attestation?
Vastaus
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kortti 480
Kysymys
Why can standard enterprise patching be unsafe for an RTOS device?
Vastaus
A change can disrupt timing guarantees or certified operational behavior.
Kortti 481
Kysymys
What is secure access service edge?
Vastaus
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kortti 482
Kysymys
What social-engineering habit should awareness training reinforce?
Vastaus
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kortti 483
Kysymys
How can a software provider introduce a supply-chain vulnerability?
Vastaus
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kortti 484
Kysymys
Why include internet exposure in remediation priority?
Vastaus
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kortti 485
Kysymys
What does a mail gateway inspect?
Vastaus
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kortti 486
Kysymys
What is a data controller?
Vastaus
The entity that determines why and how personal data is processed.
Kortti 487
Kysymys
How does blackmail motivate a cyberattack?
Vastaus
The attacker threatens disclosure or harm unless the victim complies.
Kortti 488
Kysymys
What is a downgrade attack?
Vastaus
Forcing parties to use an older or weaker protocol or security mode.
Kortti 489
Kysymys
How does encryption mitigate data exposure?
Vastaus
It makes captured data unreadable without the required key.
Kortti 490
Kysymys
How do network and web vulnerability scanners differ?
Vastaus
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kortti 491
Kysymys
How can vulnerability-scan data support an investigation?
Vastaus
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kortti 492
Kysymys
What is key escrow?
Vastaus
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kortti 493
Kysymys
Which human vector commonly uses a fake sign-in page to harvest credentials?
Vastaus
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kortti 494
Kysymys
What is risk avoidance?
Vastaus
Stopping or not starting the activity that creates the risk.
Kortti 495
Kysymys
What is data obfuscation?
Vastaus
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kortti 496
Kysymys
What is a directive control?
Vastaus
A safeguard that tells people what behavior or action is required.
Kortti 497
Kysymys
What does a security guard add that a camera cannot?
Vastaus
Human judgment and an immediate physical response.
Kortti 498
Kysymys
Why define restricted activities in change management?
Vastaus
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kortti 499
Kysymys
What contractual impact can noncompliance create?
Vastaus
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kortti 500
Kysymys
What should determine backup frequency?
Vastaus
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kortti 501
Kysymys
What should router hardening protect?
Vastaus
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kortti 502
Kysymys
What problem does OAuth 2.0 address?
Vastaus
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kortti 503
Kysymys
What does SCADA do?
Vastaus
It provides supervisory monitoring and control across distributed industrial equipment.
Kortti 504
Kysymys
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Vastaus
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kortti 505
Kysymys
What distinguishes a computer virus?
Vastaus
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kortti 506
Kysymys
What does a key management system coordinate?
Vastaus
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kortti 507
Kysymys
How can an unsecure wired network expose traffic?
Vastaus
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kortti 508
Kysymys
Why is vulnerable device firmware hard to remediate?
Vastaus
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kortti 509
Kysymys
What does patching change in vulnerability remediation?
Vastaus
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kortti 510
Kysymys
What does DMARC add to SPF and DKIM?
Vastaus
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kortti 511
Kysymys
How does automation improve security efficiency?
Vastaus
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kortti 512
Kysymys
What is a simulation exercise?
Vastaus
A more realistic practice in which participants respond to injected events using operational processes.
Kortti 513
Kysymys
What is a data processor?
Vastaus
An entity that processes personal data on behalf of a controller.
Kortti 514
Kysymys
What is risk mitigation?
Vastaus
Reducing likelihood, impact, or both through controls or process changes.
Kortti 515
Kysymys
Why monitor a vendor after onboarding?
Vastaus
Security posture, ownership, services, incidents, and dependencies can change.
Kortti 516
Kysymys
What does a physical penetration test assess?
Vastaus
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kortti 517
Kysymys
Why use access badges at a facility?
Vastaus
To associate entry attempts with authorized identities and enforce access rules.
Kortti 518
Kysymys
How does permission restriction protect data?
Vastaus
Only authorized identities receive the actions and scope their roles require.
Kortti 519
Kysymys
What is the usual objective of ransomware extortion?
Vastaus
Force payment by denying access, threatening disclosure, or both.
Kortti 520
Kysymys
What does impossible travel indicate?
Vastaus
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kortti 521
Kysymys
What is configuration enforcement?
Vastaus
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kortti 522
Kysymys
What does a web vulnerability scanner inspect?
Vastaus
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kortti 523
Kysymys
How does cost affect an architecture choice?
Vastaus
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kortti 524
Kysymys
What does EAP provide with 802.1X?
Vastaus
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kortti 525
Kysymys
What should operational-security training help users protect?
Vastaus
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kortti 526
Kysymys
What does a time-of-day access rule do?
Vastaus
Allows or denies a requested action according to an approved schedule.
Kortti 527
Kysymys
What should cloud infrastructure hardening establish?
Vastaus
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kortti 528
Kysymys
What should an asset owner ensure during offboarding?
Vastaus
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kortti 529
Kysymys
Why encrypt backups?
Vastaus
Backup media and transfers can expose the same sensitive data as production systems.
Kortti 530
Kysymys
What is steganography?
Vastaus
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kortti 531
Kysymys
Which human vector uses a fabricated authority role to justify a sensitive request?
Vastaus
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kortti 532
Kysymys
Why does risk transfer not remove accountability?
Vastaus
The organization can retain legal, reputational, operational, and oversight consequences.
Kortti 533
Kysymys
Why validate a change after deployment?
Vastaus
To confirm the intended result occurred without introducing unacceptable side effects.
Kortti 534
Kysymys
What makes end-of-life hardware a security vulnerability?
Vastaus
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kortti 535
Kysymys
What does an audit add to remediation validation?
Vastaus
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kortti 536
Kysymys
Why can SPF pass while a message still impersonates a brand?
Vastaus
SPF checks the envelope domain, which may differ from the visible From domain.
Kortti 537
Kysymys
What role can a government entity have in security governance?
Vastaus
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kortti 538
Kysymys
How do data inventory and retention support privacy governance?
Vastaus
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kortti 539
Kysymys
What can concurrent sessions from distant regions indicate?
Vastaus
A stolen account or shared credential, subject to VPN and proxy context.
Kortti 540
Kysymys
What does supply-chain analysis examine?
Vastaus
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kortti 541
Kysymys
What is the purpose of facility lighting as a control?
Vastaus
Deter covert activity and improve observation of people and areas.
Kortti 542
Kysymys
What architecture quality keeps a service usable during component failure?
Vastaus
Availability.
Kortti 543
Kysymys
When is fail-open behavior preferable to fail-closed behavior?
Vastaus
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kortti 544
Kysymys
Which control function does a login-failure alert provide?
Vastaus
Detection; it reveals suspicious authentication activity.
Kortti 545
Kysymys
What does a biometric MFA implementation verify?
Vastaus
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kortti 546
Kysymys
How can automation enforce a security baseline?
Vastaus
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kortti 547
Kysymys
How do wireless cryptographic protocols protect network traffic?
Vastaus
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kortti 548
Kysymys
Why segment sensitive data stores?
Vastaus
It limits reachable paths and separates them from lower-trust workloads.
Kortti 549
Kysymys
What must remain secret in an asymmetric key pair?
Vastaus
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kortti 550
Kysymys
How can a supplier become a supply-chain attack vector?
Vastaus
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kortti 551
Kysymys
What is e-discovery?
Vastaus
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kortti 552
Kysymys
What characterizes a neutral risk appetite?
Vastaus
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kortti 553
Kysymys
What is passive reconnaissance?
Vastaus
Gathering information without directly interacting with the target's systems.
Kortti 554
Kysymys
What does a philosophical motive mean for a threat actor?
Vastaus
The actor acts to advance a belief or moral position rather than primarily for money.
Kortti 555
Kysymys
What does unexpected resource consumption indicate?
Vastaus
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kortti 556
Kysymys
What does a host-based intrusion prevention system do?
Vastaus
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kortti 557
Kysymys
How does agent-based monitoring differ from agentless monitoring?
Vastaus
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kortti 558
Kysymys
What can network logs contribute to an investigation?
Vastaus
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kortti 559
Kysymys
What is the purpose of a backup restore test?
Vastaus
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kortti 560
Kysymys
Why can obsolete hardware become a security risk?
Vastaus
It may lack supported firmware, modern protections, or replacement parts.
Kortti 561
Kysymys
What does rescanning confirm after remediation?
Vastaus
Whether the scanner can still detect the original finding on the affected asset.
Kortti 562
Kysymys
What should a secure transport method provide?
Vastaus
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kortti 563
Kysymys
How can law affect security governance?
Vastaus
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kortti 564
Kysymys
What does resilience mean for a security architecture?
Vastaus
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kortti 565
Kysymys
Why minimize an infrastructure's attack surface?
Vastaus
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kortti 566
Kysymys
What does executing a security-awareness program require?
Vastaus
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kortti 567
Kysymys
What does an infrared security sensor detect?
Vastaus
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kortti 568
Kysymys
What is a knowledge factor?
Vastaus
Something the claimant knows, such as a password.
Kortti 569
Kysymys
Why review allow-list and deny-list impact before a change?
Vastaus
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kortti 570
Kysymys
What does partition-level encryption protect?
Vastaus
One selected disk partition, leaving other partitions outside that encryption boundary.
Kortti 571
Kysymys
How can instant messaging deliver a security attack?
Vastaus
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kortti 572
Kysymys
What can repeated blocked-content events indicate?
Vastaus
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kortti 573
Kysymys
What should a server-hardening baseline reduce?
Vastaus
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kortti 574
Kysymys
When is physical media destruction appropriate?
Vastaus
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kortti 575
Kysymys
What is mean time to repair?
Vastaus
The average time required to restore a failed component or service.
Kortti 576
Kysymys
Why disclose conflicts of interest during vendor selection?
Vastaus
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kortti 577
Kysymys
What is a fine for noncompliance?
Vastaus
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kortti 578
Kysymys
What does a public data classification authorize?
Vastaus
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kortti 579
Kysymys
What security benefit comes from standard infrastructure configurations?
Vastaus
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kortti 580
Kysymys
How does horizontal scaling increase capacity?
Vastaus
It adds more service instances and distributes work among them.
Kortti 581
Kysymys
Why can added connectivity weaken segmentation?
Vastaus
Each allowed path can become a route for lateral movement or data escape.
Kortti 582
Kysymys
What coding practice is central to preventing SQL injection?
Vastaus
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kortti 583
Kysymys
When is a compensating control appropriate for a vulnerability?
Vastaus
When timely removal or patching is infeasible and another control can reduce the risk.
Kortti 584
Kysymys
How does agent-based web filtering enforce policy?
Vastaus
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kortti 585
Kysymys
How can regulation differ from an internal policy?
Vastaus
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kortti 586
Kysymys
What is a storage snapshot?
Vastaus
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kortti 587
Kysymys
What does password age measure?
Vastaus
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kortti 588
Kysymys
What does an ethical motive mean in vulnerability research?
Vastaus
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kortti 589
Kysymys
What can missing security logs indicate?
Vastaus
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kortti 590
Kysymys
Why disable unused ports and protocols?
Vastaus
They expose unnecessary communication paths and code that attackers can reach.
Kortti 591
Kysymys
What does antivirus contribute to monitoring?
Vastaus
It scans files, memory, or behavior and reports suspected malicious code.
Kortti 592
Kysymys
What is a honeypot?
Vastaus
A decoy system or service designed to attract and observe malicious activity.
Kortti 593
Kysymys
What does file-level encryption protect?
Vastaus
Selected files independently of whether the rest of the disk or volume is encrypted.
Kortti 594
Kysymys
How can SMS deliver a security attack?
Vastaus
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kortti 595
Kysymys
What happens during incident analysis?
Vastaus
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kortti 596
Kysymys
What is mean time between failures?
Vastaus
The average operating time between repairable failures.
Kortti 597
Kysymys
What is active reconnaissance?
Vastaus
Probing or interacting with target systems to discover services and behavior.
Kortti 598
Kysymys
What constraint should guide ICS or SCADA hardening?
Vastaus
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kortti 599
Kysymys
Which control function does restoring a clean system image provide?
Vastaus
Correction; it returns the system to a known-good state.
Kortti 600
Kysymys
What does responsiveness mean in an architecture decision?
Vastaus
How quickly the system and its operators can adapt to demand, failure, or attack.
Kortti 601
Kysymys
How does out-of-band access strengthen remote administration?
Vastaus
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kortti 602
Kysymys
What makes user behavior unexpected?
Vastaus
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kortti 603
Kysymys
What is a work order?
Vastaus
A document authorizing a defined unit of work under an existing agreement.
Kortti 604
Kysymys
What can out-of-cycle logging indicate?
Vastaus
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kortti 605
Kysymys
Why update a standard operating procedure after a change?
Vastaus
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kortti 606
Kysymys
What coding practice limits cross-site scripting?
Vastaus
Context-appropriate output encoding, supported by safe templating and input handling.
Kortti 607
Kysymys
What does a restricted data classification indicate?
Vastaus
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kortti 608
Kysymys
How does a bug bounty support responsible disclosure?
Vastaus
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kortti 609
Kysymys
What does web-filter content categorization provide?
Vastaus
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kortti 610
Kysymys
How do hard and soft authentication tokens differ?
Vastaus
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kortti 611
Kysymys
How can industry requirements affect security governance?
Vastaus
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kortti 612
Kysymys
How can noncompliance cause loss of a license?
Vastaus
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kortti 613
Kysymys
What does volume-level encryption protect?
Vastaus
All data within a selected logical storage volume.
Kortti 614
Kysymys
How can impersonation exploit familiarity?
Vastaus
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kortti 615
Kysymys
How does RTO guide recovery design?
Vastaus
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kortti 616
Kysymys
What is a honeynet?
Vastaus
A network of decoy systems used to study or divert attackers.
Kortti 617
Kysymys
What does backup replication provide?
Vastaus
Additional synchronized or copied recovery data in another system or location.
Kortti 618
Kysymys
What lets automation scale securely?
Vastaus
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kortti 619
Kysymys
Why monitor a hardened computing resource continuously?
Vastaus
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kortti 620
Kysymys
Why keep a certificate of destruction?
Vastaus
It documents that a disposal provider handled specified media under the agreed process.
Kortti 621
Kysymys
Why consider patch availability before selecting a platform?
Vastaus
Unsupported or difficult-to-update components accumulate known exposure.
Kortti 622
Kysymys
Why should remote administration use an encrypted, authenticated protocol?
Vastaus
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kortti 623
Kysymys
How can revenge motivate an insider incident?
Vastaus
A disgruntled person may damage systems or disclose data to punish the organization.
Kortti 624
Kysymys
What is a published or documented indicator of malicious activity?
Vastaus
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kortti 625
Kysymys
Why monitor a system more closely when a mitigation exception is accepted?
Vastaus
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kortti 626
Kysymys
What is an SNMP trap?
Vastaus
An unsolicited device notification sent to a management system when a configured event occurs.
Kortti 627
Kysymys
How can an automated report support an investigation?
Vastaus
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kortti 628
Kysymys
What is a security key?
Vastaus
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kortti 629
Kysymys
What does database-level encryption protect?
Vastaus
A database or selected database structures through controls managed at the database layer.
Kortti 630
Kysymys
How does brand impersonation exploit trust?
Vastaus
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kortti 631
Kysymys
What browser-side impact can a cross-site scripting vulnerability create?
Vastaus
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kortti 632
Kysymys
How can a system or process audit identify vulnerabilities?
Vastaus
It compares evidence with required configuration and procedure to reveal control gaps.
Kortti 633
Kysymys
What security role can Group Policy provide?
Vastaus
Centralized Windows configuration of account, application, audit, and system security settings.
Kortti 634
Kysymys
What should incident-response training prepare people to do?
Vastaus
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kortti 635
Kysymys
Why must governance track local or regional requirements?
Vastaus
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kortti 636
Kysymys
How can a dependency become a useful key risk indicator?
Vastaus
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kortti 637
Kysymys
What is a business partners agreement?
Vastaus
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kortti 638
Kysymys
What makes an audit regulatory?
Vastaus
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kortti 639
Kysymys
What is a honeyfile?
Vastaus
A decoy file whose access can reveal unauthorized activity.
Kortti 640
Kysymys
Why does legal information require explicit protection?
Vastaus
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kortti 641
Kysymys
Which indicator can mass file renaming and encryption produce?
Vastaus
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kortti 642
Kysymys
What remains with an organization after transferring architecture risk?
Vastaus
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kortti 643
Kysymys
When does local console placement provide useful administrative access?
Vastaus
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kortti 644
Kysymys
What makes a harmful user action unintentional?
Vastaus
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kortti 645
Kysymys
How should an organization harden workstations?
Vastaus
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kortti 646
Kysymys
What is journaling in recovery?
Vastaus
Recording ordered changes so data can be replayed or restored to a consistent point.
Kortti 647
Kysymys
What downtime must a change plan account for?
Vastaus
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kortti 648
Kysymys
Why must a privacy program map local or regional law to data flows?
Vastaus
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kortti 649
Kysymys
Why combine independent preventive controls at different layers?
Vastaus
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kortti 650
Kysymys
What is passwordless authentication?
Vastaus
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kortti 651
Kysymys
How can automation improve security reaction time?
Vastaus
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kortti 652
Kysymys
What does record-level encryption protect?
Vastaus
Individual records or fields, allowing finer protection than encrypting the entire database.
Kortti 653
Kysymys
How can business email compromise misuse urgency?
Vastaus
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kortti 654
Kysymys
What does impact measure in risk analysis?
Vastaus
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kortti 655
Kysymys
What makes cyber activity part of warfare?
Vastaus
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kortti 656
Kysymys
Which indicator can a newly created privileged account produce outside the normal change window?
Vastaus
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kortti 657
Kysymys
How can configuration enforcement validate a deployed mitigation?
Vastaus
It compares the realized settings with the approved state and corrects or reports drift.
Kortti 658
Kysymys
How does validating an alert improve alert tuning?
Vastaus
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kortti 659
Kysymys
What data-layer impact can a SQL injection vulnerability create?
Vastaus
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kortti 660
Kysymys
What environmental variables can change vulnerability priority?
Vastaus
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kortti 661
Kysymys
What security role does SELinux provide?
Vastaus
Mandatory access controls that confine processes according to centrally defined policy.
Kortti 662
Kysymys
Why review governance documents periodically?
Vastaus
Business, technology, threats, and external obligations change.
Kortti 663
Kysymys
Why evaluate power requirements for a system design?
Vastaus
Power capacity and redundancy constrain availability and recovery.
Kortti 664
Kysymys
When is IPsec a better tunnel choice than TLS?
Vastaus
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kortti 665
Kysymys
What is a honeytoken?
Vastaus
A fake credential or data element that generates a high-confidence alert when used.
Kortti 666
Kysymys
What should embedded-system hardening prioritize?
Vastaus
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kortti 667
Kysymys
Why must sanitization address data remanence?
Vastaus
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kortti 668
Kysymys
Why require rules of engagement for vendor testing?
Vastaus
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kortti 669
Kysymys
What does a private data classification indicate?
Vastaus
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kortti 670
Kysymys
What does a tabletop recovery exercise test?
Vastaus
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kortti 671
Kysymys
Why prevent password reuse?
Vastaus
One compromised password should not unlock other accounts or services.
Kortti 672
Kysymys
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Vastaus
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kortti 673
Kysymys
What does transport encryption protect?
Vastaus
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kortti 674
Kysymys
How can a voice call become an attack vector?
Vastaus
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kortti 675
Kysymys
What should a digital-forensics report document?
Vastaus
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kortti 676
Kysymys
What tradeoff comes with an expansionary risk appetite?
Vastaus
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kortti 677
Kysymys
What does a known penetration-test environment provide?
Vastaus
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kortti 678
Kysymys
Why evaluate compute requirements before deployment?
Vastaus
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kortti 679
Kysymys
Why place sensors at network choke points?
Vastaus
They can observe traffic crossing important trust boundaries.
Kortti 680
Kysymys
What should hybrid or remote-work security training emphasize?
Vastaus
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kortti 681
Kysymys
Why plan an application restart separately from a service restart?
Vastaus
The application may need its own state handling, user coordination, health checks, and rollback point.
Kortti 682
Kysymys
What is a cryptographic vulnerability?
Vastaus
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kortti 683
Kysymys
Why report findings by asset owner?
Vastaus
Owners need clear accountability and a prioritized remediation queue.
Kortti 684
Kysymys
What should guide selection of a secure protocol?
Vastaus
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kortti 685
Kysymys
How do centralized and decentralized governance structures differ?
Vastaus
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kortti 686
Kysymys
How does privacy-aware design limit data retention?
Vastaus
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kortti 687
Kysymys
What does a pressure security sensor detect?
Vastaus
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kortti 688
Kysymys
What automation costs should a security team plan for?
Vastaus
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kortti 689
Kysymys
What should RTOS hardening preserve while reducing attack surface?
Vastaus
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kortti 690
Kysymys
What is the goal of disruption-for-chaos activity?
Vastaus
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kortti 691
Kysymys
Which indicator can repeated password guessing produce?
Vastaus
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kortti 692
Kysymys
How does removing unnecessary software harden a system?
Vastaus
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kortti 693
Kysymys
What does NetFlow provide?
Vastaus
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kortti 694
Kysymys
How can a dashboard support an investigation?
Vastaus
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kortti 695
Kysymys
When should a password be expired?
Vastaus
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kortti 696
Kysymys
Why does cryptographic key length matter?
Vastaus
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kortti 697
Kysymys
How can an unsecure Bluetooth connection become an attack vector?
Vastaus
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kortti 698
Kysymys
What is a key risk indicator?
Vastaus
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kortti 699
Kysymys
What should vendor monitoring verify when a contract ends?
Vastaus
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kortti 700
Kysymys
What does a sensitive data classification indicate?
Vastaus
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kortti 701
Kysymys
What does software-defined networking separate?
Vastaus
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kortti 702
Kysymys
Where should a web application firewall be placed?
Vastaus
In the path of web requests before they reach the protected application.
Kortti 703
Kysymys
What does a simulated recovery exercise test?
Vastaus
Participants perform realistic response actions in a controlled environment without disrupting production.
Kortti 704
Kysymys
How can a team verify that a detective control is effective?
Vastaus
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kortti 705
Kysymys
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Vastaus
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kortti 706
Kysymys
What makes a vulnerability cloud-specific?
Vastaus
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kortti 707
Kysymys
How can insurance respond to vulnerability risk?
Vastaus
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kortti 708
Kysymys
How does reputation improve web filtering?
Vastaus
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kortti 709
Kysymys
What does an encryption policy establish?
Vastaus
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kortti 710
Kysymys
How does a microwave security sensor detect movement?
Vastaus
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kortti 711
Kysymys
What should IoT-device hardening change before deployment?
Vastaus
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kortti 712
Kysymys
Why track software licenses as assets?
Vastaus
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kortti 713
Kysymys
What does a password manager improve?
Vastaus
It can generate and store unique long passwords so users do not memorize or reuse them.
Kortti 714
Kysymys
What makes a ledger open and public?
Vastaus
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kortti 715
Kysymys
What should a payment-change request trigger?
Vastaus
Independent verification through a known channel before any account or payment detail is changed.
Kortti 716
Kysymys
What does preserving digital evidence require?
Vastaus
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kortti 717
Kysymys
What should a risk report tell decision-makers?
Vastaus
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kortti 718
Kysymys
What should an external assessment report provide?
Vastaus
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kortti 719
Kysymys
What is a centralized design's main resilience risk?
Vastaus
A central dependency can become a bottleneck or single point of failure.
Kortti 720
Kysymys
What does mutual TLS add to a TLS-protected service connection?
Vastaus
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kortti 721
Kysymys
What should recurring security-awareness reporting show?
Vastaus
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kortti 722
Kysymys
Why do legacy applications require extra change planning?
Vastaus
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kortti 723
Kysymys
How do a data controller and a data processor differ?
Vastaus
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kortti 724
Kysymys
How can orchestration become a single point of failure?
Vastaus
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kortti 725
Kysymys
Why should defenses account for a threat actor's sophistication and capability?
Vastaus
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kortti 726
Kysymys
How does an injection attack make an application execute unintended instructions?
Vastaus
It sends crafted input that an interpreter treats as code or commands instead of data.
Kortti 727
Kysymys
What does a host-based firewall control?
Vastaus
Inbound and outbound network traffic for one endpoint according to local rules.
Kortti 728
Kysymys
Why revise alerting after an incident?
Vastaus
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kortti 729
Kysymys
Why include security duties in procurement criteria?
Vastaus
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kortti 730
Kysymys
What does a critical data classification indicate?
Vastaus
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kortti 731
Kysymys
What infrastructure capacity must support failover?
Vastaus
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kortti 732
Kysymys
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Vastaus
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kortti 733
Kysymys
How does a remediation exemption differ from an exception?
Vastaus
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kortti 734
Kysymys
Why should automated EDR or XDR blocking have an exception and rollback path?
Vastaus
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kortti 735
Kysymys
What does a security playbook provide?
Vastaus
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kortti 736
Kysymys
How does an ultrasonic security sensor detect movement?
Vastaus
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kortti 737
Kysymys
What should a managed mobile device require for Bluetooth connections?
Vastaus
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kortti 738
Kysymys
How do password complexity rules differ from password length?
Vastaus
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kortti 739
Kysymys
What makes a certificate third-party trusted?
Vastaus
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kortti 740
Kysymys
Why is an out-of-band check effective against impersonation?
Vastaus
It verifies the request through a separate, previously trusted communication path.
Kortti 741
Kysymys
What does a risk exception authorize?
Vastaus
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kortti 742
Kysymys
What security challenge grows in a decentralized design?
Vastaus
Consistent policy, inventory, monitoring, and patching become harder.
Kortti 743
Kysymys
How should controls be selected for an unused network path?
Vastaus
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kortti 744
Kysymys
How can a buffer-overflow attack affect an application?
Vastaus
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 korttia
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo avautuu, jotta voit aloittaa opiskelun.