CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
Tentang dek ini
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Kad dalam dek ini
Kad 1
Soalan
What does an information security policy establish?
Jawapan
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kad 2
Soalan
What is phishing?
Jawapan
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kad 3
Soalan
What does a public-key certificate bind to an identity?
Jawapan
A public key, together with identifying information and the issuer's signature.
Kad 4
Soalan
What is data at rest?
Jawapan
Data stored on media such as disks, databases, backups, or mobile devices.
Kad 5
Soalan
How does policy-driven access control decide a zero-trust access request?
Jawapan
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kad 6
Soalan
What does establishing a secure baseline produce?
Jawapan
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kad 7
Soalan
What is hashing used to verify?
Jawapan
Whether data has changed by comparing fixed-length digest values.
Kad 8
Soalan
What is impersonation in social engineering?
Jawapan
Pretending to be a trusted person or organization to obtain access, data, or action.
Kad 9
Soalan
What is virtualization?
Jawapan
Abstracting physical compute so multiple isolated guest systems can share a host.
Kad 10
Soalan
What is chain of custody?
Jawapan
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kad 11
Soalan
What is quantitative risk analysis?
Jawapan
Estimating risk with numerical values such as money, frequency, or probability.
Kad 12
Soalan
What is a phishing awareness campaign?
Jawapan
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kad 13
Soalan
What is high availability?
Jawapan
Designing a service to remain accessible despite expected component failures.
Kad 14
Soalan
What is a network security zone?
Jawapan
A group of systems with similar trust, function, or control requirements.
Kad 15
Soalan
What is risk transfer?
Jawapan
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kad 16
Soalan
What is media sanitization?
Jawapan
Making stored data infeasible to recover for the intended level of protection.
Kad 17
Soalan
What does CVSS provide?
Jawapan
A standardized way to describe a vulnerability's technical severity characteristics.
Kad 18
Soalan
What does security alerting do?
Jawapan
It turns matched events or behavior into a notification that the right responder can review.
Kad 19
Soalan
What does a firewall rule enforce?
Jawapan
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kad 20
Soalan
What is deprovisioning?
Jawapan
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kad 21
Soalan
How does inline placement differ from a tap or monitor port?
Jawapan
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kad 22
Soalan
What is asymmetric encryption?
Jawapan
Encryption that uses a mathematically related public and private key pair.
Kad 23
Soalan
What does SPF authorize?
Jawapan
Which mail servers may send mail for a domain in the SMTP envelope.
Kad 24
Soalan
What is a possession factor?
Jawapan
Something the claimant has, such as a cryptographic authenticator.
Kad 25
Soalan
What does ordinary TLS usually protect and authenticate?
Jawapan
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kad 26
Soalan
What is single loss expectancy?
Jawapan
The estimated loss from one occurrence of a risk event.
Kad 27
Soalan
What does a certificate authority do?
Jawapan
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kad 28
Soalan
What is a detective control meant to do?
Jawapan
Identify that an unwanted event has happened or is happening.
Kad 29
Soalan
What is the security purpose of change-control approval?
Jawapan
Ensure authorized reviewers assess risk before the production change occurs.
Kad 30
Soalan
What is shadow IT?
Jawapan
Technology used for organizational work without required approval or oversight.
Kad 31
Soalan
What is a buffer overflow vulnerability?
Jawapan
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kad 32
Soalan
What is ransomware?
Jawapan
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kad 33
Soalan
How does network segmentation limit an incident?
Jawapan
It restricts communication paths and reduces lateral movement between zones.
Kad 34
Soalan
How do load balancing and clustering support availability differently?
Jawapan
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kad 35
Soalan
What is vendor due diligence?
Jawapan
Evaluating a provider's security, capability, stability, and fit before commitment.
Kad 36
Soalan
Who is a data subject?
Jawapan
The person whose personal data is collected or processed.
Kad 37
Soalan
What is attestation?
Jawapan
A formal assertion or report about a subject matter, often supported by an independent examination.
Kad 38
Soalan
What is a replay attack?
Jawapan
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kad 39
Soalan
What does a wireless site survey establish?
Jawapan
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kad 40
Soalan
What is the time-of-check stage of a race-condition vulnerability?
Jawapan
The application verifies a condition or resource state before acting on it.
Kad 41
Soalan
What is a penetration test?
Jawapan
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kad 42
Soalan
What is a cold recovery site?
Jawapan
A facility with basic space and utilities but little preinstalled technology or current data.
Kad 43
Soalan
What is data in transit?
Jawapan
Data moving between systems or across a network.
Kad 44
Soalan
What is a vendor security questionnaire?
Jawapan
A structured request for information about a provider's controls and practices.
Kad 45
Soalan
How does an internal actor's starting position differ from an external actor's?
Jawapan
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kad 46
Soalan
What can unexpected account lockouts indicate?
Jawapan
Password guessing, credential stuffing, user error, or a broken client.
Kad 47
Soalan
How do permissions enforce access control?
Jawapan
They specify which actions a subject may perform on a particular resource.
Kad 48
Soalan
What is log aggregation?
Jawapan
Central collection of logs from multiple sources for search, correlation, and retention.
Kad 49
Soalan
Why plan a service restart as part of a change?
Jawapan
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kad 50
Soalan
What is infrastructure as code?
Jawapan
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kad 51
Soalan
What should security-awareness program development start with?
Jawapan
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kad 52
Soalan
What is a voice-based social-engineering attack called?
Jawapan
Vishing.
Kad 53
Soalan
What happens during incident-response preparation?
Jawapan
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kad 54
Soalan
What does an offensive penetration-testing team do?
Jawapan
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kad 55
Soalan
What is federation?
Jawapan
One security domain relies on identity assertions from another trusted domain.
Kad 56
Soalan
What is asset classification?
Jawapan
Grouping an asset by sensitivity, criticality, or required handling.
Kad 57
Soalan
What is cross-site scripting?
Jawapan
Injection of script-capable content that a browser executes in another site's security context.
Kad 58
Soalan
What can IDS or IPS trends reveal?
Jawapan
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kad 59
Soalan
What can unexpected resource inaccessibility indicate?
Jawapan
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kad 60
Soalan
What is a corrective control meant to do?
Jawapan
Limit damage and restore a secure state after an event.
Kad 61
Soalan
How do containers differ from virtual machines?
Jawapan
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kad 62
Soalan
How does an active security device differ from a passive one?
Jawapan
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kad 63
Soalan
Why is unsupported software a persistent attack surface?
Jawapan
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kad 64
Soalan
What is annualized rate of occurrence?
Jawapan
The estimated number of times a risk event occurs per year.
Kad 65
Soalan
What is an inherence factor?
Jawapan
A biometric characteristic of the claimant.
Kad 66
Soalan
What do a threat actor's sophistication and capability describe?
Jawapan
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kad 67
Soalan
What is a SIEM?
Jawapan
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kad 68
Soalan
What is sideloading?
Jawapan
Installing software from outside the platform's approved distribution path.
Kad 69
Soalan
What does an IDS or IPS signature match?
Jawapan
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kad 70
Soalan
Why are embedded systems often difficult to patch?
Jawapan
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kad 71
Soalan
What is a virtual private network?
Jawapan
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kad 72
Soalan
What should an initial security-awareness report establish?
Jawapan
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kad 73
Soalan
What is symmetric encryption?
Jawapan
Encryption that uses the same secret key to encrypt and decrypt data.
Kad 74
Soalan
What happens during incident detection?
Jawapan
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kad 75
Soalan
What is recovery time objective?
Jawapan
The target maximum time to restore a function after disruption.
Kad 76
Soalan
Why prioritize password length?
Jawapan
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kad 77
Soalan
What must sanitization accomplish before an asset leaves organizational control?
Jawapan
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kad 78
Soalan
What is a real-time operating system designed to provide?
Jawapan
Predictable response timing for tasks with strict deadlines.
Kad 79
Soalan
What does fail-open behavior do when a control fails?
Jawapan
It permits traffic or access to preserve availability.
Kad 80
Soalan
What is jailbreaking or rooting a mobile device?
Jawapan
Removing platform restrictions to gain privileged control over the operating system.
Kad 81
Soalan
What does network access control enforce?
Jawapan
Identity, device posture, and access policy at network connection time and during a session.
Kad 82
Soalan
What does data loss prevention do?
Jawapan
Detects and may block sensitive data use or transfer that violates policy.
Kad 83
Soalan
What security property does a blockchain provide?
Jawapan
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kad 84
Soalan
What is recovery point objective?
Jawapan
The target maximum acceptable data loss measured backward in time.
Kad 85
Soalan
How do ICS and SCADA relate?
Jawapan
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kad 86
Soalan
What does fail-closed behavior do when a control fails?
Jawapan
It denies traffic or access to preserve security.
Kad 87
Soalan
Which keys create and verify a typical digital signature?
Jawapan
The signer creates it with a private key, and others verify it with the corresponding public key.
Kad 88
Soalan
What is SQL injection?
Jawapan
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kad 89
Soalan
What does DKIM verify?
Jawapan
That selected message content was signed by a domain and was not altered after signing.
Kad 90
Soalan
What is post-incident activity?
Jawapan
Learning from the event and improving controls, plans, and recovery based on evidence.
Kad 91
Soalan
What characterizes an expansionary risk appetite?
Jawapan
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kad 92
Soalan
How do centralized and decentralized architectures differ?
Jawapan
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kad 93
Soalan
What does a certificate revocation list publish?
Jawapan
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kad 94
Soalan
What is a legal hold?
Jawapan
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kad 95
Soalan
What is exposure factor in quantitative risk analysis?
Jawapan
The estimated percentage of an asset's value lost in one event.
Kad 96
Soalan
What is decentralized architecture?
Jawapan
Control or service responsibility is distributed across multiple independent components or locations.
Kad 97
Soalan
What is tokenization?
Jawapan
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kad 98
Soalan
How can automation act as a workforce multiplier?
Jawapan
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kad 99
Soalan
What can endpoint process logs reveal?
Jawapan
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kad 100
Soalan
What does the CIA triad protect?
Jawapan
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kad 101
Soalan
How does data masking protect information?
Jawapan
It hides selected values or characters while preserving a usable representation.
Kad 102
Soalan
How can a national requirement affect security governance?
Jawapan
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kad 103
Soalan
What do integrations and APIs provide to security orchestration?
Jawapan
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kad 104
Soalan
What makes a compliance report external?
Jawapan
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kad 105
Soalan
What does a cryptographic algorithm define?
Jawapan
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kad 106
Soalan
Why compare systems with a secure baseline regularly?
Jawapan
To detect drift, unauthorized changes, and missing hardening.
Kad 107
Soalan
What does integrity protect?
Jawapan
The accuracy and completeness of data and systems against unauthorized change.
Kad 108
Soalan
What does vulnerability classification organize?
Jawapan
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kad 109
Soalan
What does a password standard define?
Jawapan
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kad 110
Soalan
What technology capacity must a recovery design plan for?
Jawapan
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kad 111
Soalan
What does a confidential data classification indicate?
Jawapan
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kad 112
Soalan
What makes a vendor assessment independent?
Jawapan
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kad 113
Soalan
What lets a worm spread without attaching itself to another file?
Jawapan
It is a standalone program that replicates across reachable systems or services.
Kad 114
Soalan
What is microsegmentation?
Jawapan
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kad 115
Soalan
What can application logs reveal?
Jawapan
Transactions, errors, user actions, and application-specific security events.
Kad 116
Soalan
What does deploying a secure baseline require?
Jawapan
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kad 117
Soalan
How can resource-provisioning automation improve security?
Jawapan
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kad 118
Soalan
What does availability protect?
Jawapan
Reliable, timely access to systems and data when authorized users need them.
Kad 119
Soalan
Why must a change request describe business impact?
Jawapan
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kad 120
Soalan
What does an authenticated vulnerability scan add?
Jawapan
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kad 121
Soalan
What does a change-management procedure specify?
Jawapan
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kad 122
Soalan
What is a sanction for noncompliance?
Jawapan
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kad 123
Soalan
How can email deliver a security attack?
Jawapan
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kad 124
Soalan
What is an internal compliance audit?
Jawapan
An organization-led examination of whether selected operations and controls meet defined requirements.
Kad 125
Soalan
What is a Trojan?
Jawapan
Malware disguised as legitimate or desirable software.
Kad 126
Soalan
What is clustering?
Jawapan
Multiple systems work together to provide a service and tolerate member failure.
Kad 127
Soalan
What makes data regulated?
Jawapan
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kad 128
Soalan
What does a wireless heat map show?
Jawapan
Measured or modeled signal strength and coverage across a physical area.
Kad 129
Soalan
How should vendor criticality affect due diligence?
Jawapan
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kad 130
Soalan
How can a digital signature support non-repudiation?
Jawapan
It provides evidence that the holder of a private key signed specific data.
Kad 131
Soalan
What should vulnerability prioritization consider beyond severity?
Jawapan
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kad 132
Soalan
What is a security guideline?
Jawapan
Recommended practice that allows judgment unless adopted as a requirement.
Kad 133
Soalan
What usually distinguishes a nation-state threat actor?
Jawapan
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kad 134
Soalan
What is spyware?
Jawapan
Software that secretly collects information about a user or system.
Kad 135
Soalan
Why maintain an allow list for applications?
Jawapan
Only explicitly approved software is permitted to execute.
Kad 136
Soalan
How can an image become an attack vector?
Jawapan
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kad 137
Soalan
What makes a security control technical?
Jawapan
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kad 138
Soalan
What is identity proofing?
Jawapan
Establishing that a person is who they claim to be before issuing an account or credential.
Kad 139
Soalan
What is an automated security guardrail?
Jawapan
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kad 140
Soalan
Why assign an owner to a planned change?
Jawapan
To make one party accountable for coordination, execution, and follow-through.
Kad 141
Soalan
How can national privacy law affect data handling?
Jawapan
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kad 142
Soalan
What is continuity of operations?
Jawapan
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kad 143
Soalan
What security tradeoff comes with BYOD?
Jawapan
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kad 144
Soalan
How should policies and handbooks support security training?
Jawapan
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kad 145
Soalan
What is a keylogger?
Jawapan
A tool that records keystrokes to capture data such as credentials.
Kad 146
Soalan
What makes information a trade secret?
Jawapan
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kad 147
Soalan
What does authentication establish?
Jawapan
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kad 148
Soalan
What risk comes from an untrusted file attachment?
Jawapan
Opening or parsing it can execute malicious code or expose data.
Kad 149
Soalan
How does risk tolerance affect vulnerability remediation?
Jawapan
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kad 150
Soalan
How can a global requirement affect security governance?
Jawapan
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kad 151
Soalan
Why should questionnaire answers be supported by evidence?
Jawapan
Self-assertions alone may not prove that controls are designed or operating effectively.
Kad 152
Soalan
What is an independent third-party audit?
Jawapan
An external party with suitable independence examines evidence against defined criteria.
Kad 153
Soalan
What do account provisioning and deprovisioning do?
Jawapan
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kad 154
Soalan
What is an unskilled attacker commonly called?
Jawapan
A script kiddie: someone who relies on tools or instructions created by others.
Kad 155
Soalan
What is a rootkit?
Jawapan
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kad 156
Soalan
What does an access control list enforce?
Jawapan
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kad 157
Soalan
What should system security monitoring observe?
Jawapan
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kad 158
Soalan
What can operating-system security logs reveal?
Jawapan
Authentication, privilege use, policy changes, services, and other host security events.
Kad 159
Soalan
Why isolate operational technology from general business networks?
Jawapan
To limit attack paths into safety- and availability-critical processes.
Kad 160
Soalan
What is the COPE mobile deployment model?
Jawapan
The organization owns the device but permits defined personal use while retaining management control.
Kad 161
Soalan
What security work belongs in asset acquisition and procurement?
Jawapan
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kad 162
Soalan
How can user-provisioning automation improve security?
Jawapan
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kad 163
Soalan
What people capacity must a continuity plan account for?
Jawapan
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kad 164
Soalan
What do authorization models define?
Jawapan
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kad 165
Soalan
Why are removable devices an attack vector?
Jawapan
They can introduce malware or remove data while bypassing network controls.
Kad 166
Soalan
What should predeployment change-test results show?
Jawapan
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kad 167
Soalan
What is the time-of-use stage of a race-condition vulnerability?
Jawapan
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kad 168
Soalan
What is data in use?
Jawapan
Data actively processed in memory or by an application.
Kad 169
Soalan
What does open-source vulnerability intelligence contribute?
Jawapan
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kad 170
Soalan
What can file-integrity monitoring detect?
Jawapan
Unexpected changes to protected files, directories, or configuration.
Kad 171
Soalan
Why should deprovisioning be prompt?
Jawapan
Former users or roles should not retain usable access.
Kad 172
Soalan
What is an acceptable use policy?
Jawapan
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kad 173
Soalan
What makes a compliance report internal?
Jawapan
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kad 174
Soalan
What is a logic bomb?
Jawapan
Malicious code that activates when a specified condition or time is reached.
Kad 175
Soalan
What does a right-to-audit clause provide?
Jawapan
Contractual authority to inspect or obtain evidence about agreed controls.
Kad 176
Soalan
Where should a forward proxy sit in an enterprise traffic path?
Jawapan
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kad 177
Soalan
Which cues should make a message look suspicious?
Jawapan
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kad 178
Soalan
What makes a security control managerial?
Jawapan
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kad 179
Soalan
What is the CYOD mobile deployment model?
Jawapan
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kad 180
Soalan
How does client-based vulnerable software differ from an agentless exposure?
Jawapan
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kad 181
Soalan
What makes a risk assessment recurring?
Jawapan
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kad 182
Soalan
What does a defensive penetration-testing team practice?
Jawapan
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kad 183
Soalan
In a zero-trust data plane, what can the subject or system represent?
Jawapan
The user, device, workload, or service requesting access to a protected resource.
Kad 184
Soalan
What primarily motivates a hacktivist?
Jawapan
A political, social, or ideological cause.
Kad 185
Soalan
What is bloatware?
Jawapan
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kad 186
Soalan
Why keep endpoint-protection signatures and engines current?
Jawapan
They need current detection logic to recognize newly identified malware and exploit behavior.
Kad 187
Soalan
What should application security monitoring observe?
Jawapan
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kad 188
Soalan
What is role-based access control?
Jawapan
Permissions are assigned to roles, and identities receive access through their roles.
Kad 189
Soalan
What is geographic dispersal?
Jawapan
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kad 190
Soalan
What is a malicious update?
Jawapan
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kad 191
Soalan
What does static application analysis inspect?
Jawapan
Source code, bytecode, or compiled code without executing the application.
Kad 192
Soalan
What does a firewall access list define?
Jawapan
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kad 193
Soalan
What does a disaster recovery policy establish?
Jawapan
Management expectations for restoring technology and data after a disruptive event.
Kad 194
Soalan
How does logical segmentation separate workloads that share physical infrastructure?
Jawapan
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kad 195
Soalan
How should IDS and IPS placement differ?
Jawapan
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kad 196
Soalan
What should automated ticket creation capture?
Jawapan
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kad 197
Soalan
What makes information intellectual property?
Jawapan
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kad 198
Soalan
What is a backout plan?
Jawapan
Predefined steps for safely reversing a failed or harmful change.
Kad 199
Soalan
Why is an unsecure wireless network an attack vector?
Jawapan
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kad 200
Soalan
What is physical brute force?
Jawapan
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kad 201
Soalan
What is application sandboxing?
Jawapan
Running code in a constrained environment with limited access to the host and data.
Kad 202
Soalan
Why assign an asset owner?
Jawapan
One accountable party must decide its use, protection, and lifecycle.
Kad 203
Soalan
What happens during risk identification?
Jawapan
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kad 204
Soalan
What should an SLA state about breach notification?
Jawapan
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kad 205
Soalan
How do due diligence and due care differ in compliance?
Jawapan
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kad 206
Soalan
What is attribute-based access control?
Jawapan
Policy evaluates attributes of the subject, resource, action, and environment.
Kad 207
Soalan
What does a zero-trust policy engine do?
Jawapan
It evaluates policy and signals to decide whether access should be allowed.
Kad 208
Soalan
How does a cloud responsibility matrix allocate security duties?
Jawapan
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kad 209
Soalan
Where should a load balancer sit in a service path?
Jawapan
In front of service instances so it can route requests to healthy backends.
Kad 210
Soalan
What should the security team do with a reported suspicious message?
Jawapan
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kad 211
Soalan
What makes an operating-system vulnerability high impact?
Jawapan
It can affect every application and security control that relies on the compromised OS.
Kad 212
Soalan
What does dynamic application analysis inspect?
Jawapan
The behavior and externally visible weaknesses of a running application.
Kad 213
Soalan
How can false-positive trends affect IDS or IPS tuning?
Jawapan
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kad 214
Soalan
What does a business continuity policy establish?
Jawapan
Management expectations for sustaining and restoring critical business functions.
Kad 215
Soalan
What is a hot recovery site?
Jawapan
A ready, synchronized environment intended to take over quickly.
Kad 216
Soalan
What makes an insider threat distinct?
Jawapan
The actor has legitimate access or organizational knowledge that can be misused.
Kad 217
Soalan
What is RFID cloning?
Jawapan
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kad 218
Soalan
Why apply vendor security updates promptly?
Jawapan
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kad 219
Soalan
What should infrastructure security monitoring observe?
Jawapan
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kad 220
Soalan
What can firewall logs reveal?
Jawapan
Allowed or denied network connections across controlled boundaries.
Kad 221
Soalan
Why minimize open service ports?
Jawapan
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kad 222
Soalan
What is threat hunting?
Jawapan
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kad 223
Soalan
What triggers an ad hoc risk assessment?
Jawapan
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kad 224
Soalan
What makes an assessment external?
Jawapan
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kad 225
Soalan
What is data sovereignty?
Jawapan
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kad 226
Soalan
What security boundary does a cellular connection create for a mobile device?
Jawapan
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kad 227
Soalan
What makes a security control operational?
Jawapan
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kad 228
Soalan
What is discretionary access control?
Jawapan
A resource owner can decide who receives access, within system policy.
Kad 229
Soalan
How can careful automation support employee retention?
Jawapan
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kad 230
Soalan
Why does ease of deployment matter in an architecture decision?
Jawapan
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kad 231
Soalan
What tradeoff comes with placing an NGFW inline?
Jawapan
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kad 232
Soalan
What does a zero-trust policy administrator do?
Jawapan
It carries out the policy engine's decision, such as creating or ending a session.
Kad 233
Soalan
What should a master service agreement define for data return and deletion?
Jawapan
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kad 234
Soalan
What is an environmental physical attack?
Jawapan
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kad 235
Soalan
When should a maintenance window be chosen?
Jawapan
When disruption and rollback can be managed with the least business impact.
Kad 236
Soalan
What is memory injection?
Jawapan
Placing malicious code or data into another process's memory so it executes in that process's context.
Kad 237
Soalan
What does software composition analysis find?
Jawapan
Known risks and license information in third-party dependencies.
Kad 238
Soalan
What is DNS filtering?
Jawapan
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kad 239
Soalan
What should an incident response policy establish?
Jawapan
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kad 240
Soalan
How can noncompliance cause reputational damage?
Jawapan
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kad 241
Soalan
What does full-disk encryption protect?
Jawapan
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kad 242
Soalan
Why are default credentials dangerous?
Jawapan
They are widely known or easily discovered and often remain unchanged.
Kad 243
Soalan
What makes a risk assessment one-time?
Jawapan
It evaluates a defined decision or scope once without an established repeating cadence.
Kad 244
Soalan
What is a warm recovery site?
Jawapan
A partially equipped environment that needs some data restoration or configuration before use.
Kad 245
Soalan
What does application input validation do?
Jawapan
It checks that input matches the expected type, length, range, and format before use.
Kad 246
Soalan
What should an asset inventory record besides a device name?
Jawapan
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kad 247
Soalan
What is mandatory access control?
Jawapan
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kad 248
Soalan
What security benefit does infrastructure as code provide?
Jawapan
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kad 249
Soalan
When should a public service control fail closed?
Jawapan
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kad 250
Soalan
What should users do with a suspicious message?
Jawapan
Report it through the approved channel without interacting with its links or attachments.
Kad 251
Soalan
What usually motivates organized cybercrime?
Jawapan
Financial gain through scalable or repeatable criminal activity.
Kad 252
Soalan
How can malicious code support a network attack?
Jawapan
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kad 253
Soalan
When is virtual patching useful?
Jawapan
When a network or application control can block exploit traffic before the underlying system can be patched.
Kad 254
Soalan
What does security-monitoring reporting provide?
Jawapan
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kad 255
Soalan
What does data geolocation identify?
Jawapan
The physical or legal location where data is stored, processed, or transmitted.
Kad 256
Soalan
What does a zero-trust policy enforcement point do?
Jawapan
It enables, monitors, and terminates the connection between a subject and a resource.
Kad 257
Soalan
What is cryptographic key exchange?
Jawapan
A method for parties to establish shared key material over an untrusted channel.
Kad 258
Soalan
How can a vendor become a supply-chain attack vector?
Jawapan
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kad 259
Soalan
Why can legacy hardware remain vulnerable?
Jawapan
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kad 260
Soalan
What can proprietary vulnerability intelligence add beyond open sources?
Jawapan
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kad 261
Soalan
How does a centralized proxy apply web filtering?
Jawapan
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kad 262
Soalan
How can continuous integration and testing improve security automation?
Jawapan
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kad 263
Soalan
What is containment?
Jawapan
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kad 264
Soalan
What is a software development lifecycle policy meant to ensure?
Jawapan
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kad 265
Soalan
What makes risk assessment continuous?
Jawapan
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kad 266
Soalan
What is a memorandum of agreement?
Jawapan
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kad 267
Soalan
What makes a penetration test integrated?
Jawapan
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kad 268
Soalan
How does a DNS amplification attack magnify traffic?
Jawapan
It sends small spoofed queries that trigger larger replies toward the victim.
Kad 269
Soalan
Why does ease of recovery matter in an architecture decision?
Jawapan
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kad 270
Soalan
What does 802.1X control before a device receives normal network access?
Jawapan
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kad 271
Soalan
What is rule-based access control?
Jawapan
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kad 272
Soalan
What is mobile device management?
Jawapan
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kad 273
Soalan
What tradeoff comes with a cold recovery site?
Jawapan
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kad 274
Soalan
Why identify stakeholders before approving a security-sensitive change?
Jawapan
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kad 275
Soalan
How do attestation and acknowledgement differ?
Jawapan
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kad 276
Soalan
What does zero-trust adaptive identity mean?
Jawapan
Access decisions adjust to current risk signals rather than relying only on a static login.
Kad 277
Soalan
What makes a security control physical?
Jawapan
It protects facilities or equipment through a tangible barrier or mechanism.
Kad 278
Soalan
What is geo-fencing for data?
Jawapan
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kad 279
Soalan
What does a Trusted Platform Module protect?
Jawapan
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kad 280
Soalan
Why can a managed service provider amplify risk?
Jawapan
Its privileged access and shared tooling can provide a path into many customers.
Kad 281
Soalan
What does probability express in risk analysis?
Jawapan
A quantified chance that a defined event will occur within stated conditions or time.
Kad 282
Soalan
Why can shadow IT create a threat?
Jawapan
It bypasses security review, inventory, monitoring, and supported configuration.
Kad 283
Soalan
What is on-path interception?
Jawapan
An attacker positions between communicating parties to observe or alter traffic.
Kad 284
Soalan
Why include encryption in a system-hardening baseline?
Jawapan
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kad 285
Soalan
Why tune security alerts?
Jawapan
To keep useful detections while reducing noise that wastes analyst attention.
Kad 286
Soalan
What can IPS or IDS logs contribute to an investigation?
Jawapan
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kad 287
Soalan
What is VM escape?
Jawapan
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kad 288
Soalan
How can segmentation reduce vulnerability exposure before a patch is available?
Jawapan
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kad 289
Soalan
Why should firewall policy name the required ports and protocols explicitly?
Jawapan
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kad 290
Soalan
What is a change management policy meant to control?
Jawapan
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kad 291
Soalan
What is a hybrid-cloud architecture?
Jawapan
An environment that integrates private or on-premises resources with public cloud services.
Kad 292
Soalan
How do AH and ESP differ in the security services they can provide?
Jawapan
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kad 293
Soalan
What makes user behavior risky?
Jawapan
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kad 294
Soalan
What is least privilege?
Jawapan
Granting only the access needed for the required task and no more.
Kad 295
Soalan
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Jawapan
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kad 296
Soalan
Why discover unmanaged assets?
Jawapan
Unknown systems cannot be patched, monitored, or governed reliably.
Kad 297
Soalan
What is a service-level agreement?
Jawapan
Measurable service commitments and remedies, such as availability or response targets.
Kad 298
Soalan
What should govern automated security escalation?
Jawapan
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kad 299
Soalan
What is platform diversity as a resilience strategy?
Jawapan
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kad 300
Soalan
How can replayed session material affect an application?
Jawapan
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kad 301
Soalan
What is an implicit trust zone in zero trust?
Jawapan
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kad 302
Soalan
What does salting a password hash accomplish?
Jawapan
It makes identical passwords hash differently and defeats precomputed hash tables.
Kad 303
Soalan
What is spear phishing?
Jawapan
Phishing tailored to a specific person, role, or organization.
Kad 304
Soalan
What is eradication?
Jawapan
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kad 305
Soalan
Who is a risk owner?
Jawapan
The person accountable for deciding and monitoring how a specific risk is handled.
Kad 306
Soalan
What does a partially known penetration-test environment provide?
Jawapan
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kad 307
Soalan
What is a microservices architecture?
Jawapan
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kad 308
Soalan
What is a jump server?
Jawapan
A hardened intermediary used to reach systems in a restricted management network.
Kad 309
Soalan
What can happen when a configuration change is made without dependency analysis?
Jawapan
A downstream service can fail even when the changed component works.
Kad 310
Soalan
What is resource reuse exposure?
Jawapan
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kad 311
Soalan
Why does financial information require explicit protection?
Jawapan
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kad 312
Soalan
What does CVE provide?
Jawapan
A common identifier for a publicly disclosed vulnerability.
Kad 313
Soalan
Where can DLP controls operate?
Jawapan
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kad 314
Soalan
What does privileged password vaulting protect?
Jawapan
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kad 315
Soalan
What does an access-control standard define?
Jawapan
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kad 316
Soalan
How can automation support compliance monitoring?
Jawapan
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kad 317
Soalan
What does static code analysis examine?
Jawapan
Source or compiled code for weakness patterns without executing the application.
Kad 318
Soalan
What actor attribute describes funding, time, and personnel?
Jawapan
Resources.
Kad 319
Soalan
What is DNS poisoning?
Jawapan
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kad 320
Soalan
Why change default credentials during hardening?
Jawapan
Default secrets are predictable and commonly targeted.
Kad 321
Soalan
What does quarantine do after a security alert?
Jawapan
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kad 322
Soalan
What does key stretching do for stored passwords?
Jawapan
It deliberately makes each password guess more computationally expensive.
Kad 323
Soalan
What is smishing?
Jawapan
Phishing delivered through SMS or another text-messaging service.
Kad 324
Soalan
What is qualitative risk analysis?
Jawapan
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kad 325
Soalan
What is a master service agreement?
Jawapan
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kad 326
Soalan
What is threat scope reduction?
Jawapan
Narrowing the systems, privileges, or paths an attacker can reach.
Kad 327
Soalan
Why use a third-party cloud service instead of building locally?
Jawapan
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kad 328
Soalan
What should determine security-device placement?
Jawapan
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kad 329
Soalan
What does situational awareness mean for a user?
Jawapan
Notice the people, devices, requests, location, and context around a task before acting.
Kad 330
Soalan
What does a failover test validate?
Jawapan
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kad 331
Soalan
What is a preventive control meant to do?
Jawapan
Stop an unwanted event before it succeeds.
Kad 332
Soalan
What is just-in-time privileged access?
Jawapan
Elevated access is granted only when needed and expires after a short approved period.
Kad 333
Soalan
What safeguard should security-group automation enforce?
Jawapan
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kad 334
Soalan
How does a reflected DDoS attack hide and multiply sources?
Jawapan
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kad 335
Soalan
What is a security misconfiguration?
Jawapan
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kad 336
Soalan
Why can the same vulnerability have different organizational impact?
Jawapan
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kad 337
Soalan
What does URL scanning evaluate before a user opens a web destination?
Jawapan
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kad 338
Soalan
What is the board's security governance role?
Jawapan
Provide oversight, set risk direction, and hold executives accountable.
Kad 339
Soalan
What does code signing establish?
Jawapan
That code came from the holder of the signing key and has not changed since signing.
Kad 340
Soalan
How should an asset's classification affect security operations?
Jawapan
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kad 341
Soalan
How does encryption protect data?
Jawapan
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kad 342
Soalan
What is a secure enclave?
Jawapan
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kad 343
Soalan
What is business email compromise?
Jawapan
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kad 344
Soalan
What is recovery in incident response?
Jawapan
Restoring services safely, monitoring them, and returning to normal operations.
Kad 345
Soalan
How is single loss expectancy commonly estimated?
Jawapan
Asset value multiplied by the exposure factor.
Kad 346
Soalan
What does an unknown penetration-test environment provide?
Jawapan
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kad 347
Soalan
What security boundary does a hypervisor provide?
Jawapan
It isolates virtual machines while controlling their access to shared hardware.
Kad 348
Soalan
Why does a TLS tunnel not protect a compromised endpoint?
Jawapan
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kad 349
Soalan
Why update diagrams after an infrastructure change?
Jawapan
Operations and incident responders need the documentation to match the deployed environment.
Kad 350
Soalan
What does privacy ownership assign?
Jawapan
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kad 351
Soalan
What does a security control gap analysis compare?
Jawapan
The controls required for the target state with the controls currently in place.
Kad 352
Soalan
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Jawapan
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kad 353
Soalan
What is application privilege escalation?
Jawapan
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kad 354
Soalan
What risk remains when unnecessary software is left installed?
Jawapan
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kad 355
Soalan
What does SCAP standardize?
Jawapan
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kad 356
Soalan
What can packet capture reveal?
Jawapan
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kad 357
Soalan
What makes a privileged credential ephemeral?
Jawapan
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kad 358
Soalan
How do a statement of work and a work order differ?
Jawapan
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kad 359
Soalan
Why might multi-cloud improve resilience?
Jawapan
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kad 360
Soalan
How can a service provider introduce a supply-chain vulnerability?
Jawapan
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kad 361
Soalan
What is a false positive in vulnerability scanning?
Jawapan
A reported weakness that is not actually present or exploitable in the assessed context.
Kad 362
Soalan
How do EDR and XDR differ?
Jawapan
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kad 363
Soalan
What should onboarding and offboarding procedures coordinate?
Jawapan
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kad 364
Soalan
How should an organization harden managed mobile devices?
Jawapan
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kad 365
Soalan
What is a certificate signing request?
Jawapan
A request containing a public key and subject information for a certificate authority to sign.
Kad 366
Soalan
What is pretexting?
Jawapan
Using a fabricated role or situation to make a request seem legitimate.
Kad 367
Soalan
How is annualized loss expectancy commonly estimated?
Jawapan
Single loss expectancy multiplied by annualized rate of occurrence.
Kad 368
Soalan
What security consequence follows from containers sharing a kernel?
Jawapan
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kad 369
Soalan
Where does 802.1X enforce a network admission decision?
Jawapan
At the controlled switch port or wireless access point before normal network access is granted.
Kad 370
Soalan
What should insider-threat awareness teach?
Jawapan
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kad 371
Soalan
What access action is suitable for careful automation?
Jawapan
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kad 372
Soalan
What is an evil twin?
Jawapan
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kad
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Ulang kaji dek ini secara percumaNibomo akan dibuka supaya anda boleh mula mengulang kaji.
Kad 373
Soalan
Does non-human-readable data need less protection?
Jawapan
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kad 374
Soalan
What does authenticating a system establish?
Jawapan
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kad 375
Soalan
What does LDAP provide in identity systems?
Jawapan
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kad 376
Soalan
What is a deterrent control meant to do?
Jawapan
Discourage an attacker from attempting an unwanted action.
Kad 377
Soalan
Why update procedures after changing a security control?
Jawapan
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kad 378
Soalan
How does OCSP differ from a certificate revocation list?
Jawapan
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kad 379
Soalan
What is the goal of data exfiltration?
Jawapan
Remove data from its authorized environment without permission.
Kad 380
Soalan
What is a watering-hole attack?
Jawapan
Compromising a site frequented by the intended targets so their visits expose them.
Kad 381
Soalan
How can a hardware provider introduce a supply-chain vulnerability?
Jawapan
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kad 382
Soalan
What is application forgery?
Jawapan
Creating or altering a request, token, or object so the application treats it as authentic.
Kad 383
Soalan
How does least privilege mitigate compromise?
Jawapan
It limits the actions and resources available to a compromised account or process.
Kad 384
Soalan
What is serverless computing?
Jawapan
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kad 385
Soalan
What makes an infrastructure control effective for a specific risk?
Jawapan
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kad 386
Soalan
What does parallel recovery processing test?
Jawapan
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kad 387
Soalan
Which password-authentication method does WPA3-Personal use?
Jawapan
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kad 388
Soalan
How does data retention affect asset disposal?
Jawapan
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kad 389
Soalan
What is a false negative in vulnerability scanning?
Jawapan
A real weakness that the assessment fails to report.
Kad 390
Soalan
What does recurring security scanning add to monitoring?
Jawapan
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kad 391
Soalan
What should guide port selection for a secure protocol?
Jawapan
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kad 392
Soalan
What does forensic acquisition create?
Jawapan
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kad 393
Soalan
How do system owners and data owners divide security accountability?
Jawapan
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kad 394
Soalan
What does likelihood express in risk analysis?
Jawapan
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kad 395
Soalan
What is a memorandum of understanding?
Jawapan
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kad 396
Soalan
What does the right to be forgotten generally require?
Jawapan
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kad 397
Soalan
What does an audit committee oversee?
Jawapan
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kad 398
Soalan
What does identity interoperability require?
Jawapan
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kad 399
Soalan
How does a bollard protect a facility?
Jawapan
It blocks or redirects vehicles before they can reach a protected area.
Kad 400
Soalan
How can hashing protect a downloaded file?
Jawapan
A trusted digest lets the recipient detect whether the file changed.
Kad 401
Soalan
What is a credential replay attack?
Jawapan
Using captured valid credentials or tokens again without needing to discover the secret.
Kad 402
Soalan
How can automation complexity create security risk?
Jawapan
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kad 403
Soalan
What must an architecture provide when a component cannot be patched?
Jawapan
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kad 404
Soalan
What makes remote access secure?
Jawapan
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kad 405
Soalan
What should users verify before connecting removable media or a cable?
Jawapan
That the device and connection are approved, expected, and handled under organizational policy.
Kad 406
Soalan
What is a self-signed certificate?
Jawapan
A certificate signed by its own private key rather than by a separate trusted issuer.
Kad 407
Soalan
What is brand impersonation?
Jawapan
Using a trusted organization's identity or look to deceive people.
Kad 408
Soalan
What characterizes a conservative risk appetite?
Jawapan
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kad 409
Soalan
What should a managed mobile device verify before using Wi-Fi?
Jawapan
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kad 410
Soalan
What is a zero-day vulnerability?
Jawapan
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kad 411
Soalan
What does verification confirm after vulnerability remediation?
Jawapan
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kad 412
Soalan
What is user and entity behavior analytics?
Jawapan
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kad 413
Soalan
What does a physical security policy establish?
Jawapan
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kad 414
Soalan
What does a UPS provide?
Jawapan
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kad 415
Soalan
What is a nondisclosure agreement?
Jawapan
A contract restricting use and disclosure of defined confidential information.
Kad 416
Soalan
What should be checked before assigning a user permission?
Jawapan
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kad 417
Soalan
How does espionage differ from ordinary theft?
Jawapan
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kad 418
Soalan
What is password spraying?
Jawapan
Trying a small set of common passwords across many accounts to avoid lockouts.
Kad 419
Soalan
What is the purpose of system isolation during an incident?
Jawapan
Stop harmful communication while preserving the system for response and investigation.
Kad 420
Soalan
What is a security benchmark?
Jawapan
A documented set of recommended configuration checks for a platform or product.
Kad 421
Soalan
Which metadata fields give a log record investigative context?
Jawapan
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kad 422
Soalan
What does an access-control vestibule prevent?
Jawapan
It limits tailgating by allowing controlled passage through one door at a time.
Kad 423
Soalan
What is version control's security value for configuration?
Jawapan
It preserves attributable history and enables review or rollback of changes.
Kad 424
Soalan
Why use both internal and external compliance monitoring?
Jawapan
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kad 425
Soalan
What distinguishes on-premises architecture?
Jawapan
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kad 426
Soalan
What risk can split tunneling add to a VPN?
Jawapan
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kad 427
Soalan
What is a certificate root of trust?
Jawapan
A trusted root certificate or key from which a client validates a certificate chain.
Kad 428
Soalan
What is typosquatting?
Jawapan
Registering a look-alike domain based on common typing errors or visual similarity.
Kad 429
Soalan
What is root-cause analysis?
Jawapan
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kad 430
Soalan
What is risk tolerance?
Jawapan
The acceptable variation or boundary around a specific objective or risk area.
Kad 431
Soalan
What is a security self-assessment?
Jawapan
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kad 432
Soalan
What does data masking change?
Jawapan
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kad 433
Soalan
How do wireless authentication protocols let clients prove identity securely?
Jawapan
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kad 434
Soalan
Why reconcile inventory with network discovery?
Jawapan
Differences expose missing records, retired systems, or unauthorized devices.
Kad 435
Soalan
Why does sideloading raise mobile risk?
Jawapan
It can bypass store review, signing policy, and managed application controls.
Kad 436
Soalan
What does an information-sharing organization add to vulnerability management?
Jawapan
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kad 437
Soalan
What does a web-filter block rule specify?
Jawapan
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kad 438
Soalan
How do data custodians and data stewards differ?
Jawapan
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kad 439
Soalan
What is a brute-force password attack?
Jawapan
Systematically trying many candidate secrets against an account or protected value.
Kad 440
Soalan
What is a compensating control?
Jawapan
An alternative safeguard used when the preferred control is impractical or unavailable.
Kad 441
Soalan
How can location act as an authentication factor?
Jawapan
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kad 442
Soalan
Why must security automation remain supportable?
Jawapan
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kad 443
Soalan
What does a standby generator provide?
Jawapan
Longer-duration power during a utility outage, after a startup delay.
Kad 444
Soalan
What makes an architecture air-gapped?
Jawapan
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kad 445
Soalan
What is a software-defined WAN?
Jawapan
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kad 446
Soalan
What password-management behavior should awareness training reinforce?
Jawapan
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kad 447
Soalan
What security value does fencing provide?
Jawapan
It defines and delays entry across a physical perimeter.
Kad 448
Soalan
What is a wildcard certificate?
Jawapan
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kad 449
Soalan
How does misinformation differ from disinformation?
Jawapan
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kad 450
Soalan
What is a risk threshold?
Jawapan
A defined level that triggers escalation, treatment, or another required response.
Kad 451
Soalan
What does a vendor penetration test contribute to assessment?
Jawapan
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kad 452
Soalan
What is the objective of a service-disruption attack?
Jawapan
Make a system or business function unavailable or unreliable.
Kad 453
Soalan
What is directory traversal?
Jawapan
Manipulating a file path to reach files outside the directory the application intended to expose.
Kad 454
Soalan
Why decommission an unsupported system?
Jawapan
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kad 455
Soalan
Why archive security-monitoring data?
Jawapan
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kad 456
Soalan
What role does RADIUS commonly play in enterprise Wi-Fi?
Jawapan
It centralizes authentication, authorization information, and accounting for network access.
Kad 457
Soalan
Why separate the requester and approver of a high-risk change?
Jawapan
To reduce error, fraud, and unilateral unauthorized modification.
Kad 458
Soalan
Why can a jailbroken device violate a security baseline?
Jawapan
It weakens platform isolation and allows unapproved privileged changes.
Kad 459
Soalan
When is tokenization especially useful?
Jawapan
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kad 460
Soalan
Why can dark-web intelligence affect vulnerability priority?
Jawapan
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kad 461
Soalan
What firewall policy should govern traffic from a screened subnet to internal systems?
Jawapan
Deny it by default and allow only explicitly required flows.
Kad 462
Soalan
What does SAML commonly carry?
Jawapan
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kad 463
Soalan
What does a security governance committee do?
Jawapan
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kad 464
Soalan
How can global privacy requirements affect one data process?
Jawapan
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kad 465
Soalan
What characterizes an IoT device?
Jawapan
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kad 466
Soalan
What is a unified threat management appliance?
Jawapan
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kad 467
Soalan
What does a hardware security module provide?
Jawapan
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kad 468
Soalan
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Jawapan
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kad 469
Soalan
What is a tabletop exercise?
Jawapan
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kad 470
Soalan
What does a risk exemption authorize?
Jawapan
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kad 471
Soalan
What is a regulatory examination?
Jawapan
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kad 472
Soalan
What does physical video surveillance primarily provide?
Jawapan
Detection and evidence of activity in monitored areas.
Kad 473
Soalan
What is a birthday attack against a hash?
Jawapan
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kad 474
Soalan
Why keep backups both onsite and offsite?
Jawapan
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kad 475
Soalan
How does technical debt affect security automation?
Jawapan
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kad 476
Soalan
What should switch hardening restrict first?
Jawapan
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kad 477
Soalan
What should happen when an asset changes owners?
Jawapan
Inventory, access, support responsibility, and data handling should be updated.
Kad 478
Soalan
What does evidence of a vendor's internal audits contribute?
Jawapan
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kad 479
Soalan
What is identity attestation?
Jawapan
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kad 480
Soalan
Why can standard enterprise patching be unsafe for an RTOS device?
Jawapan
A change can disrupt timing guarantees or certified operational behavior.
Kad 481
Soalan
What is secure access service edge?
Jawapan
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kad 482
Soalan
What social-engineering habit should awareness training reinforce?
Jawapan
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kad 483
Soalan
How can a software provider introduce a supply-chain vulnerability?
Jawapan
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kad 484
Soalan
Why include internet exposure in remediation priority?
Jawapan
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kad 485
Soalan
What does a mail gateway inspect?
Jawapan
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kad 486
Soalan
What is a data controller?
Jawapan
The entity that determines why and how personal data is processed.
Kad 487
Soalan
How does blackmail motivate a cyberattack?
Jawapan
The attacker threatens disclosure or harm unless the victim complies.
Kad 488
Soalan
What is a downgrade attack?
Jawapan
Forcing parties to use an older or weaker protocol or security mode.
Kad 489
Soalan
How does encryption mitigate data exposure?
Jawapan
It makes captured data unreadable without the required key.
Kad 490
Soalan
How do network and web vulnerability scanners differ?
Jawapan
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kad 491
Soalan
How can vulnerability-scan data support an investigation?
Jawapan
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kad 492
Soalan
What is key escrow?
Jawapan
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kad 493
Soalan
Which human vector commonly uses a fake sign-in page to harvest credentials?
Jawapan
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kad 494
Soalan
What is risk avoidance?
Jawapan
Stopping or not starting the activity that creates the risk.
Kad 495
Soalan
What is data obfuscation?
Jawapan
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kad 496
Soalan
What is a directive control?
Jawapan
A safeguard that tells people what behavior or action is required.
Kad 497
Soalan
What does a security guard add that a camera cannot?
Jawapan
Human judgment and an immediate physical response.
Kad 498
Soalan
Why define restricted activities in change management?
Jawapan
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kad 499
Soalan
What contractual impact can noncompliance create?
Jawapan
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kad 500
Soalan
What should determine backup frequency?
Jawapan
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kad 501
Soalan
What should router hardening protect?
Jawapan
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kad 502
Soalan
What problem does OAuth 2.0 address?
Jawapan
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kad 503
Soalan
What does SCADA do?
Jawapan
It provides supervisory monitoring and control across distributed industrial equipment.
Kad 504
Soalan
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Jawapan
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kad 505
Soalan
What distinguishes a computer virus?
Jawapan
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kad 506
Soalan
What does a key management system coordinate?
Jawapan
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kad 507
Soalan
How can an unsecure wired network expose traffic?
Jawapan
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kad 508
Soalan
Why is vulnerable device firmware hard to remediate?
Jawapan
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kad 509
Soalan
What does patching change in vulnerability remediation?
Jawapan
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kad 510
Soalan
What does DMARC add to SPF and DKIM?
Jawapan
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kad 511
Soalan
How does automation improve security efficiency?
Jawapan
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kad 512
Soalan
What is a simulation exercise?
Jawapan
A more realistic practice in which participants respond to injected events using operational processes.
Kad 513
Soalan
What is a data processor?
Jawapan
An entity that processes personal data on behalf of a controller.
Kad 514
Soalan
What is risk mitigation?
Jawapan
Reducing likelihood, impact, or both through controls or process changes.
Kad 515
Soalan
Why monitor a vendor after onboarding?
Jawapan
Security posture, ownership, services, incidents, and dependencies can change.
Kad 516
Soalan
What does a physical penetration test assess?
Jawapan
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kad 517
Soalan
Why use access badges at a facility?
Jawapan
To associate entry attempts with authorized identities and enforce access rules.
Kad 518
Soalan
How does permission restriction protect data?
Jawapan
Only authorized identities receive the actions and scope their roles require.
Kad 519
Soalan
What is the usual objective of ransomware extortion?
Jawapan
Force payment by denying access, threatening disclosure, or both.
Kad 520
Soalan
What does impossible travel indicate?
Jawapan
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kad 521
Soalan
What is configuration enforcement?
Jawapan
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kad 522
Soalan
What does a web vulnerability scanner inspect?
Jawapan
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kad 523
Soalan
How does cost affect an architecture choice?
Jawapan
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kad 524
Soalan
What does EAP provide with 802.1X?
Jawapan
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kad 525
Soalan
What should operational-security training help users protect?
Jawapan
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kad 526
Soalan
What does a time-of-day access rule do?
Jawapan
Allows or denies a requested action according to an approved schedule.
Kad 527
Soalan
What should cloud infrastructure hardening establish?
Jawapan
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kad 528
Soalan
What should an asset owner ensure during offboarding?
Jawapan
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kad 529
Soalan
Why encrypt backups?
Jawapan
Backup media and transfers can expose the same sensitive data as production systems.
Kad 530
Soalan
What is steganography?
Jawapan
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kad 531
Soalan
Which human vector uses a fabricated authority role to justify a sensitive request?
Jawapan
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kad 532
Soalan
Why does risk transfer not remove accountability?
Jawapan
The organization can retain legal, reputational, operational, and oversight consequences.
Kad 533
Soalan
Why validate a change after deployment?
Jawapan
To confirm the intended result occurred without introducing unacceptable side effects.
Kad 534
Soalan
What makes end-of-life hardware a security vulnerability?
Jawapan
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kad 535
Soalan
What does an audit add to remediation validation?
Jawapan
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kad 536
Soalan
Why can SPF pass while a message still impersonates a brand?
Jawapan
SPF checks the envelope domain, which may differ from the visible From domain.
Kad 537
Soalan
What role can a government entity have in security governance?
Jawapan
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kad 538
Soalan
How do data inventory and retention support privacy governance?
Jawapan
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kad 539
Soalan
What can concurrent sessions from distant regions indicate?
Jawapan
A stolen account or shared credential, subject to VPN and proxy context.
Kad 540
Soalan
What does supply-chain analysis examine?
Jawapan
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kad 541
Soalan
What is the purpose of facility lighting as a control?
Jawapan
Deter covert activity and improve observation of people and areas.
Kad 542
Soalan
What architecture quality keeps a service usable during component failure?
Jawapan
Availability.
Kad 543
Soalan
When is fail-open behavior preferable to fail-closed behavior?
Jawapan
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kad 544
Soalan
Which control function does a login-failure alert provide?
Jawapan
Detection; it reveals suspicious authentication activity.
Kad 545
Soalan
What does a biometric MFA implementation verify?
Jawapan
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kad 546
Soalan
How can automation enforce a security baseline?
Jawapan
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kad 547
Soalan
How do wireless cryptographic protocols protect network traffic?
Jawapan
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kad 548
Soalan
Why segment sensitive data stores?
Jawapan
It limits reachable paths and separates them from lower-trust workloads.
Kad 549
Soalan
What must remain secret in an asymmetric key pair?
Jawapan
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kad 550
Soalan
How can a supplier become a supply-chain attack vector?
Jawapan
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kad 551
Soalan
What is e-discovery?
Jawapan
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kad 552
Soalan
What characterizes a neutral risk appetite?
Jawapan
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kad 553
Soalan
What is passive reconnaissance?
Jawapan
Gathering information without directly interacting with the target's systems.
Kad 554
Soalan
What does a philosophical motive mean for a threat actor?
Jawapan
The actor acts to advance a belief or moral position rather than primarily for money.
Kad 555
Soalan
What does unexpected resource consumption indicate?
Jawapan
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kad 556
Soalan
What does a host-based intrusion prevention system do?
Jawapan
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kad 557
Soalan
How does agent-based monitoring differ from agentless monitoring?
Jawapan
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kad 558
Soalan
What can network logs contribute to an investigation?
Jawapan
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kad 559
Soalan
What is the purpose of a backup restore test?
Jawapan
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kad 560
Soalan
Why can obsolete hardware become a security risk?
Jawapan
It may lack supported firmware, modern protections, or replacement parts.
Kad 561
Soalan
What does rescanning confirm after remediation?
Jawapan
Whether the scanner can still detect the original finding on the affected asset.
Kad 562
Soalan
What should a secure transport method provide?
Jawapan
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kad 563
Soalan
How can law affect security governance?
Jawapan
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kad 564
Soalan
What does resilience mean for a security architecture?
Jawapan
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kad 565
Soalan
Why minimize an infrastructure's attack surface?
Jawapan
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kad 566
Soalan
What does executing a security-awareness program require?
Jawapan
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kad 567
Soalan
What does an infrared security sensor detect?
Jawapan
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kad 568
Soalan
What is a knowledge factor?
Jawapan
Something the claimant knows, such as a password.
Kad 569
Soalan
Why review allow-list and deny-list impact before a change?
Jawapan
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kad 570
Soalan
What does partition-level encryption protect?
Jawapan
One selected disk partition, leaving other partitions outside that encryption boundary.
Kad 571
Soalan
How can instant messaging deliver a security attack?
Jawapan
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kad 572
Soalan
What can repeated blocked-content events indicate?
Jawapan
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kad 573
Soalan
What should a server-hardening baseline reduce?
Jawapan
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kad 574
Soalan
When is physical media destruction appropriate?
Jawapan
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kad 575
Soalan
What is mean time to repair?
Jawapan
The average time required to restore a failed component or service.
Kad 576
Soalan
Why disclose conflicts of interest during vendor selection?
Jawapan
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kad 577
Soalan
What is a fine for noncompliance?
Jawapan
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kad 578
Soalan
What does a public data classification authorize?
Jawapan
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kad 579
Soalan
What security benefit comes from standard infrastructure configurations?
Jawapan
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kad 580
Soalan
How does horizontal scaling increase capacity?
Jawapan
It adds more service instances and distributes work among them.
Kad 581
Soalan
Why can added connectivity weaken segmentation?
Jawapan
Each allowed path can become a route for lateral movement or data escape.
Kad 582
Soalan
What coding practice is central to preventing SQL injection?
Jawapan
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kad 583
Soalan
When is a compensating control appropriate for a vulnerability?
Jawapan
When timely removal or patching is infeasible and another control can reduce the risk.
Kad 584
Soalan
How does agent-based web filtering enforce policy?
Jawapan
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kad 585
Soalan
How can regulation differ from an internal policy?
Jawapan
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kad 586
Soalan
What is a storage snapshot?
Jawapan
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kad 587
Soalan
What does password age measure?
Jawapan
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kad 588
Soalan
What does an ethical motive mean in vulnerability research?
Jawapan
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kad 589
Soalan
What can missing security logs indicate?
Jawapan
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kad 590
Soalan
Why disable unused ports and protocols?
Jawapan
They expose unnecessary communication paths and code that attackers can reach.
Kad 591
Soalan
What does antivirus contribute to monitoring?
Jawapan
It scans files, memory, or behavior and reports suspected malicious code.
Kad 592
Soalan
What is a honeypot?
Jawapan
A decoy system or service designed to attract and observe malicious activity.
Kad 593
Soalan
What does file-level encryption protect?
Jawapan
Selected files independently of whether the rest of the disk or volume is encrypted.
Kad 594
Soalan
How can SMS deliver a security attack?
Jawapan
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kad 595
Soalan
What happens during incident analysis?
Jawapan
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kad 596
Soalan
What is mean time between failures?
Jawapan
The average operating time between repairable failures.
Kad 597
Soalan
What is active reconnaissance?
Jawapan
Probing or interacting with target systems to discover services and behavior.
Kad 598
Soalan
What constraint should guide ICS or SCADA hardening?
Jawapan
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kad 599
Soalan
Which control function does restoring a clean system image provide?
Jawapan
Correction; it returns the system to a known-good state.
Kad 600
Soalan
What does responsiveness mean in an architecture decision?
Jawapan
How quickly the system and its operators can adapt to demand, failure, or attack.
Kad 601
Soalan
How does out-of-band access strengthen remote administration?
Jawapan
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kad 602
Soalan
What makes user behavior unexpected?
Jawapan
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kad 603
Soalan
What is a work order?
Jawapan
A document authorizing a defined unit of work under an existing agreement.
Kad 604
Soalan
What can out-of-cycle logging indicate?
Jawapan
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kad 605
Soalan
Why update a standard operating procedure after a change?
Jawapan
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kad 606
Soalan
What coding practice limits cross-site scripting?
Jawapan
Context-appropriate output encoding, supported by safe templating and input handling.
Kad 607
Soalan
What does a restricted data classification indicate?
Jawapan
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kad 608
Soalan
How does a bug bounty support responsible disclosure?
Jawapan
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kad 609
Soalan
What does web-filter content categorization provide?
Jawapan
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kad 610
Soalan
How do hard and soft authentication tokens differ?
Jawapan
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kad 611
Soalan
How can industry requirements affect security governance?
Jawapan
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kad 612
Soalan
How can noncompliance cause loss of a license?
Jawapan
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kad 613
Soalan
What does volume-level encryption protect?
Jawapan
All data within a selected logical storage volume.
Kad 614
Soalan
How can impersonation exploit familiarity?
Jawapan
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kad 615
Soalan
How does RTO guide recovery design?
Jawapan
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kad 616
Soalan
What is a honeynet?
Jawapan
A network of decoy systems used to study or divert attackers.
Kad 617
Soalan
What does backup replication provide?
Jawapan
Additional synchronized or copied recovery data in another system or location.
Kad 618
Soalan
What lets automation scale securely?
Jawapan
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kad 619
Soalan
Why monitor a hardened computing resource continuously?
Jawapan
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kad 620
Soalan
Why keep a certificate of destruction?
Jawapan
It documents that a disposal provider handled specified media under the agreed process.
Kad 621
Soalan
Why consider patch availability before selecting a platform?
Jawapan
Unsupported or difficult-to-update components accumulate known exposure.
Kad 622
Soalan
Why should remote administration use an encrypted, authenticated protocol?
Jawapan
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kad 623
Soalan
How can revenge motivate an insider incident?
Jawapan
A disgruntled person may damage systems or disclose data to punish the organization.
Kad 624
Soalan
What is a published or documented indicator of malicious activity?
Jawapan
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kad 625
Soalan
Why monitor a system more closely when a mitigation exception is accepted?
Jawapan
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kad 626
Soalan
What is an SNMP trap?
Jawapan
An unsolicited device notification sent to a management system when a configured event occurs.
Kad 627
Soalan
How can an automated report support an investigation?
Jawapan
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kad 628
Soalan
What is a security key?
Jawapan
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kad 629
Soalan
What does database-level encryption protect?
Jawapan
A database or selected database structures through controls managed at the database layer.
Kad 630
Soalan
How does brand impersonation exploit trust?
Jawapan
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kad 631
Soalan
What browser-side impact can a cross-site scripting vulnerability create?
Jawapan
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kad 632
Soalan
How can a system or process audit identify vulnerabilities?
Jawapan
It compares evidence with required configuration and procedure to reveal control gaps.
Kad 633
Soalan
What security role can Group Policy provide?
Jawapan
Centralized Windows configuration of account, application, audit, and system security settings.
Kad 634
Soalan
What should incident-response training prepare people to do?
Jawapan
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kad 635
Soalan
Why must governance track local or regional requirements?
Jawapan
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kad 636
Soalan
How can a dependency become a useful key risk indicator?
Jawapan
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kad 637
Soalan
What is a business partners agreement?
Jawapan
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kad 638
Soalan
What makes an audit regulatory?
Jawapan
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kad 639
Soalan
What is a honeyfile?
Jawapan
A decoy file whose access can reveal unauthorized activity.
Kad 640
Soalan
Why does legal information require explicit protection?
Jawapan
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kad 641
Soalan
Which indicator can mass file renaming and encryption produce?
Jawapan
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kad 642
Soalan
What remains with an organization after transferring architecture risk?
Jawapan
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kad 643
Soalan
When does local console placement provide useful administrative access?
Jawapan
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kad 644
Soalan
What makes a harmful user action unintentional?
Jawapan
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kad 645
Soalan
How should an organization harden workstations?
Jawapan
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kad 646
Soalan
What is journaling in recovery?
Jawapan
Recording ordered changes so data can be replayed or restored to a consistent point.
Kad 647
Soalan
What downtime must a change plan account for?
Jawapan
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kad 648
Soalan
Why must a privacy program map local or regional law to data flows?
Jawapan
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kad 649
Soalan
Why combine independent preventive controls at different layers?
Jawapan
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kad 650
Soalan
What is passwordless authentication?
Jawapan
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kad 651
Soalan
How can automation improve security reaction time?
Jawapan
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kad 652
Soalan
What does record-level encryption protect?
Jawapan
Individual records or fields, allowing finer protection than encrypting the entire database.
Kad 653
Soalan
How can business email compromise misuse urgency?
Jawapan
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kad 654
Soalan
What does impact measure in risk analysis?
Jawapan
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kad 655
Soalan
What makes cyber activity part of warfare?
Jawapan
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kad 656
Soalan
Which indicator can a newly created privileged account produce outside the normal change window?
Jawapan
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kad 657
Soalan
How can configuration enforcement validate a deployed mitigation?
Jawapan
It compares the realized settings with the approved state and corrects or reports drift.
Kad 658
Soalan
How does validating an alert improve alert tuning?
Jawapan
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kad 659
Soalan
What data-layer impact can a SQL injection vulnerability create?
Jawapan
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kad 660
Soalan
What environmental variables can change vulnerability priority?
Jawapan
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kad 661
Soalan
What security role does SELinux provide?
Jawapan
Mandatory access controls that confine processes according to centrally defined policy.
Kad 662
Soalan
Why review governance documents periodically?
Jawapan
Business, technology, threats, and external obligations change.
Kad 663
Soalan
Why evaluate power requirements for a system design?
Jawapan
Power capacity and redundancy constrain availability and recovery.
Kad 664
Soalan
When is IPsec a better tunnel choice than TLS?
Jawapan
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kad 665
Soalan
What is a honeytoken?
Jawapan
A fake credential or data element that generates a high-confidence alert when used.
Kad 666
Soalan
What should embedded-system hardening prioritize?
Jawapan
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kad 667
Soalan
Why must sanitization address data remanence?
Jawapan
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kad 668
Soalan
Why require rules of engagement for vendor testing?
Jawapan
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kad 669
Soalan
What does a private data classification indicate?
Jawapan
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kad 670
Soalan
What does a tabletop recovery exercise test?
Jawapan
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kad 671
Soalan
Why prevent password reuse?
Jawapan
One compromised password should not unlock other accounts or services.
Kad 672
Soalan
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Jawapan
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kad 673
Soalan
What does transport encryption protect?
Jawapan
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kad 674
Soalan
How can a voice call become an attack vector?
Jawapan
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kad 675
Soalan
What should a digital-forensics report document?
Jawapan
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kad 676
Soalan
What tradeoff comes with an expansionary risk appetite?
Jawapan
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kad 677
Soalan
What does a known penetration-test environment provide?
Jawapan
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kad 678
Soalan
Why evaluate compute requirements before deployment?
Jawapan
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kad 679
Soalan
Why place sensors at network choke points?
Jawapan
They can observe traffic crossing important trust boundaries.
Kad 680
Soalan
What should hybrid or remote-work security training emphasize?
Jawapan
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kad 681
Soalan
Why plan an application restart separately from a service restart?
Jawapan
The application may need its own state handling, user coordination, health checks, and rollback point.
Kad 682
Soalan
What is a cryptographic vulnerability?
Jawapan
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kad 683
Soalan
Why report findings by asset owner?
Jawapan
Owners need clear accountability and a prioritized remediation queue.
Kad 684
Soalan
What should guide selection of a secure protocol?
Jawapan
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kad 685
Soalan
How do centralized and decentralized governance structures differ?
Jawapan
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kad 686
Soalan
How does privacy-aware design limit data retention?
Jawapan
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kad 687
Soalan
What does a pressure security sensor detect?
Jawapan
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kad 688
Soalan
What automation costs should a security team plan for?
Jawapan
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kad 689
Soalan
What should RTOS hardening preserve while reducing attack surface?
Jawapan
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kad 690
Soalan
What is the goal of disruption-for-chaos activity?
Jawapan
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kad 691
Soalan
Which indicator can repeated password guessing produce?
Jawapan
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kad 692
Soalan
How does removing unnecessary software harden a system?
Jawapan
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kad 693
Soalan
What does NetFlow provide?
Jawapan
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kad 694
Soalan
How can a dashboard support an investigation?
Jawapan
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kad 695
Soalan
When should a password be expired?
Jawapan
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kad 696
Soalan
Why does cryptographic key length matter?
Jawapan
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kad 697
Soalan
How can an unsecure Bluetooth connection become an attack vector?
Jawapan
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kad 698
Soalan
What is a key risk indicator?
Jawapan
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kad 699
Soalan
What should vendor monitoring verify when a contract ends?
Jawapan
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kad 700
Soalan
What does a sensitive data classification indicate?
Jawapan
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kad 701
Soalan
What does software-defined networking separate?
Jawapan
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kad 702
Soalan
Where should a web application firewall be placed?
Jawapan
In the path of web requests before they reach the protected application.
Kad 703
Soalan
What does a simulated recovery exercise test?
Jawapan
Participants perform realistic response actions in a controlled environment without disrupting production.
Kad 704
Soalan
How can a team verify that a detective control is effective?
Jawapan
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kad 705
Soalan
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Jawapan
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kad 706
Soalan
What makes a vulnerability cloud-specific?
Jawapan
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kad 707
Soalan
How can insurance respond to vulnerability risk?
Jawapan
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kad 708
Soalan
How does reputation improve web filtering?
Jawapan
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kad 709
Soalan
What does an encryption policy establish?
Jawapan
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kad 710
Soalan
How does a microwave security sensor detect movement?
Jawapan
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kad 711
Soalan
What should IoT-device hardening change before deployment?
Jawapan
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kad 712
Soalan
Why track software licenses as assets?
Jawapan
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kad 713
Soalan
What does a password manager improve?
Jawapan
It can generate and store unique long passwords so users do not memorize or reuse them.
Kad 714
Soalan
What makes a ledger open and public?
Jawapan
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kad 715
Soalan
What should a payment-change request trigger?
Jawapan
Independent verification through a known channel before any account or payment detail is changed.
Kad 716
Soalan
What does preserving digital evidence require?
Jawapan
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kad 717
Soalan
What should a risk report tell decision-makers?
Jawapan
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kad 718
Soalan
What should an external assessment report provide?
Jawapan
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kad 719
Soalan
What is a centralized design's main resilience risk?
Jawapan
A central dependency can become a bottleneck or single point of failure.
Kad 720
Soalan
What does mutual TLS add to a TLS-protected service connection?
Jawapan
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kad 721
Soalan
What should recurring security-awareness reporting show?
Jawapan
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kad 722
Soalan
Why do legacy applications require extra change planning?
Jawapan
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kad 723
Soalan
How do a data controller and a data processor differ?
Jawapan
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kad 724
Soalan
How can orchestration become a single point of failure?
Jawapan
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kad 725
Soalan
Why should defenses account for a threat actor's sophistication and capability?
Jawapan
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kad 726
Soalan
How does an injection attack make an application execute unintended instructions?
Jawapan
It sends crafted input that an interpreter treats as code or commands instead of data.
Kad 727
Soalan
What does a host-based firewall control?
Jawapan
Inbound and outbound network traffic for one endpoint according to local rules.
Kad 728
Soalan
Why revise alerting after an incident?
Jawapan
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kad 729
Soalan
Why include security duties in procurement criteria?
Jawapan
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kad 730
Soalan
What does a critical data classification indicate?
Jawapan
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kad 731
Soalan
What infrastructure capacity must support failover?
Jawapan
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kad 732
Soalan
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Jawapan
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kad 733
Soalan
How does a remediation exemption differ from an exception?
Jawapan
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kad 734
Soalan
Why should automated EDR or XDR blocking have an exception and rollback path?
Jawapan
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kad 735
Soalan
What does a security playbook provide?
Jawapan
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kad 736
Soalan
How does an ultrasonic security sensor detect movement?
Jawapan
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kad 737
Soalan
What should a managed mobile device require for Bluetooth connections?
Jawapan
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kad 738
Soalan
How do password complexity rules differ from password length?
Jawapan
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kad 739
Soalan
What makes a certificate third-party trusted?
Jawapan
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kad 740
Soalan
Why is an out-of-band check effective against impersonation?
Jawapan
It verifies the request through a separate, previously trusted communication path.
Kad 741
Soalan
What does a risk exception authorize?
Jawapan
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kad 742
Soalan
What security challenge grows in a decentralized design?
Jawapan
Consistent policy, inventory, monitoring, and patching become harder.
Kad 743
Soalan
How should controls be selected for an unused network path?
Jawapan
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kad 744
Soalan
How can a buffer-overflow attack affect an application?
Jawapan
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 kad
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo akan dibuka supaya anda boleh mula mengulang kaji.
