CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
Um þennan stokk
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Spjöld í þessum stokki
Spjald 1
Spurning
What does an information security policy establish?
Svar
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Spjald 2
Spurning
What is phishing?
Svar
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Spjald 3
Spurning
What does a public-key certificate bind to an identity?
Svar
A public key, together with identifying information and the issuer's signature.
Spjald 4
Spurning
What is data at rest?
Svar
Data stored on media such as disks, databases, backups, or mobile devices.
Spjald 5
Spurning
How does policy-driven access control decide a zero-trust access request?
Svar
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Spjald 6
Spurning
What does establishing a secure baseline produce?
Svar
An approved, documented configuration that defines the required secure state for a class of computing resource.
Spjald 7
Spurning
What is hashing used to verify?
Svar
Whether data has changed by comparing fixed-length digest values.
Spjald 8
Spurning
What is impersonation in social engineering?
Svar
Pretending to be a trusted person or organization to obtain access, data, or action.
Spjald 9
Spurning
What is virtualization?
Svar
Abstracting physical compute so multiple isolated guest systems can share a host.
Spjald 10
Spurning
What is chain of custody?
Svar
A documented history of who collected, handled, transferred, stored, and examined evidence.
Spjald 11
Spurning
What is quantitative risk analysis?
Svar
Estimating risk with numerical values such as money, frequency, or probability.
Spjald 12
Spurning
What is a phishing awareness campaign?
Svar
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Spjald 13
Spurning
What is high availability?
Svar
Designing a service to remain accessible despite expected component failures.
Spjald 14
Spurning
What is a network security zone?
Svar
A group of systems with similar trust, function, or control requirements.
Spjald 15
Spurning
What is risk transfer?
Svar
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Spjald 16
Spurning
What is media sanitization?
Svar
Making stored data infeasible to recover for the intended level of protection.
Spjald 17
Spurning
What does CVSS provide?
Svar
A standardized way to describe a vulnerability's technical severity characteristics.
Spjald 18
Spurning
What does security alerting do?
Svar
It turns matched events or behavior into a notification that the right responder can review.
Spjald 19
Spurning
What does a firewall rule enforce?
Svar
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Spjald 20
Spurning
What is deprovisioning?
Svar
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Spjald 21
Spurning
How does inline placement differ from a tap or monitor port?
Svar
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Spjald 22
Spurning
What is asymmetric encryption?
Svar
Encryption that uses a mathematically related public and private key pair.
Spjald 23
Spurning
What does SPF authorize?
Svar
Which mail servers may send mail for a domain in the SMTP envelope.
Spjald 24
Spurning
What is a possession factor?
Svar
Something the claimant has, such as a cryptographic authenticator.
Spjald 25
Spurning
What does ordinary TLS usually protect and authenticate?
Svar
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Spjald 26
Spurning
What is single loss expectancy?
Svar
The estimated loss from one occurrence of a risk event.
Spjald 27
Spurning
What does a certificate authority do?
Svar
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Spjald 28
Spurning
What is a detective control meant to do?
Svar
Identify that an unwanted event has happened or is happening.
Spjald 29
Spurning
What is the security purpose of change-control approval?
Svar
Ensure authorized reviewers assess risk before the production change occurs.
Spjald 30
Spurning
What is shadow IT?
Svar
Technology used for organizational work without required approval or oversight.
Spjald 31
Spurning
What is a buffer overflow vulnerability?
Svar
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Spjald 32
Spurning
What is ransomware?
Svar
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Spjald 33
Spurning
How does network segmentation limit an incident?
Svar
It restricts communication paths and reduces lateral movement between zones.
Spjald 34
Spurning
How do load balancing and clustering support availability differently?
Svar
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Spjald 35
Spurning
What is vendor due diligence?
Svar
Evaluating a provider's security, capability, stability, and fit before commitment.
Spjald 36
Spurning
Who is a data subject?
Svar
The person whose personal data is collected or processed.
Spjald 37
Spurning
What is attestation?
Svar
A formal assertion or report about a subject matter, often supported by an independent examination.
Spjald 38
Spurning
What is a replay attack?
Svar
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Spjald 39
Spurning
What does a wireless site survey establish?
Svar
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Spjald 40
Spurning
What is the time-of-check stage of a race-condition vulnerability?
Svar
The application verifies a condition or resource state before acting on it.
Spjald 41
Spurning
What is a penetration test?
Svar
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Spjald 42
Spurning
What is a cold recovery site?
Svar
A facility with basic space and utilities but little preinstalled technology or current data.
Spjald 43
Spurning
What is data in transit?
Svar
Data moving between systems or across a network.
Spjald 44
Spurning
What is a vendor security questionnaire?
Svar
A structured request for information about a provider's controls and practices.
Spjald 45
Spurning
How does an internal actor's starting position differ from an external actor's?
Svar
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Spjald 46
Spurning
What can unexpected account lockouts indicate?
Svar
Password guessing, credential stuffing, user error, or a broken client.
Spjald 47
Spurning
How do permissions enforce access control?
Svar
They specify which actions a subject may perform on a particular resource.
Spjald 48
Spurning
What is log aggregation?
Svar
Central collection of logs from multiple sources for search, correlation, and retention.
Spjald 49
Spurning
Why plan a service restart as part of a change?
Svar
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Spjald 50
Spurning
What is infrastructure as code?
Svar
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Spjald 51
Spurning
What should security-awareness program development start with?
Svar
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Spjald 52
Spurning
What is a voice-based social-engineering attack called?
Svar
Vishing.
Spjald 53
Spurning
What happens during incident-response preparation?
Svar
Teams establish people, tools, access, communications, training, and procedures before an incident.
Spjald 54
Spurning
What does an offensive penetration-testing team do?
Svar
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Spjald 55
Spurning
What is federation?
Svar
One security domain relies on identity assertions from another trusted domain.
Spjald 56
Spurning
What is asset classification?
Svar
Grouping an asset by sensitivity, criticality, or required handling.
Spjald 57
Spurning
What is cross-site scripting?
Svar
Injection of script-capable content that a browser executes in another site's security context.
Spjald 58
Spurning
What can IDS or IPS trends reveal?
Svar
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Spjald 59
Spurning
What can unexpected resource inaccessibility indicate?
Svar
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Spjald 60
Spurning
What is a corrective control meant to do?
Svar
Limit damage and restore a secure state after an event.
Spjald 61
Spurning
How do containers differ from virtual machines?
Svar
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Spjald 62
Spurning
How does an active security device differ from a passive one?
Svar
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Spjald 63
Spurning
Why is unsupported software a persistent attack surface?
Svar
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Spjald 64
Spurning
What is annualized rate of occurrence?
Svar
The estimated number of times a risk event occurs per year.
Spjald 65
Spurning
What is an inherence factor?
Svar
A biometric characteristic of the claimant.
Spjald 66
Spurning
What do a threat actor's sophistication and capability describe?
Svar
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Spjald 67
Spurning
What is a SIEM?
Svar
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Spjald 68
Spurning
What is sideloading?
Svar
Installing software from outside the platform's approved distribution path.
Spjald 69
Spurning
What does an IDS or IPS signature match?
Svar
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Spjald 70
Spurning
Why are embedded systems often difficult to patch?
Svar
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Spjald 71
Spurning
What is a virtual private network?
Svar
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Spjald 72
Spurning
What should an initial security-awareness report establish?
Svar
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Spjald 73
Spurning
What is symmetric encryption?
Svar
Encryption that uses the same secret key to encrypt and decrypt data.
Spjald 74
Spurning
What happens during incident detection?
Svar
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Spjald 75
Spurning
What is recovery time objective?
Svar
The target maximum time to restore a function after disruption.
Spjald 76
Spurning
Why prioritize password length?
Svar
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Spjald 77
Spurning
What must sanitization accomplish before an asset leaves organizational control?
Svar
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Spjald 78
Spurning
What is a real-time operating system designed to provide?
Svar
Predictable response timing for tasks with strict deadlines.
Spjald 79
Spurning
What does fail-open behavior do when a control fails?
Svar
It permits traffic or access to preserve availability.
Spjald 80
Spurning
What is jailbreaking or rooting a mobile device?
Svar
Removing platform restrictions to gain privileged control over the operating system.
Spjald 81
Spurning
What does network access control enforce?
Svar
Identity, device posture, and access policy at network connection time and during a session.
Spjald 82
Spurning
What does data loss prevention do?
Svar
Detects and may block sensitive data use or transfer that violates policy.
Spjald 83
Spurning
What security property does a blockchain provide?
Svar
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Spjald 84
Spurning
What is recovery point objective?
Svar
The target maximum acceptable data loss measured backward in time.
Spjald 85
Spurning
How do ICS and SCADA relate?
Svar
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Spjald 86
Spurning
What does fail-closed behavior do when a control fails?
Svar
It denies traffic or access to preserve security.
Spjald 87
Spurning
Which keys create and verify a typical digital signature?
Svar
The signer creates it with a private key, and others verify it with the corresponding public key.
Spjald 88
Spurning
What is SQL injection?
Svar
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Spjald 89
Spurning
What does DKIM verify?
Svar
That selected message content was signed by a domain and was not altered after signing.
Spjald 90
Spurning
What is post-incident activity?
Svar
Learning from the event and improving controls, plans, and recovery based on evidence.
Spjald 91
Spurning
What characterizes an expansionary risk appetite?
Svar
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Spjald 92
Spurning
How do centralized and decentralized architectures differ?
Svar
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Spjald 93
Spurning
What does a certificate revocation list publish?
Svar
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Spjald 94
Spurning
What is a legal hold?
Svar
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Spjald 95
Spurning
What is exposure factor in quantitative risk analysis?
Svar
The estimated percentage of an asset's value lost in one event.
Spjald 96
Spurning
What is decentralized architecture?
Svar
Control or service responsibility is distributed across multiple independent components or locations.
Spjald 97
Spurning
What is tokenization?
Svar
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Spjald 98
Spurning
How can automation act as a workforce multiplier?
Svar
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Spjald 99
Spurning
What can endpoint process logs reveal?
Svar
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Spjald 100
Spurning
What does the CIA triad protect?
Svar
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Spjald 101
Spurning
How does data masking protect information?
Svar
It hides selected values or characters while preserving a usable representation.
Spjald 102
Spurning
How can a national requirement affect security governance?
Svar
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Spjald 103
Spurning
What do integrations and APIs provide to security orchestration?
Svar
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Spjald 104
Spurning
What makes a compliance report external?
Svar
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Spjald 105
Spurning
What does a cryptographic algorithm define?
Svar
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Spjald 106
Spurning
Why compare systems with a secure baseline regularly?
Svar
To detect drift, unauthorized changes, and missing hardening.
Spjald 107
Spurning
What does integrity protect?
Svar
The accuracy and completeness of data and systems against unauthorized change.
Spjald 108
Spurning
What does vulnerability classification organize?
Svar
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Spjald 109
Spurning
What does a password standard define?
Svar
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Spjald 110
Spurning
What technology capacity must a recovery design plan for?
Svar
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Spjald 111
Spurning
What does a confidential data classification indicate?
Svar
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Spjald 112
Spurning
What makes a vendor assessment independent?
Svar
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Spjald 113
Spurning
What lets a worm spread without attaching itself to another file?
Svar
It is a standalone program that replicates across reachable systems or services.
Spjald 114
Spurning
What is microsegmentation?
Svar
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Spjald 115
Spurning
What can application logs reveal?
Svar
Transactions, errors, user actions, and application-specific security events.
Spjald 116
Spurning
What does deploying a secure baseline require?
Svar
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Spjald 117
Spurning
How can resource-provisioning automation improve security?
Svar
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Spjald 118
Spurning
What does availability protect?
Svar
Reliable, timely access to systems and data when authorized users need them.
Spjald 119
Spurning
Why must a change request describe business impact?
Svar
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Spjald 120
Spurning
What does an authenticated vulnerability scan add?
Svar
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Spjald 121
Spurning
What does a change-management procedure specify?
Svar
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Spjald 122
Spurning
What is a sanction for noncompliance?
Svar
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Spjald 123
Spurning
How can email deliver a security attack?
Svar
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Spjald 124
Spurning
What is an internal compliance audit?
Svar
An organization-led examination of whether selected operations and controls meet defined requirements.
Spjald 125
Spurning
What is a Trojan?
Svar
Malware disguised as legitimate or desirable software.
Spjald 126
Spurning
What is clustering?
Svar
Multiple systems work together to provide a service and tolerate member failure.
Spjald 127
Spurning
What makes data regulated?
Svar
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Spjald 128
Spurning
What does a wireless heat map show?
Svar
Measured or modeled signal strength and coverage across a physical area.
Spjald 129
Spurning
How should vendor criticality affect due diligence?
Svar
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Spjald 130
Spurning
How can a digital signature support non-repudiation?
Svar
It provides evidence that the holder of a private key signed specific data.
Spjald 131
Spurning
What should vulnerability prioritization consider beyond severity?
Svar
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Spjald 132
Spurning
What is a security guideline?
Svar
Recommended practice that allows judgment unless adopted as a requirement.
Spjald 133
Spurning
What usually distinguishes a nation-state threat actor?
Svar
Strategic objectives, substantial resources, patience, and advanced operational capability.
Spjald 134
Spurning
What is spyware?
Svar
Software that secretly collects information about a user or system.
Spjald 135
Spurning
Why maintain an allow list for applications?
Svar
Only explicitly approved software is permitted to execute.
Spjald 136
Spurning
How can an image become an attack vector?
Svar
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Spjald 137
Spurning
What makes a security control technical?
Svar
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Spjald 138
Spurning
What is identity proofing?
Svar
Establishing that a person is who they claim to be before issuing an account or credential.
Spjald 139
Spurning
What is an automated security guardrail?
Svar
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Spjald 140
Spurning
Why assign an owner to a planned change?
Svar
To make one party accountable for coordination, execution, and follow-through.
Spjald 141
Spurning
How can national privacy law affect data handling?
Svar
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Spjald 142
Spurning
What is continuity of operations?
Svar
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Spjald 143
Spurning
What security tradeoff comes with BYOD?
Svar
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Spjald 144
Spurning
How should policies and handbooks support security training?
Svar
They provide accessible, current rules and reporting steps that training can apply to real situations.
Spjald 145
Spurning
What is a keylogger?
Svar
A tool that records keystrokes to capture data such as credentials.
Spjald 146
Spurning
What makes information a trade secret?
Svar
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Spjald 147
Spurning
What does authentication establish?
Svar
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Spjald 148
Spurning
What risk comes from an untrusted file attachment?
Svar
Opening or parsing it can execute malicious code or expose data.
Spjald 149
Spurning
How does risk tolerance affect vulnerability remediation?
Svar
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Spjald 150
Spurning
How can a global requirement affect security governance?
Svar
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Spjald 151
Spurning
Why should questionnaire answers be supported by evidence?
Svar
Self-assertions alone may not prove that controls are designed or operating effectively.
Spjald 152
Spurning
What is an independent third-party audit?
Svar
An external party with suitable independence examines evidence against defined criteria.
Spjald 153
Spurning
What do account provisioning and deprovisioning do?
Svar
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Spjald 154
Spurning
What is an unskilled attacker commonly called?
Svar
A script kiddie: someone who relies on tools or instructions created by others.
Spjald 155
Spurning
What is a rootkit?
Svar
Software designed to maintain privileged, concealed access by altering or subverting the system.
Spjald 156
Spurning
What does an access control list enforce?
Svar
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Spjald 157
Spurning
What should system security monitoring observe?
Svar
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Spjald 158
Spurning
What can operating-system security logs reveal?
Svar
Authentication, privilege use, policy changes, services, and other host security events.
Spjald 159
Spurning
Why isolate operational technology from general business networks?
Svar
To limit attack paths into safety- and availability-critical processes.
Spjald 160
Spurning
What is the COPE mobile deployment model?
Svar
The organization owns the device but permits defined personal use while retaining management control.
Spjald 161
Spurning
What security work belongs in asset acquisition and procurement?
Svar
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Spjald 162
Spurning
How can user-provisioning automation improve security?
Svar
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Spjald 163
Spurning
What people capacity must a continuity plan account for?
Svar
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Spjald 164
Spurning
What do authorization models define?
Svar
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Spjald 165
Spurning
Why are removable devices an attack vector?
Svar
They can introduce malware or remove data while bypassing network controls.
Spjald 166
Spurning
What should predeployment change-test results show?
Svar
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Spjald 167
Spurning
What is the time-of-use stage of a race-condition vulnerability?
Svar
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Spjald 168
Spurning
What is data in use?
Svar
Data actively processed in memory or by an application.
Spjald 169
Spurning
What does open-source vulnerability intelligence contribute?
Svar
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Spjald 170
Spurning
What can file-integrity monitoring detect?
Svar
Unexpected changes to protected files, directories, or configuration.
Spjald 171
Spurning
Why should deprovisioning be prompt?
Svar
Former users or roles should not retain usable access.
Spjald 172
Spurning
What is an acceptable use policy?
Svar
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Spjald 173
Spurning
What makes a compliance report internal?
Svar
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Spjald 174
Spurning
What is a logic bomb?
Svar
Malicious code that activates when a specified condition or time is reached.
Spjald 175
Spurning
What does a right-to-audit clause provide?
Svar
Contractual authority to inspect or obtain evidence about agreed controls.
Spjald 176
Spurning
Where should a forward proxy sit in an enterprise traffic path?
Svar
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Spjald 177
Spurning
Which cues should make a message look suspicious?
Svar
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Spjald 178
Spurning
What makes a security control managerial?
Svar
It directs risk and governance through decisions such as policies, assessments, and oversight.
Spjald 179
Spurning
What is the CYOD mobile deployment model?
Svar
The user selects from organization-approved device options that remain subject to corporate security requirements.
Spjald 180
Spurning
How does client-based vulnerable software differ from an agentless exposure?
Svar
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Spjald 181
Spurning
What makes a risk assessment recurring?
Svar
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Spjald 182
Spurning
What does a defensive penetration-testing team practice?
Svar
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Spjald 183
Spurning
In a zero-trust data plane, what can the subject or system represent?
Svar
The user, device, workload, or service requesting access to a protected resource.
Spjald 184
Spurning
What primarily motivates a hacktivist?
Svar
A political, social, or ideological cause.
Spjald 185
Spurning
What is bloatware?
Svar
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Spjald 186
Spurning
Why keep endpoint-protection signatures and engines current?
Svar
They need current detection logic to recognize newly identified malware and exploit behavior.
Spjald 187
Spurning
What should application security monitoring observe?
Svar
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Spjald 188
Spurning
What is role-based access control?
Svar
Permissions are assigned to roles, and identities receive access through their roles.
Spjald 189
Spurning
What is geographic dispersal?
Svar
Placing redundant resources in separate locations so one regional event does not affect all copies.
Spjald 190
Spurning
What is a malicious update?
Svar
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Spjald 191
Spurning
What does static application analysis inspect?
Svar
Source code, bytecode, or compiled code without executing the application.
Spjald 192
Spurning
What does a firewall access list define?
Svar
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Spjald 193
Spurning
What does a disaster recovery policy establish?
Svar
Management expectations for restoring technology and data after a disruptive event.
Spjald 194
Spurning
How does logical segmentation separate workloads that share physical infrastructure?
Svar
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Spjald 195
Spurning
How should IDS and IPS placement differ?
Svar
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Spjald 196
Spurning
What should automated ticket creation capture?
Svar
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Spjald 197
Spurning
What makes information intellectual property?
Svar
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Spjald 198
Spurning
What is a backout plan?
Svar
Predefined steps for safely reversing a failed or harmful change.
Spjald 199
Spurning
Why is an unsecure wireless network an attack vector?
Svar
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Spjald 200
Spurning
What is physical brute force?
Svar
Using force to defeat a lock, barrier, enclosure, or other physical control.
Spjald 201
Spurning
What is application sandboxing?
Svar
Running code in a constrained environment with limited access to the host and data.
Spjald 202
Spurning
Why assign an asset owner?
Svar
One accountable party must decide its use, protection, and lifecycle.
Spjald 203
Spurning
What happens during risk identification?
Svar
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Spjald 204
Spurning
What should an SLA state about breach notification?
Svar
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Spjald 205
Spurning
How do due diligence and due care differ in compliance?
Svar
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Spjald 206
Spurning
What is attribute-based access control?
Svar
Policy evaluates attributes of the subject, resource, action, and environment.
Spjald 207
Spurning
What does a zero-trust policy engine do?
Svar
It evaluates policy and signals to decide whether access should be allowed.
Spjald 208
Spurning
How does a cloud responsibility matrix allocate security duties?
Svar
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Spjald 209
Spurning
Where should a load balancer sit in a service path?
Svar
In front of service instances so it can route requests to healthy backends.
Spjald 210
Spurning
What should the security team do with a reported suspicious message?
Svar
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Spjald 211
Spurning
What makes an operating-system vulnerability high impact?
Svar
It can affect every application and security control that relies on the compromised OS.
Spjald 212
Spurning
What does dynamic application analysis inspect?
Svar
The behavior and externally visible weaknesses of a running application.
Spjald 213
Spurning
How can false-positive trends affect IDS or IPS tuning?
Svar
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Spjald 214
Spurning
What does a business continuity policy establish?
Svar
Management expectations for sustaining and restoring critical business functions.
Spjald 215
Spurning
What is a hot recovery site?
Svar
A ready, synchronized environment intended to take over quickly.
Spjald 216
Spurning
What makes an insider threat distinct?
Svar
The actor has legitimate access or organizational knowledge that can be misused.
Spjald 217
Spurning
What is RFID cloning?
Svar
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Spjald 218
Spurning
Why apply vendor security updates promptly?
Svar
They remove known weaknesses before attackers can exploit the unpatched exposure.
Spjald 219
Spurning
What should infrastructure security monitoring observe?
Svar
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Spjald 220
Spurning
What can firewall logs reveal?
Svar
Allowed or denied network connections across controlled boundaries.
Spjald 221
Spurning
Why minimize open service ports?
Svar
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Spjald 222
Spurning
What is threat hunting?
Svar
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Spjald 223
Spurning
What triggers an ad hoc risk assessment?
Svar
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Spjald 224
Spurning
What makes an assessment external?
Svar
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Spjald 225
Spurning
What is data sovereignty?
Svar
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Spjald 226
Spurning
What security boundary does a cellular connection create for a mobile device?
Svar
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Spjald 227
Spurning
What makes a security control operational?
Svar
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Spjald 228
Spurning
What is discretionary access control?
Svar
A resource owner can decide who receives access, within system policy.
Spjald 229
Spurning
How can careful automation support employee retention?
Svar
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Spjald 230
Spurning
Why does ease of deployment matter in an architecture decision?
Svar
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Spjald 231
Spurning
What tradeoff comes with placing an NGFW inline?
Svar
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Spjald 232
Spurning
What does a zero-trust policy administrator do?
Svar
It carries out the policy engine's decision, such as creating or ending a session.
Spjald 233
Spurning
What should a master service agreement define for data return and deletion?
Svar
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Spjald 234
Spurning
What is an environmental physical attack?
Svar
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Spjald 235
Spurning
When should a maintenance window be chosen?
Svar
When disruption and rollback can be managed with the least business impact.
Spjald 236
Spurning
What is memory injection?
Svar
Placing malicious code or data into another process's memory so it executes in that process's context.
Spjald 237
Spurning
What does software composition analysis find?
Svar
Known risks and license information in third-party dependencies.
Spjald 238
Spurning
What is DNS filtering?
Svar
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Spjald 239
Spurning
What should an incident response policy establish?
Svar
Authority, scope, reporting duties, and organizational commitment for incident handling.
Spjald 240
Spurning
How can noncompliance cause reputational damage?
Svar
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Spjald 241
Spurning
What does full-disk encryption protect?
Svar
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Spjald 242
Spurning
Why are default credentials dangerous?
Svar
They are widely known or easily discovered and often remain unchanged.
Spjald 243
Spurning
What makes a risk assessment one-time?
Svar
It evaluates a defined decision or scope once without an established repeating cadence.
Spjald 244
Spurning
What is a warm recovery site?
Svar
A partially equipped environment that needs some data restoration or configuration before use.
Spjald 245
Spurning
What does application input validation do?
Svar
It checks that input matches the expected type, length, range, and format before use.
Spjald 246
Spurning
What should an asset inventory record besides a device name?
Svar
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Spjald 247
Spurning
What is mandatory access control?
Svar
A central authority enforces access through labels and rules that ordinary owners cannot override.
Spjald 248
Spurning
What security benefit does infrastructure as code provide?
Svar
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Spjald 249
Spurning
When should a public service control fail closed?
Svar
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Spjald 250
Spurning
What should users do with a suspicious message?
Svar
Report it through the approved channel without interacting with its links or attachments.
Spjald 251
Spurning
What usually motivates organized cybercrime?
Svar
Financial gain through scalable or repeatable criminal activity.
Spjald 252
Spurning
How can malicious code support a network attack?
Svar
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Spjald 253
Spurning
When is virtual patching useful?
Svar
When a network or application control can block exploit traffic before the underlying system can be patched.
Spjald 254
Spurning
What does security-monitoring reporting provide?
Svar
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Spjald 255
Spurning
What does data geolocation identify?
Svar
The physical or legal location where data is stored, processed, or transmitted.
Spjald 256
Spurning
What does a zero-trust policy enforcement point do?
Svar
It enables, monitors, and terminates the connection between a subject and a resource.
Spjald 257
Spurning
What is cryptographic key exchange?
Svar
A method for parties to establish shared key material over an untrusted channel.
Spjald 258
Spurning
How can a vendor become a supply-chain attack vector?
Svar
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Spjald 259
Spurning
Why can legacy hardware remain vulnerable?
Svar
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Spjald 260
Spurning
What can proprietary vulnerability intelligence add beyond open sources?
Svar
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Spjald 261
Spurning
How does a centralized proxy apply web filtering?
Svar
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Spjald 262
Spurning
How can continuous integration and testing improve security automation?
Svar
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Spjald 263
Spurning
What is containment?
Svar
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Spjald 264
Spurning
What is a software development lifecycle policy meant to ensure?
Svar
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Spjald 265
Spurning
What makes risk assessment continuous?
Svar
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Spjald 266
Spurning
What is a memorandum of agreement?
Svar
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Spjald 267
Spurning
What makes a penetration test integrated?
Svar
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Spjald 268
Spurning
How does a DNS amplification attack magnify traffic?
Svar
It sends small spoofed queries that trigger larger replies toward the victim.
Spjald 269
Spurning
Why does ease of recovery matter in an architecture decision?
Svar
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Spjald 270
Spurning
What does 802.1X control before a device receives normal network access?
Svar
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Spjald 271
Spurning
What is rule-based access control?
Svar
System-wide rules grant or deny access based on conditions such as network, time, or action.
Spjald 272
Spurning
What is mobile device management?
Svar
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Spjald 273
Spurning
What tradeoff comes with a cold recovery site?
Svar
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Spjald 274
Spurning
Why identify stakeholders before approving a security-sensitive change?
Svar
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Spjald 275
Spurning
How do attestation and acknowledgement differ?
Svar
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Spjald 276
Spurning
What does zero-trust adaptive identity mean?
Svar
Access decisions adjust to current risk signals rather than relying only on a static login.
Spjald 277
Spurning
What makes a security control physical?
Svar
It protects facilities or equipment through a tangible barrier or mechanism.
Spjald 278
Spurning
What is geo-fencing for data?
Svar
Enforcing location-based boundaries on where data or services may be accessed or operated.
Spjald 279
Spurning
What does a Trusted Platform Module protect?
Svar
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Spjald 280
Spurning
Why can a managed service provider amplify risk?
Svar
Its privileged access and shared tooling can provide a path into many customers.
Spjald 281
Spurning
What does probability express in risk analysis?
Svar
A quantified chance that a defined event will occur within stated conditions or time.
Spjald 282
Spurning
Why can shadow IT create a threat?
Svar
It bypasses security review, inventory, monitoring, and supported configuration.
Spjald 283
Spurning
What is on-path interception?
Svar
An attacker positions between communicating parties to observe or alter traffic.
Spjald 284
Spurning
Why include encryption in a system-hardening baseline?
Svar
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Spjald 285
Spurning
Why tune security alerts?
Svar
To keep useful detections while reducing noise that wastes analyst attention.
Spjald 286
Spurning
What can IPS or IDS logs contribute to an investigation?
Svar
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Spjald 287
Spurning
What is VM escape?
Svar
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Spjald 288
Spurning
How can segmentation reduce vulnerability exposure before a patch is available?
Svar
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Spjald 289
Spurning
Why should firewall policy name the required ports and protocols explicitly?
Svar
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Spjald 290
Spurning
What is a change management policy meant to control?
Svar
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Spjald 291
Spurning
What is a hybrid-cloud architecture?
Svar
An environment that integrates private or on-premises resources with public cloud services.
Spjald 292
Spurning
How do AH and ESP differ in the security services they can provide?
Svar
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Spjald 293
Spurning
What makes user behavior risky?
Svar
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Spjald 294
Spurning
What is least privilege?
Svar
Granting only the access needed for the required task and no more.
Spjald 295
Spurning
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Svar
Transmission to HTTPS, script access, and cross-site sending, respectively.
Spjald 296
Spurning
Why discover unmanaged assets?
Svar
Unknown systems cannot be patched, monitored, or governed reliably.
Spjald 297
Spurning
What is a service-level agreement?
Svar
Measurable service commitments and remedies, such as availability or response targets.
Spjald 298
Spurning
What should govern automated security escalation?
Svar
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Spjald 299
Spurning
What is platform diversity as a resilience strategy?
Svar
Using different implementations so one common flaw or failure is less likely to affect every copy.
Spjald 300
Spurning
How can replayed session material affect an application?
Svar
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Spjald 301
Spurning
What is an implicit trust zone in zero trust?
Svar
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Spjald 302
Spurning
What does salting a password hash accomplish?
Svar
It makes identical passwords hash differently and defeats precomputed hash tables.
Spjald 303
Spurning
What is spear phishing?
Svar
Phishing tailored to a specific person, role, or organization.
Spjald 304
Spurning
What is eradication?
Svar
Removing the attacker's access, malicious artifacts, and exploited conditions.
Spjald 305
Spurning
Who is a risk owner?
Svar
The person accountable for deciding and monitoring how a specific risk is handled.
Spjald 306
Spurning
What does a partially known penetration-test environment provide?
Svar
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Spjald 307
Spurning
What is a microservices architecture?
Svar
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Spjald 308
Spurning
What is a jump server?
Svar
A hardened intermediary used to reach systems in a restricted management network.
Spjald 309
Spurning
What can happen when a configuration change is made without dependency analysis?
Svar
A downstream service can fail even when the changed component works.
Spjald 310
Spurning
What is resource reuse exposure?
Svar
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Spjald 311
Spurning
Why does financial information require explicit protection?
Svar
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Spjald 312
Spurning
What does CVE provide?
Svar
A common identifier for a publicly disclosed vulnerability.
Spjald 313
Spurning
Where can DLP controls operate?
Svar
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Spjald 314
Spurning
What does privileged password vaulting protect?
Svar
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Spjald 315
Spurning
What does an access-control standard define?
Svar
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Spjald 316
Spurning
How can automation support compliance monitoring?
Svar
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Spjald 317
Spurning
What does static code analysis examine?
Svar
Source or compiled code for weakness patterns without executing the application.
Spjald 318
Spurning
What actor attribute describes funding, time, and personnel?
Svar
Resources.
Spjald 319
Spurning
What is DNS poisoning?
Svar
Introducing false DNS data so names resolve to attacker-chosen destinations.
Spjald 320
Spurning
Why change default credentials during hardening?
Svar
Default secrets are predictable and commonly targeted.
Spjald 321
Spurning
What does quarantine do after a security alert?
Svar
It restricts a suspected asset or object while analysts validate and remediate the risk.
Spjald 322
Spurning
What does key stretching do for stored passwords?
Svar
It deliberately makes each password guess more computationally expensive.
Spjald 323
Spurning
What is smishing?
Svar
Phishing delivered through SMS or another text-messaging service.
Spjald 324
Spurning
What is qualitative risk analysis?
Svar
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Spjald 325
Spurning
What is a master service agreement?
Svar
An umbrella contract establishing general legal and commercial terms for ongoing work.
Spjald 326
Spurning
What is threat scope reduction?
Svar
Narrowing the systems, privileges, or paths an attacker can reach.
Spjald 327
Spurning
Why use a third-party cloud service instead of building locally?
Svar
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Spjald 328
Spurning
What should determine security-device placement?
Svar
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Spjald 329
Spurning
What does situational awareness mean for a user?
Svar
Notice the people, devices, requests, location, and context around a task before acting.
Spjald 330
Spurning
What does a failover test validate?
Svar
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Spjald 331
Spurning
What is a preventive control meant to do?
Svar
Stop an unwanted event before it succeeds.
Spjald 332
Spurning
What is just-in-time privileged access?
Svar
Elevated access is granted only when needed and expires after a short approved period.
Spjald 333
Spurning
What safeguard should security-group automation enforce?
Svar
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Spjald 334
Spurning
How does a reflected DDoS attack hide and multiply sources?
Svar
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Spjald 335
Spurning
What is a security misconfiguration?
Svar
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Spjald 336
Spurning
Why can the same vulnerability have different organizational impact?
Svar
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Spjald 337
Spurning
What does URL scanning evaluate before a user opens a web destination?
Svar
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Spjald 338
Spurning
What is the board's security governance role?
Svar
Provide oversight, set risk direction, and hold executives accountable.
Spjald 339
Spurning
What does code signing establish?
Svar
That code came from the holder of the signing key and has not changed since signing.
Spjald 340
Spurning
How should an asset's classification affect security operations?
Svar
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Spjald 341
Spurning
How does encryption protect data?
Svar
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Spjald 342
Spurning
What is a secure enclave?
Svar
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Spjald 343
Spurning
What is business email compromise?
Svar
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Spjald 344
Spurning
What is recovery in incident response?
Svar
Restoring services safely, monitoring them, and returning to normal operations.
Spjald 345
Spurning
How is single loss expectancy commonly estimated?
Svar
Asset value multiplied by the exposure factor.
Spjald 346
Spurning
What does an unknown penetration-test environment provide?
Svar
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Spjald 347
Spurning
What security boundary does a hypervisor provide?
Svar
It isolates virtual machines while controlling their access to shared hardware.
Spjald 348
Spurning
Why does a TLS tunnel not protect a compromised endpoint?
Svar
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Spjald 349
Spurning
Why update diagrams after an infrastructure change?
Svar
Operations and incident responders need the documentation to match the deployed environment.
Spjald 350
Spurning
What does privacy ownership assign?
Svar
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Spjald 351
Spurning
What does a security control gap analysis compare?
Svar
The controls required for the target state with the controls currently in place.
Spjald 352
Spurning
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Svar
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Spjald 353
Spurning
What is application privilege escalation?
Svar
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Spjald 354
Spurning
What risk remains when unnecessary software is left installed?
Svar
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Spjald 355
Spurning
What does SCAP standardize?
Svar
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Spjald 356
Spurning
What can packet capture reveal?
Svar
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Spjald 357
Spurning
What makes a privileged credential ephemeral?
Svar
It is created for a limited task or session and expires or is destroyed automatically after that use.
Spjald 358
Spurning
How do a statement of work and a work order differ?
Svar
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Spjald 359
Spurning
Why might multi-cloud improve resilience?
Svar
A provider-wide failure need not stop workloads that can run independently elsewhere.
Spjald 360
Spurning
How can a service provider introduce a supply-chain vulnerability?
Svar
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Spjald 361
Spurning
What is a false positive in vulnerability scanning?
Svar
A reported weakness that is not actually present or exploitable in the assessed context.
Spjald 362
Spurning
How do EDR and XDR differ?
Svar
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Spjald 363
Spurning
What should onboarding and offboarding procedures coordinate?
Svar
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Spjald 364
Spurning
How should an organization harden managed mobile devices?
Svar
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Spjald 365
Spurning
What is a certificate signing request?
Svar
A request containing a public key and subject information for a certificate authority to sign.
Spjald 366
Spurning
What is pretexting?
Svar
Using a fabricated role or situation to make a request seem legitimate.
Spjald 367
Spurning
How is annualized loss expectancy commonly estimated?
Svar
Single loss expectancy multiplied by annualized rate of occurrence.
Spjald 368
Spurning
What security consequence follows from containers sharing a kernel?
Svar
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Spjald 369
Spurning
Where does 802.1X enforce a network admission decision?
Svar
At the controlled switch port or wireless access point before normal network access is granted.
Spjald 370
Spurning
What should insider-threat awareness teach?
Svar
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Spjald 371
Spurning
What access action is suitable for careful automation?
Svar
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Spjald 372
Spurning
What is an evil twin?
Svar
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 spjöld
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Læra þennan stokk ókeypisNibomo opnast svo þú getir byrjað að læra.
Spjald 373
Spurning
Does non-human-readable data need less protection?
Svar
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Spjald 374
Spurning
What does authenticating a system establish?
Svar
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Spjald 375
Spurning
What does LDAP provide in identity systems?
Svar
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Spjald 376
Spurning
What is a deterrent control meant to do?
Svar
Discourage an attacker from attempting an unwanted action.
Spjald 377
Spurning
Why update procedures after changing a security control?
Svar
Staff need accurate steps for operating, monitoring, and recovering the new control.
Spjald 378
Spurning
How does OCSP differ from a certificate revocation list?
Svar
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Spjald 379
Spurning
What is the goal of data exfiltration?
Svar
Remove data from its authorized environment without permission.
Spjald 380
Spurning
What is a watering-hole attack?
Svar
Compromising a site frequented by the intended targets so their visits expose them.
Spjald 381
Spurning
How can a hardware provider introduce a supply-chain vulnerability?
Svar
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Spjald 382
Spurning
What is application forgery?
Svar
Creating or altering a request, token, or object so the application treats it as authentic.
Spjald 383
Spurning
How does least privilege mitigate compromise?
Svar
It limits the actions and resources available to a compromised account or process.
Spjald 384
Spurning
What is serverless computing?
Svar
A model where the provider manages servers and the customer deploys event-driven code or functions.
Spjald 385
Spurning
What makes an infrastructure control effective for a specific risk?
Svar
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Spjald 386
Spurning
What does parallel recovery processing test?
Svar
Whether primary and alternate environments can run together consistently before a controlled cutover.
Spjald 387
Spurning
Which password-authentication method does WPA3-Personal use?
Svar
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Spjald 388
Spurning
How does data retention affect asset disposal?
Svar
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Spjald 389
Spurning
What is a false negative in vulnerability scanning?
Svar
A real weakness that the assessment fails to report.
Spjald 390
Spurning
What does recurring security scanning add to monitoring?
Svar
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Spjald 391
Spurning
What should guide port selection for a secure protocol?
Svar
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Spjald 392
Spurning
What does forensic acquisition create?
Svar
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Spjald 393
Spurning
How do system owners and data owners divide security accountability?
Svar
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Spjald 394
Spurning
What does likelihood express in risk analysis?
Svar
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Spjald 395
Spurning
What is a memorandum of understanding?
Svar
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Spjald 396
Spurning
What does the right to be forgotten generally require?
Svar
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Spjald 397
Spurning
What does an audit committee oversee?
Svar
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Spjald 398
Spurning
What does identity interoperability require?
Svar
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Spjald 399
Spurning
How does a bollard protect a facility?
Svar
It blocks or redirects vehicles before they can reach a protected area.
Spjald 400
Spurning
How can hashing protect a downloaded file?
Svar
A trusted digest lets the recipient detect whether the file changed.
Spjald 401
Spurning
What is a credential replay attack?
Svar
Using captured valid credentials or tokens again without needing to discover the secret.
Spjald 402
Spurning
How can automation complexity create security risk?
Svar
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Spjald 403
Spurning
What must an architecture provide when a component cannot be patched?
Svar
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Spjald 404
Spurning
What makes remote access secure?
Svar
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Spjald 405
Spurning
What should users verify before connecting removable media or a cable?
Svar
That the device and connection are approved, expected, and handled under organizational policy.
Spjald 406
Spurning
What is a self-signed certificate?
Svar
A certificate signed by its own private key rather than by a separate trusted issuer.
Spjald 407
Spurning
What is brand impersonation?
Svar
Using a trusted organization's identity or look to deceive people.
Spjald 408
Spurning
What characterizes a conservative risk appetite?
Svar
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Spjald 409
Spurning
What should a managed mobile device verify before using Wi-Fi?
Svar
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Spjald 410
Spurning
What is a zero-day vulnerability?
Svar
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Spjald 411
Spurning
What does verification confirm after vulnerability remediation?
Svar
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Spjald 412
Spurning
What is user and entity behavior analytics?
Svar
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Spjald 413
Spurning
What does a physical security policy establish?
Svar
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Spjald 414
Spurning
What does a UPS provide?
Svar
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Spjald 415
Spurning
What is a nondisclosure agreement?
Svar
A contract restricting use and disclosure of defined confidential information.
Spjald 416
Spurning
What should be checked before assigning a user permission?
Svar
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Spjald 417
Spurning
How does espionage differ from ordinary theft?
Svar
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Spjald 418
Spurning
What is password spraying?
Svar
Trying a small set of common passwords across many accounts to avoid lockouts.
Spjald 419
Spurning
What is the purpose of system isolation during an incident?
Svar
Stop harmful communication while preserving the system for response and investigation.
Spjald 420
Spurning
What is a security benchmark?
Svar
A documented set of recommended configuration checks for a platform or product.
Spjald 421
Spurning
Which metadata fields give a log record investigative context?
Svar
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Spjald 422
Spurning
What does an access-control vestibule prevent?
Svar
It limits tailgating by allowing controlled passage through one door at a time.
Spjald 423
Spurning
What is version control's security value for configuration?
Svar
It preserves attributable history and enables review or rollback of changes.
Spjald 424
Spurning
Why use both internal and external compliance monitoring?
Svar
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Spjald 425
Spurning
What distinguishes on-premises architecture?
Svar
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Spjald 426
Spurning
What risk can split tunneling add to a VPN?
Svar
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Spjald 427
Spurning
What is a certificate root of trust?
Svar
A trusted root certificate or key from which a client validates a certificate chain.
Spjald 428
Spurning
What is typosquatting?
Svar
Registering a look-alike domain based on common typing errors or visual similarity.
Spjald 429
Spurning
What is root-cause analysis?
Svar
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Spjald 430
Spurning
What is risk tolerance?
Svar
The acceptable variation or boundary around a specific objective or risk area.
Spjald 431
Spurning
What is a security self-assessment?
Svar
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Spjald 432
Spurning
What does data masking change?
Svar
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Spjald 433
Spurning
How do wireless authentication protocols let clients prove identity securely?
Svar
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Spjald 434
Spurning
Why reconcile inventory with network discovery?
Svar
Differences expose missing records, retired systems, or unauthorized devices.
Spjald 435
Spurning
Why does sideloading raise mobile risk?
Svar
It can bypass store review, signing policy, and managed application controls.
Spjald 436
Spurning
What does an information-sharing organization add to vulnerability management?
Svar
Sector or community intelligence about relevant threats, incidents, and defensive action.
Spjald 437
Spurning
What does a web-filter block rule specify?
Svar
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Spjald 438
Spurning
How do data custodians and data stewards differ?
Svar
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Spjald 439
Spurning
What is a brute-force password attack?
Svar
Systematically trying many candidate secrets against an account or protected value.
Spjald 440
Spurning
What is a compensating control?
Svar
An alternative safeguard used when the preferred control is impractical or unavailable.
Spjald 441
Spurning
How can location act as an authentication factor?
Svar
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Spjald 442
Spurning
Why must security automation remain supportable?
Svar
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Spjald 443
Spurning
What does a standby generator provide?
Svar
Longer-duration power during a utility outage, after a startup delay.
Spjald 444
Spurning
What makes an architecture air-gapped?
Svar
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Spjald 445
Spurning
What is a software-defined WAN?
Svar
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Spjald 446
Spurning
What password-management behavior should awareness training reinforce?
Svar
Use unique long passwords through an approved manager and report suspected compromise promptly.
Spjald 447
Spurning
What security value does fencing provide?
Svar
It defines and delays entry across a physical perimeter.
Spjald 448
Spurning
What is a wildcard certificate?
Svar
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Spjald 449
Spurning
How does misinformation differ from disinformation?
Svar
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Spjald 450
Spurning
What is a risk threshold?
Svar
A defined level that triggers escalation, treatment, or another required response.
Spjald 451
Spurning
What does a vendor penetration test contribute to assessment?
Svar
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Spjald 452
Spurning
What is the objective of a service-disruption attack?
Svar
Make a system or business function unavailable or unreliable.
Spjald 453
Spurning
What is directory traversal?
Svar
Manipulating a file path to reach files outside the directory the application intended to expose.
Spjald 454
Spurning
Why decommission an unsupported system?
Svar
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Spjald 455
Spurning
Why archive security-monitoring data?
Svar
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Spjald 456
Spurning
What role does RADIUS commonly play in enterprise Wi-Fi?
Svar
It centralizes authentication, authorization information, and accounting for network access.
Spjald 457
Spurning
Why separate the requester and approver of a high-risk change?
Svar
To reduce error, fraud, and unilateral unauthorized modification.
Spjald 458
Spurning
Why can a jailbroken device violate a security baseline?
Svar
It weakens platform isolation and allows unapproved privileged changes.
Spjald 459
Spurning
When is tokenization especially useful?
Svar
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Spjald 460
Spurning
Why can dark-web intelligence affect vulnerability priority?
Svar
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Spjald 461
Spurning
What firewall policy should govern traffic from a screened subnet to internal systems?
Svar
Deny it by default and allow only explicitly required flows.
Spjald 462
Spurning
What does SAML commonly carry?
Svar
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Spjald 463
Spurning
What does a security governance committee do?
Svar
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Spjald 464
Spurning
How can global privacy requirements affect one data process?
Svar
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Spjald 465
Spurning
What characterizes an IoT device?
Svar
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Spjald 466
Spurning
What is a unified threat management appliance?
Svar
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Spjald 467
Spurning
What does a hardware security module provide?
Svar
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Spjald 468
Spurning
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Svar
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Spjald 469
Spurning
What is a tabletop exercise?
Svar
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Spjald 470
Spurning
What does a risk exemption authorize?
Svar
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Spjald 471
Spurning
What is a regulatory examination?
Svar
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Spjald 472
Spurning
What does physical video surveillance primarily provide?
Svar
Detection and evidence of activity in monitored areas.
Spjald 473
Spurning
What is a birthday attack against a hash?
Svar
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Spjald 474
Spurning
Why keep backups both onsite and offsite?
Svar
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Spjald 475
Spurning
How does technical debt affect security automation?
Svar
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Spjald 476
Spurning
What should switch hardening restrict first?
Svar
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Spjald 477
Spurning
What should happen when an asset changes owners?
Svar
Inventory, access, support responsibility, and data handling should be updated.
Spjald 478
Spurning
What does evidence of a vendor's internal audits contribute?
Svar
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Spjald 479
Spurning
What is identity attestation?
Svar
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Spjald 480
Spurning
Why can standard enterprise patching be unsafe for an RTOS device?
Svar
A change can disrupt timing guarantees or certified operational behavior.
Spjald 481
Spurning
What is secure access service edge?
Svar
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Spjald 482
Spurning
What social-engineering habit should awareness training reinforce?
Svar
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Spjald 483
Spurning
How can a software provider introduce a supply-chain vulnerability?
Svar
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Spjald 484
Spurning
Why include internet exposure in remediation priority?
Svar
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Spjald 485
Spurning
What does a mail gateway inspect?
Svar
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Spjald 486
Spurning
What is a data controller?
Svar
The entity that determines why and how personal data is processed.
Spjald 487
Spurning
How does blackmail motivate a cyberattack?
Svar
The attacker threatens disclosure or harm unless the victim complies.
Spjald 488
Spurning
What is a downgrade attack?
Svar
Forcing parties to use an older or weaker protocol or security mode.
Spjald 489
Spurning
How does encryption mitigate data exposure?
Svar
It makes captured data unreadable without the required key.
Spjald 490
Spurning
How do network and web vulnerability scanners differ?
Svar
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Spjald 491
Spurning
How can vulnerability-scan data support an investigation?
Svar
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Spjald 492
Spurning
What is key escrow?
Svar
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Spjald 493
Spurning
Which human vector commonly uses a fake sign-in page to harvest credentials?
Svar
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Spjald 494
Spurning
What is risk avoidance?
Svar
Stopping or not starting the activity that creates the risk.
Spjald 495
Spurning
What is data obfuscation?
Svar
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Spjald 496
Spurning
What is a directive control?
Svar
A safeguard that tells people what behavior or action is required.
Spjald 497
Spurning
What does a security guard add that a camera cannot?
Svar
Human judgment and an immediate physical response.
Spjald 498
Spurning
Why define restricted activities in change management?
Svar
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Spjald 499
Spurning
What contractual impact can noncompliance create?
Svar
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Spjald 500
Spurning
What should determine backup frequency?
Svar
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Spjald 501
Spurning
What should router hardening protect?
Svar
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Spjald 502
Spurning
What problem does OAuth 2.0 address?
Svar
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Spjald 503
Spurning
What does SCADA do?
Svar
It provides supervisory monitoring and control across distributed industrial equipment.
Spjald 504
Spurning
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Svar
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Spjald 505
Spurning
What distinguishes a computer virus?
Svar
It attaches to a host file or program and spreads when that infected host executes or is shared.
Spjald 506
Spurning
What does a key management system coordinate?
Svar
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Spjald 507
Spurning
How can an unsecure wired network expose traffic?
Svar
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Spjald 508
Spurning
Why is vulnerable device firmware hard to remediate?
Svar
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Spjald 509
Spurning
What does patching change in vulnerability remediation?
Svar
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Spjald 510
Spurning
What does DMARC add to SPF and DKIM?
Svar
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Spjald 511
Spurning
How does automation improve security efficiency?
Svar
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Spjald 512
Spurning
What is a simulation exercise?
Svar
A more realistic practice in which participants respond to injected events using operational processes.
Spjald 513
Spurning
What is a data processor?
Svar
An entity that processes personal data on behalf of a controller.
Spjald 514
Spurning
What is risk mitigation?
Svar
Reducing likelihood, impact, or both through controls or process changes.
Spjald 515
Spurning
Why monitor a vendor after onboarding?
Svar
Security posture, ownership, services, incidents, and dependencies can change.
Spjald 516
Spurning
What does a physical penetration test assess?
Svar
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Spjald 517
Spurning
Why use access badges at a facility?
Svar
To associate entry attempts with authorized identities and enforce access rules.
Spjald 518
Spurning
How does permission restriction protect data?
Svar
Only authorized identities receive the actions and scope their roles require.
Spjald 519
Spurning
What is the usual objective of ransomware extortion?
Svar
Force payment by denying access, threatening disclosure, or both.
Spjald 520
Spurning
What does impossible travel indicate?
Svar
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Spjald 521
Spurning
What is configuration enforcement?
Svar
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Spjald 522
Spurning
What does a web vulnerability scanner inspect?
Svar
Running web behavior for issues such as unsafe input handling and insecure configuration.
Spjald 523
Spurning
How does cost affect an architecture choice?
Svar
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Spjald 524
Spurning
What does EAP provide with 802.1X?
Svar
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Spjald 525
Spurning
What should operational-security training help users protect?
Svar
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Spjald 526
Spurning
What does a time-of-day access rule do?
Svar
Allows or denies a requested action according to an approved schedule.
Spjald 527
Spurning
What should cloud infrastructure hardening establish?
Svar
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Spjald 528
Spurning
What should an asset owner ensure during offboarding?
Svar
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Spjald 529
Spurning
Why encrypt backups?
Svar
Backup media and transfers can expose the same sensitive data as production systems.
Spjald 530
Spurning
What is steganography?
Svar
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Spjald 531
Spurning
Which human vector uses a fabricated authority role to justify a sensitive request?
Svar
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Spjald 532
Spurning
Why does risk transfer not remove accountability?
Svar
The organization can retain legal, reputational, operational, and oversight consequences.
Spjald 533
Spurning
Why validate a change after deployment?
Svar
To confirm the intended result occurred without introducing unacceptable side effects.
Spjald 534
Spurning
What makes end-of-life hardware a security vulnerability?
Svar
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Spjald 535
Spurning
What does an audit add to remediation validation?
Svar
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Spjald 536
Spurning
Why can SPF pass while a message still impersonates a brand?
Svar
SPF checks the envelope domain, which may differ from the visible From domain.
Spjald 537
Spurning
What role can a government entity have in security governance?
Svar
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Spjald 538
Spurning
How do data inventory and retention support privacy governance?
Svar
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Spjald 539
Spurning
What can concurrent sessions from distant regions indicate?
Svar
A stolen account or shared credential, subject to VPN and proxy context.
Spjald 540
Spurning
What does supply-chain analysis examine?
Svar
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Spjald 541
Spurning
What is the purpose of facility lighting as a control?
Svar
Deter covert activity and improve observation of people and areas.
Spjald 542
Spurning
What architecture quality keeps a service usable during component failure?
Svar
Availability.
Spjald 543
Spurning
When is fail-open behavior preferable to fail-closed behavior?
Svar
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Spjald 544
Spurning
Which control function does a login-failure alert provide?
Svar
Detection; it reveals suspicious authentication activity.
Spjald 545
Spurning
What does a biometric MFA implementation verify?
Svar
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Spjald 546
Spurning
How can automation enforce a security baseline?
Svar
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Spjald 547
Spurning
How do wireless cryptographic protocols protect network traffic?
Svar
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Spjald 548
Spurning
Why segment sensitive data stores?
Svar
It limits reachable paths and separates them from lower-trust workloads.
Spjald 549
Spurning
What must remain secret in an asymmetric key pair?
Svar
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Spjald 550
Spurning
How can a supplier become a supply-chain attack vector?
Svar
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Spjald 551
Spurning
What is e-discovery?
Svar
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Spjald 552
Spurning
What characterizes a neutral risk appetite?
Svar
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Spjald 553
Spurning
What is passive reconnaissance?
Svar
Gathering information without directly interacting with the target's systems.
Spjald 554
Spurning
What does a philosophical motive mean for a threat actor?
Svar
The actor acts to advance a belief or moral position rather than primarily for money.
Spjald 555
Spurning
What does unexpected resource consumption indicate?
Svar
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Spjald 556
Spurning
What does a host-based intrusion prevention system do?
Svar
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Spjald 557
Spurning
How does agent-based monitoring differ from agentless monitoring?
Svar
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Spjald 558
Spurning
What can network logs contribute to an investigation?
Svar
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Spjald 559
Spurning
What is the purpose of a backup restore test?
Svar
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Spjald 560
Spurning
Why can obsolete hardware become a security risk?
Svar
It may lack supported firmware, modern protections, or replacement parts.
Spjald 561
Spurning
What does rescanning confirm after remediation?
Svar
Whether the scanner can still detect the original finding on the affected asset.
Spjald 562
Spurning
What should a secure transport method provide?
Svar
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Spjald 563
Spurning
How can law affect security governance?
Svar
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Spjald 564
Spurning
What does resilience mean for a security architecture?
Svar
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Spjald 565
Spurning
Why minimize an infrastructure's attack surface?
Svar
Fewer exposed services and paths leave fewer opportunities for exploitation.
Spjald 566
Spurning
What does executing a security-awareness program require?
Svar
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Spjald 567
Spurning
What does an infrared security sensor detect?
Svar
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Spjald 568
Spurning
What is a knowledge factor?
Svar
Something the claimant knows, such as a password.
Spjald 569
Spurning
Why review allow-list and deny-list impact before a change?
Svar
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Spjald 570
Spurning
What does partition-level encryption protect?
Svar
One selected disk partition, leaving other partitions outside that encryption boundary.
Spjald 571
Spurning
How can instant messaging deliver a security attack?
Svar
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Spjald 572
Spurning
What can repeated blocked-content events indicate?
Svar
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Spjald 573
Spurning
What should a server-hardening baseline reduce?
Svar
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Spjald 574
Spurning
When is physical media destruction appropriate?
Svar
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Spjald 575
Spurning
What is mean time to repair?
Svar
The average time required to restore a failed component or service.
Spjald 576
Spurning
Why disclose conflicts of interest during vendor selection?
Svar
A personal or financial relationship can bias evaluation away from the organization's requirements.
Spjald 577
Spurning
What is a fine for noncompliance?
Svar
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Spjald 578
Spurning
What does a public data classification authorize?
Svar
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Spjald 579
Spurning
What security benefit comes from standard infrastructure configurations?
Svar
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Spjald 580
Spurning
How does horizontal scaling increase capacity?
Svar
It adds more service instances and distributes work among them.
Spjald 581
Spurning
Why can added connectivity weaken segmentation?
Svar
Each allowed path can become a route for lateral movement or data escape.
Spjald 582
Spurning
What coding practice is central to preventing SQL injection?
Svar
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Spjald 583
Spurning
When is a compensating control appropriate for a vulnerability?
Svar
When timely removal or patching is infeasible and another control can reduce the risk.
Spjald 584
Spurning
How does agent-based web filtering enforce policy?
Svar
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Spjald 585
Spurning
How can regulation differ from an internal policy?
Svar
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Spjald 586
Spurning
What is a storage snapshot?
Svar
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Spjald 587
Spurning
What does password age measure?
Svar
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Spjald 588
Spurning
What does an ethical motive mean in vulnerability research?
Svar
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Spjald 589
Spurning
What can missing security logs indicate?
Svar
Logging failure, tampering, retention misconfiguration, or an inactive source.
Spjald 590
Spurning
Why disable unused ports and protocols?
Svar
They expose unnecessary communication paths and code that attackers can reach.
Spjald 591
Spurning
What does antivirus contribute to monitoring?
Svar
It scans files, memory, or behavior and reports suspected malicious code.
Spjald 592
Spurning
What is a honeypot?
Svar
A decoy system or service designed to attract and observe malicious activity.
Spjald 593
Spurning
What does file-level encryption protect?
Svar
Selected files independently of whether the rest of the disk or volume is encrypted.
Spjald 594
Spurning
How can SMS deliver a security attack?
Svar
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Spjald 595
Spurning
What happens during incident analysis?
Svar
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Spjald 596
Spurning
What is mean time between failures?
Svar
The average operating time between repairable failures.
Spjald 597
Spurning
What is active reconnaissance?
Svar
Probing or interacting with target systems to discover services and behavior.
Spjald 598
Spurning
What constraint should guide ICS or SCADA hardening?
Svar
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Spjald 599
Spurning
Which control function does restoring a clean system image provide?
Svar
Correction; it returns the system to a known-good state.
Spjald 600
Spurning
What does responsiveness mean in an architecture decision?
Svar
How quickly the system and its operators can adapt to demand, failure, or attack.
Spjald 601
Spurning
How does out-of-band access strengthen remote administration?
Svar
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Spjald 602
Spurning
What makes user behavior unexpected?
Svar
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Spjald 603
Spurning
What is a work order?
Svar
A document authorizing a defined unit of work under an existing agreement.
Spjald 604
Spurning
What can out-of-cycle logging indicate?
Svar
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Spjald 605
Spurning
Why update a standard operating procedure after a change?
Svar
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Spjald 606
Spurning
What coding practice limits cross-site scripting?
Svar
Context-appropriate output encoding, supported by safe templating and input handling.
Spjald 607
Spurning
What does a restricted data classification indicate?
Svar
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Spjald 608
Spurning
How does a bug bounty support responsible disclosure?
Svar
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Spjald 609
Spurning
What does web-filter content categorization provide?
Svar
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Spjald 610
Spurning
How do hard and soft authentication tokens differ?
Svar
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Spjald 611
Spurning
How can industry requirements affect security governance?
Svar
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Spjald 612
Spurning
How can noncompliance cause loss of a license?
Svar
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Spjald 613
Spurning
What does volume-level encryption protect?
Svar
All data within a selected logical storage volume.
Spjald 614
Spurning
How can impersonation exploit familiarity?
Svar
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Spjald 615
Spurning
How does RTO guide recovery design?
Svar
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Spjald 616
Spurning
What is a honeynet?
Svar
A network of decoy systems used to study or divert attackers.
Spjald 617
Spurning
What does backup replication provide?
Svar
Additional synchronized or copied recovery data in another system or location.
Spjald 618
Spurning
What lets automation scale securely?
Svar
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Spjald 619
Spurning
Why monitor a hardened computing resource continuously?
Svar
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Spjald 620
Spurning
Why keep a certificate of destruction?
Svar
It documents that a disposal provider handled specified media under the agreed process.
Spjald 621
Spurning
Why consider patch availability before selecting a platform?
Svar
Unsupported or difficult-to-update components accumulate known exposure.
Spjald 622
Spurning
Why should remote administration use an encrypted, authenticated protocol?
Svar
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Spjald 623
Spurning
How can revenge motivate an insider incident?
Svar
A disgruntled person may damage systems or disclose data to punish the organization.
Spjald 624
Spurning
What is a published or documented indicator of malicious activity?
Svar
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Spjald 625
Spurning
Why monitor a system more closely when a mitigation exception is accepted?
Svar
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Spjald 626
Spurning
What is an SNMP trap?
Svar
An unsolicited device notification sent to a management system when a configured event occurs.
Spjald 627
Spurning
How can an automated report support an investigation?
Svar
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Spjald 628
Spurning
What is a security key?
Svar
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Spjald 629
Spurning
What does database-level encryption protect?
Svar
A database or selected database structures through controls managed at the database layer.
Spjald 630
Spurning
How does brand impersonation exploit trust?
Svar
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Spjald 631
Spurning
What browser-side impact can a cross-site scripting vulnerability create?
Svar
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Spjald 632
Spurning
How can a system or process audit identify vulnerabilities?
Svar
It compares evidence with required configuration and procedure to reveal control gaps.
Spjald 633
Spurning
What security role can Group Policy provide?
Svar
Centralized Windows configuration of account, application, audit, and system security settings.
Spjald 634
Spurning
What should incident-response training prepare people to do?
Svar
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Spjald 635
Spurning
Why must governance track local or regional requirements?
Svar
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Spjald 636
Spurning
How can a dependency become a useful key risk indicator?
Svar
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Spjald 637
Spurning
What is a business partners agreement?
Svar
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Spjald 638
Spurning
What makes an audit regulatory?
Svar
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Spjald 639
Spurning
What is a honeyfile?
Svar
A decoy file whose access can reveal unauthorized activity.
Spjald 640
Spurning
Why does legal information require explicit protection?
Svar
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Spjald 641
Spurning
Which indicator can mass file renaming and encryption produce?
Svar
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Spjald 642
Spurning
What remains with an organization after transferring architecture risk?
Svar
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Spjald 643
Spurning
When does local console placement provide useful administrative access?
Svar
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Spjald 644
Spurning
What makes a harmful user action unintentional?
Svar
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Spjald 645
Spurning
How should an organization harden workstations?
Svar
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Spjald 646
Spurning
What is journaling in recovery?
Svar
Recording ordered changes so data can be replayed or restored to a consistent point.
Spjald 647
Spurning
What downtime must a change plan account for?
Svar
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Spjald 648
Spurning
Why must a privacy program map local or regional law to data flows?
Svar
The applicable duties can change with the location of the person, organization, processing, or stored data.
Spjald 649
Spurning
Why combine independent preventive controls at different layers?
Svar
A failure at one layer does not automatically let the same attack succeed at the next layer.
Spjald 650
Spurning
What is passwordless authentication?
Svar
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Spjald 651
Spurning
How can automation improve security reaction time?
Svar
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Spjald 652
Spurning
What does record-level encryption protect?
Svar
Individual records or fields, allowing finer protection than encrypting the entire database.
Spjald 653
Spurning
How can business email compromise misuse urgency?
Svar
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Spjald 654
Spurning
What does impact measure in risk analysis?
Svar
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Spjald 655
Spurning
What makes cyber activity part of warfare?
Svar
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Spjald 656
Spurning
Which indicator can a newly created privileged account produce outside the normal change window?
Svar
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Spjald 657
Spurning
How can configuration enforcement validate a deployed mitigation?
Svar
It compares the realized settings with the approved state and corrects or reports drift.
Spjald 658
Spurning
How does validating an alert improve alert tuning?
Svar
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Spjald 659
Spurning
What data-layer impact can a SQL injection vulnerability create?
Svar
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Spjald 660
Spurning
What environmental variables can change vulnerability priority?
Svar
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Spjald 661
Spurning
What security role does SELinux provide?
Svar
Mandatory access controls that confine processes according to centrally defined policy.
Spjald 662
Spurning
Why review governance documents periodically?
Svar
Business, technology, threats, and external obligations change.
Spjald 663
Spurning
Why evaluate power requirements for a system design?
Svar
Power capacity and redundancy constrain availability and recovery.
Spjald 664
Spurning
When is IPsec a better tunnel choice than TLS?
Svar
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Spjald 665
Spurning
What is a honeytoken?
Svar
A fake credential or data element that generates a high-confidence alert when used.
Spjald 666
Spurning
What should embedded-system hardening prioritize?
Svar
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Spjald 667
Spurning
Why must sanitization address data remanence?
Svar
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Spjald 668
Spurning
Why require rules of engagement for vendor testing?
Svar
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Spjald 669
Spurning
What does a private data classification indicate?
Svar
The information concerns an individual or limited internal audience and should not be exposed publicly.
Spjald 670
Spurning
What does a tabletop recovery exercise test?
Svar
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Spjald 671
Spurning
Why prevent password reuse?
Svar
One compromised password should not unlock other accounts or services.
Spjald 672
Spurning
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Svar
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Spjald 673
Spurning
What does transport encryption protect?
Svar
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Spjald 674
Spurning
How can a voice call become an attack vector?
Svar
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Spjald 675
Spurning
What should a digital-forensics report document?
Svar
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Spjald 676
Spurning
What tradeoff comes with an expansionary risk appetite?
Svar
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Spjald 677
Spurning
What does a known penetration-test environment provide?
Svar
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Spjald 678
Spurning
Why evaluate compute requirements before deployment?
Svar
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Spjald 679
Spurning
Why place sensors at network choke points?
Svar
They can observe traffic crossing important trust boundaries.
Spjald 680
Spurning
What should hybrid or remote-work security training emphasize?
Svar
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Spjald 681
Spurning
Why plan an application restart separately from a service restart?
Svar
The application may need its own state handling, user coordination, health checks, and rollback point.
Spjald 682
Spurning
What is a cryptographic vulnerability?
Svar
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Spjald 683
Spurning
Why report findings by asset owner?
Svar
Owners need clear accountability and a prioritized remediation queue.
Spjald 684
Spurning
What should guide selection of a secure protocol?
Svar
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Spjald 685
Spurning
How do centralized and decentralized governance structures differ?
Svar
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Spjald 686
Spurning
How does privacy-aware design limit data retention?
Svar
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Spjald 687
Spurning
What does a pressure security sensor detect?
Svar
Force or weight applied to a protected surface, such as a floor mat or fence line.
Spjald 688
Spurning
What automation costs should a security team plan for?
Svar
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Spjald 689
Spurning
What should RTOS hardening preserve while reducing attack surface?
Svar
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Spjald 690
Spurning
What is the goal of disruption-for-chaos activity?
Svar
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Spjald 691
Spurning
Which indicator can repeated password guessing produce?
Svar
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Spjald 692
Spurning
How does removing unnecessary software harden a system?
Svar
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Spjald 693
Spurning
What does NetFlow provide?
Svar
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Spjald 694
Spurning
How can a dashboard support an investigation?
Svar
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Spjald 695
Spurning
When should a password be expired?
Svar
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Spjald 696
Spurning
Why does cryptographic key length matter?
Svar
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Spjald 697
Spurning
How can an unsecure Bluetooth connection become an attack vector?
Svar
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Spjald 698
Spurning
What is a key risk indicator?
Svar
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Spjald 699
Spurning
What should vendor monitoring verify when a contract ends?
Svar
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Spjald 700
Spurning
What does a sensitive data classification indicate?
Svar
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Spjald 701
Spurning
What does software-defined networking separate?
Svar
The control plane that decides traffic behavior from the data plane that forwards traffic.
Spjald 702
Spurning
Where should a web application firewall be placed?
Svar
In the path of web requests before they reach the protected application.
Spjald 703
Spurning
What does a simulated recovery exercise test?
Svar
Participants perform realistic response actions in a controlled environment without disrupting production.
Spjald 704
Spurning
How can a team verify that a detective control is effective?
Svar
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Spjald 705
Spurning
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Svar
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Spjald 706
Spurning
What makes a vulnerability cloud-specific?
Svar
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Spjald 707
Spurning
How can insurance respond to vulnerability risk?
Svar
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Spjald 708
Spurning
How does reputation improve web filtering?
Svar
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Spjald 709
Spurning
What does an encryption policy establish?
Svar
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Spjald 710
Spurning
How does a microwave security sensor detect movement?
Svar
It emits microwave energy and detects changes in the reflected signal caused by motion.
Spjald 711
Spurning
What should IoT-device hardening change before deployment?
Svar
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Spjald 712
Spurning
Why track software licenses as assets?
Svar
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Spjald 713
Spurning
What does a password manager improve?
Svar
It can generate and store unique long passwords so users do not memorize or reuse them.
Spjald 714
Spurning
What makes a ledger open and public?
Svar
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Spjald 715
Spurning
What should a payment-change request trigger?
Svar
Independent verification through a known channel before any account or payment detail is changed.
Spjald 716
Spurning
What does preserving digital evidence require?
Svar
Protecting its integrity, context, access history, and availability from collection through final disposition.
Spjald 717
Spurning
What should a risk report tell decision-makers?
Svar
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Spjald 718
Spurning
What should an external assessment report provide?
Svar
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Spjald 719
Spurning
What is a centralized design's main resilience risk?
Svar
A central dependency can become a bottleneck or single point of failure.
Spjald 720
Spurning
What does mutual TLS add to a TLS-protected service connection?
Svar
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Spjald 721
Spurning
What should recurring security-awareness reporting show?
Svar
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Spjald 722
Spurning
Why do legacy applications require extra change planning?
Svar
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Spjald 723
Spurning
How do a data controller and a data processor differ?
Svar
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Spjald 724
Spurning
How can orchestration become a single point of failure?
Svar
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Spjald 725
Spurning
Why should defenses account for a threat actor's sophistication and capability?
Svar
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Spjald 726
Spurning
How does an injection attack make an application execute unintended instructions?
Svar
It sends crafted input that an interpreter treats as code or commands instead of data.
Spjald 727
Spurning
What does a host-based firewall control?
Svar
Inbound and outbound network traffic for one endpoint according to local rules.
Spjald 728
Spurning
Why revise alerting after an incident?
Svar
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Spjald 729
Spurning
Why include security duties in procurement criteria?
Svar
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Spjald 730
Spurning
What does a critical data classification indicate?
Svar
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Spjald 731
Spurning
What infrastructure capacity must support failover?
Svar
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Spjald 732
Spurning
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Svar
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Spjald 733
Spurning
How does a remediation exemption differ from an exception?
Svar
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Spjald 734
Spurning
Why should automated EDR or XDR blocking have an exception and rollback path?
Svar
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Spjald 735
Spurning
What does a security playbook provide?
Svar
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Spjald 736
Spurning
How does an ultrasonic security sensor detect movement?
Svar
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Spjald 737
Spurning
What should a managed mobile device require for Bluetooth connections?
Svar
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Spjald 738
Spurning
How do password complexity rules differ from password length?
Svar
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Spjald 739
Spurning
What makes a certificate third-party trusted?
Svar
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Spjald 740
Spurning
Why is an out-of-band check effective against impersonation?
Svar
It verifies the request through a separate, previously trusted communication path.
Spjald 741
Spurning
What does a risk exception authorize?
Svar
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Spjald 742
Spurning
What security challenge grows in a decentralized design?
Svar
Consistent policy, inventory, monitoring, and patching become harder.
Spjald 743
Spurning
How should controls be selected for an unused network path?
Svar
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Spjald 744
Spurning
How can a buffer-overflow attack affect an application?
Svar
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 spjöld
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo opnast svo þú getir byrjað að læra.