CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
เกี่ยวกับเด็คนี้
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
การ์ดในเด็คนี้
การ์ด 1
คำถาม
What does an information security policy establish?
คำตอบ
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
การ์ด 2
คำถาม
What is phishing?
คำตอบ
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
การ์ด 3
คำถาม
What does a public-key certificate bind to an identity?
คำตอบ
A public key, together with identifying information and the issuer's signature.
การ์ด 4
คำถาม
What is data at rest?
คำตอบ
Data stored on media such as disks, databases, backups, or mobile devices.
การ์ด 5
คำถาม
How does policy-driven access control decide a zero-trust access request?
คำตอบ
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
การ์ด 6
คำถาม
What does establishing a secure baseline produce?
คำตอบ
An approved, documented configuration that defines the required secure state for a class of computing resource.
การ์ด 7
คำถาม
What is hashing used to verify?
คำตอบ
Whether data has changed by comparing fixed-length digest values.
การ์ด 8
คำถาม
What is impersonation in social engineering?
คำตอบ
Pretending to be a trusted person or organization to obtain access, data, or action.
การ์ด 9
คำถาม
What is virtualization?
คำตอบ
Abstracting physical compute so multiple isolated guest systems can share a host.
การ์ด 10
คำถาม
What is chain of custody?
คำตอบ
A documented history of who collected, handled, transferred, stored, and examined evidence.
การ์ด 11
คำถาม
What is quantitative risk analysis?
คำตอบ
Estimating risk with numerical values such as money, frequency, or probability.
การ์ด 12
คำถาม
What is a phishing awareness campaign?
คำตอบ
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
การ์ด 13
คำถาม
What is high availability?
คำตอบ
Designing a service to remain accessible despite expected component failures.
การ์ด 14
คำถาม
What is a network security zone?
คำตอบ
A group of systems with similar trust, function, or control requirements.
การ์ด 15
คำถาม
What is risk transfer?
คำตอบ
Shifting some financial or operational consequence to another party, such as through insurance or contract.
การ์ด 16
คำถาม
What is media sanitization?
คำตอบ
Making stored data infeasible to recover for the intended level of protection.
การ์ด 17
คำถาม
What does CVSS provide?
คำตอบ
A standardized way to describe a vulnerability's technical severity characteristics.
การ์ด 18
คำถาม
What does security alerting do?
คำตอบ
It turns matched events or behavior into a notification that the right responder can review.
การ์ด 19
คำถาม
What does a firewall rule enforce?
คำตอบ
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
การ์ด 20
คำถาม
What is deprovisioning?
คำตอบ
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
การ์ด 21
คำถาม
How does inline placement differ from a tap or monitor port?
คำตอบ
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
การ์ด 22
คำถาม
What is asymmetric encryption?
คำตอบ
Encryption that uses a mathematically related public and private key pair.
การ์ด 23
คำถาม
What does SPF authorize?
คำตอบ
Which mail servers may send mail for a domain in the SMTP envelope.
การ์ด 24
คำถาม
What is a possession factor?
คำตอบ
Something the claimant has, such as a cryptographic authenticator.
การ์ด 25
คำถาม
What does ordinary TLS usually protect and authenticate?
คำตอบ
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
การ์ด 26
คำถาม
What is single loss expectancy?
คำตอบ
The estimated loss from one occurrence of a risk event.
การ์ด 27
คำถาม
What does a certificate authority do?
คำตอบ
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
การ์ด 28
คำถาม
What is a detective control meant to do?
คำตอบ
Identify that an unwanted event has happened or is happening.
การ์ด 29
คำถาม
What is the security purpose of change-control approval?
คำตอบ
Ensure authorized reviewers assess risk before the production change occurs.
การ์ด 30
คำถาม
What is shadow IT?
คำตอบ
Technology used for organizational work without required approval or oversight.
การ์ด 31
คำถาม
What is a buffer overflow vulnerability?
คำตอบ
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
การ์ด 32
คำถาม
What is ransomware?
คำตอบ
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
การ์ด 33
คำถาม
How does network segmentation limit an incident?
คำตอบ
It restricts communication paths and reduces lateral movement between zones.
การ์ด 34
คำถาม
How do load balancing and clustering support availability differently?
คำตอบ
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
การ์ด 35
คำถาม
What is vendor due diligence?
คำตอบ
Evaluating a provider's security, capability, stability, and fit before commitment.
การ์ด 36
คำถาม
Who is a data subject?
คำตอบ
The person whose personal data is collected or processed.
การ์ด 37
คำถาม
What is attestation?
คำตอบ
A formal assertion or report about a subject matter, often supported by an independent examination.
การ์ด 38
คำถาม
What is a replay attack?
คำตอบ
Valid captured data is retransmitted to repeat an authenticated or authorized action.
การ์ด 39
คำถาม
What does a wireless site survey establish?
คำตอบ
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
การ์ด 40
คำถาม
What is the time-of-check stage of a race-condition vulnerability?
คำตอบ
The application verifies a condition or resource state before acting on it.
การ์ด 41
คำถาม
What is a penetration test?
คำตอบ
An authorized attempt to exploit weaknesses and demonstrate practical impact.
การ์ด 42
คำถาม
What is a cold recovery site?
คำตอบ
A facility with basic space and utilities but little preinstalled technology or current data.
การ์ด 43
คำถาม
What is data in transit?
คำตอบ
Data moving between systems or across a network.
การ์ด 44
คำถาม
What is a vendor security questionnaire?
คำตอบ
A structured request for information about a provider's controls and practices.
การ์ด 45
คำถาม
How does an internal actor's starting position differ from an external actor's?
คำตอบ
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
การ์ด 46
คำถาม
What can unexpected account lockouts indicate?
คำตอบ
Password guessing, credential stuffing, user error, or a broken client.
การ์ด 47
คำถาม
How do permissions enforce access control?
คำตอบ
They specify which actions a subject may perform on a particular resource.
การ์ด 48
คำถาม
What is log aggregation?
คำตอบ
Central collection of logs from multiple sources for search, correlation, and retention.
การ์ด 49
คำถาม
Why plan a service restart as part of a change?
คำตอบ
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
การ์ด 50
คำถาม
What is infrastructure as code?
คำตอบ
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
การ์ด 51
คำถาม
What should security-awareness program development start with?
คำตอบ
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
การ์ด 52
คำถาม
What is a voice-based social-engineering attack called?
คำตอบ
Vishing.
การ์ด 53
คำถาม
What happens during incident-response preparation?
คำตอบ
Teams establish people, tools, access, communications, training, and procedures before an incident.
การ์ด 54
คำถาม
What does an offensive penetration-testing team do?
คำตอบ
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
การ์ด 55
คำถาม
What is federation?
คำตอบ
One security domain relies on identity assertions from another trusted domain.
การ์ด 56
คำถาม
What is asset classification?
คำตอบ
Grouping an asset by sensitivity, criticality, or required handling.
การ์ด 57
คำถาม
What is cross-site scripting?
คำตอบ
Injection of script-capable content that a browser executes in another site's security context.
การ์ด 58
คำถาม
What can IDS or IPS trends reveal?
คำตอบ
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
การ์ด 59
คำถาม
What can unexpected resource inaccessibility indicate?
คำตอบ
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
การ์ด 60
คำถาม
What is a corrective control meant to do?
คำตอบ
Limit damage and restore a secure state after an event.
การ์ด 61
คำถาม
How do containers differ from virtual machines?
คำตอบ
Containers share the host kernel; virtual machines normally run separate guest operating systems.
การ์ด 62
คำถาม
How does an active security device differ from a passive one?
คำตอบ
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
การ์ด 63
คำถาม
Why is unsupported software a persistent attack surface?
คำตอบ
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
การ์ด 64
คำถาม
What is annualized rate of occurrence?
คำตอบ
The estimated number of times a risk event occurs per year.
การ์ด 65
คำถาม
What is an inherence factor?
คำตอบ
A biometric characteristic of the claimant.
การ์ด 66
คำถาม
What do a threat actor's sophistication and capability describe?
คำตอบ
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
การ์ด 67
คำถาม
What is a SIEM?
คำตอบ
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
การ์ด 68
คำถาม
What is sideloading?
คำตอบ
Installing software from outside the platform's approved distribution path.
การ์ด 69
คำถาม
What does an IDS or IPS signature match?
คำตอบ
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
การ์ด 70
คำถาม
Why are embedded systems often difficult to patch?
คำตอบ
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
การ์ด 71
คำถาม
What is a virtual private network?
คำตอบ
An encrypted logical connection that carries private traffic across an untrusted or shared network.
การ์ด 72
คำถาม
What should an initial security-awareness report establish?
คำตอบ
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
การ์ด 73
คำถาม
What is symmetric encryption?
คำตอบ
Encryption that uses the same secret key to encrypt and decrypt data.
การ์ด 74
คำถาม
What happens during incident detection?
คำตอบ
Monitoring or a report identifies activity that may meet the organization's incident criteria.
การ์ด 75
คำถาม
What is recovery time objective?
คำตอบ
The target maximum time to restore a function after disruption.
การ์ด 76
คำถาม
Why prioritize password length?
คำตอบ
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
การ์ด 77
คำถาม
What must sanitization accomplish before an asset leaves organizational control?
คำตอบ
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
การ์ด 78
คำถาม
What is a real-time operating system designed to provide?
คำตอบ
Predictable response timing for tasks with strict deadlines.
การ์ด 79
คำถาม
What does fail-open behavior do when a control fails?
คำตอบ
It permits traffic or access to preserve availability.
การ์ด 80
คำถาม
What is jailbreaking or rooting a mobile device?
คำตอบ
Removing platform restrictions to gain privileged control over the operating system.
การ์ด 81
คำถาม
What does network access control enforce?
คำตอบ
Identity, device posture, and access policy at network connection time and during a session.
การ์ด 82
คำถาม
What does data loss prevention do?
คำตอบ
Detects and may block sensitive data use or transfer that violates policy.
การ์ด 83
คำถาม
What security property does a blockchain provide?
คำตอบ
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
การ์ด 84
คำถาม
What is recovery point objective?
คำตอบ
The target maximum acceptable data loss measured backward in time.
การ์ด 85
คำถาม
How do ICS and SCADA relate?
คำตอบ
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
การ์ด 86
คำถาม
What does fail-closed behavior do when a control fails?
คำตอบ
It denies traffic or access to preserve security.
การ์ด 87
คำถาม
Which keys create and verify a typical digital signature?
คำตอบ
The signer creates it with a private key, and others verify it with the corresponding public key.
การ์ด 88
คำถาม
What is SQL injection?
คำตอบ
Input that alters the structure or meaning of a database query because code and data were not safely separated.
การ์ด 89
คำถาม
What does DKIM verify?
คำตอบ
That selected message content was signed by a domain and was not altered after signing.
การ์ด 90
คำถาม
What is post-incident activity?
คำตอบ
Learning from the event and improving controls, plans, and recovery based on evidence.
การ์ด 91
คำถาม
What characterizes an expansionary risk appetite?
คำตอบ
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
การ์ด 92
คำถาม
How do centralized and decentralized architectures differ?
คำตอบ
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
การ์ด 93
คำถาม
What does a certificate revocation list publish?
คำตอบ
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
การ์ด 94
คำถาม
What is a legal hold?
คำตอบ
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
การ์ด 95
คำถาม
What is exposure factor in quantitative risk analysis?
คำตอบ
The estimated percentage of an asset's value lost in one event.
การ์ด 96
คำถาม
What is decentralized architecture?
คำตอบ
Control or service responsibility is distributed across multiple independent components or locations.
การ์ด 97
คำถาม
What is tokenization?
คำตอบ
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
การ์ด 98
คำถาม
How can automation act as a workforce multiplier?
คำตอบ
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
การ์ด 99
คำถาม
What can endpoint process logs reveal?
คำตอบ
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
การ์ด 100
คำถาม
What does the CIA triad protect?
คำตอบ
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
การ์ด 101
คำถาม
How does data masking protect information?
คำตอบ
It hides selected values or characters while preserving a usable representation.
การ์ด 102
คำถาม
How can a national requirement affect security governance?
คำตอบ
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
การ์ด 103
คำถาม
What do integrations and APIs provide to security orchestration?
คำตอบ
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
การ์ด 104
คำถาม
What makes a compliance report external?
คำตอบ
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
การ์ด 105
คำถาม
What does a cryptographic algorithm define?
คำตอบ
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
การ์ด 106
คำถาม
Why compare systems with a secure baseline regularly?
คำตอบ
To detect drift, unauthorized changes, and missing hardening.
การ์ด 107
คำถาม
What does integrity protect?
คำตอบ
The accuracy and completeness of data and systems against unauthorized change.
การ์ด 108
คำถาม
What does vulnerability classification organize?
คำตอบ
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
การ์ด 109
คำถาม
What does a password standard define?
คำตอบ
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
การ์ด 110
คำถาม
What technology capacity must a recovery design plan for?
คำตอบ
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
การ์ด 111
คำถาม
What does a confidential data classification indicate?
คำตอบ
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
การ์ด 112
คำถาม
What makes a vendor assessment independent?
คำตอบ
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
การ์ด 113
คำถาม
What lets a worm spread without attaching itself to another file?
คำตอบ
It is a standalone program that replicates across reachable systems or services.
การ์ด 114
คำถาม
What is microsegmentation?
คำตอบ
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
การ์ด 115
คำถาม
What can application logs reveal?
คำตอบ
Transactions, errors, user actions, and application-specific security events.
การ์ด 116
คำถาม
What does deploying a secure baseline require?
คำตอบ
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
การ์ด 117
คำถาม
How can resource-provisioning automation improve security?
คำตอบ
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
การ์ด 118
คำถาม
What does availability protect?
คำตอบ
Reliable, timely access to systems and data when authorized users need them.
การ์ด 119
คำถาม
Why must a change request describe business impact?
คำตอบ
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
การ์ด 120
คำถาม
What does an authenticated vulnerability scan add?
คำตอบ
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
การ์ด 121
คำถาม
What does a change-management procedure specify?
คำตอบ
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
การ์ด 122
คำถาม
What is a sanction for noncompliance?
คำตอบ
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
การ์ด 123
คำถาม
How can email deliver a security attack?
คำตอบ
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
การ์ด 124
คำถาม
What is an internal compliance audit?
คำตอบ
An organization-led examination of whether selected operations and controls meet defined requirements.
การ์ด 125
คำถาม
What is a Trojan?
คำตอบ
Malware disguised as legitimate or desirable software.
การ์ด 126
คำถาม
What is clustering?
คำตอบ
Multiple systems work together to provide a service and tolerate member failure.
การ์ด 127
คำถาม
What makes data regulated?
คำตอบ
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
การ์ด 128
คำถาม
What does a wireless heat map show?
คำตอบ
Measured or modeled signal strength and coverage across a physical area.
การ์ด 129
คำถาม
How should vendor criticality affect due diligence?
คำตอบ
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
การ์ด 130
คำถาม
How can a digital signature support non-repudiation?
คำตอบ
It provides evidence that the holder of a private key signed specific data.
การ์ด 131
คำถาม
What should vulnerability prioritization consider beyond severity?
คำตอบ
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
การ์ด 132
คำถาม
What is a security guideline?
คำตอบ
Recommended practice that allows judgment unless adopted as a requirement.
การ์ด 133
คำถาม
What usually distinguishes a nation-state threat actor?
คำตอบ
Strategic objectives, substantial resources, patience, and advanced operational capability.
การ์ด 134
คำถาม
What is spyware?
คำตอบ
Software that secretly collects information about a user or system.
การ์ด 135
คำถาม
Why maintain an allow list for applications?
คำตอบ
Only explicitly approved software is permitted to execute.
การ์ด 136
คำถาม
How can an image become an attack vector?
คำตอบ
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
การ์ด 137
คำถาม
What makes a security control technical?
คำตอบ
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
การ์ด 138
คำถาม
What is identity proofing?
คำตอบ
Establishing that a person is who they claim to be before issuing an account or credential.
การ์ด 139
คำถาม
What is an automated security guardrail?
คำตอบ
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
การ์ด 140
คำถาม
Why assign an owner to a planned change?
คำตอบ
To make one party accountable for coordination, execution, and follow-through.
การ์ด 141
คำถาม
How can national privacy law affect data handling?
คำตอบ
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
การ์ด 142
คำถาม
What is continuity of operations?
คำตอบ
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
การ์ด 143
คำถาม
What security tradeoff comes with BYOD?
คำตอบ
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
การ์ด 144
คำถาม
How should policies and handbooks support security training?
คำตอบ
They provide accessible, current rules and reporting steps that training can apply to real situations.
การ์ด 145
คำถาม
What is a keylogger?
คำตอบ
A tool that records keystrokes to capture data such as credentials.
การ์ด 146
คำถาม
What makes information a trade secret?
คำตอบ
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
การ์ด 147
คำถาม
What does authentication establish?
คำตอบ
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
การ์ด 148
คำถาม
What risk comes from an untrusted file attachment?
คำตอบ
Opening or parsing it can execute malicious code or expose data.
การ์ด 149
คำถาม
How does risk tolerance affect vulnerability remediation?
คำตอบ
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
การ์ด 150
คำถาม
How can a global requirement affect security governance?
คำตอบ
It can require a common control and oversight approach across multiple countries while local obligations still apply.
การ์ด 151
คำถาม
Why should questionnaire answers be supported by evidence?
คำตอบ
Self-assertions alone may not prove that controls are designed or operating effectively.
การ์ด 152
คำถาม
What is an independent third-party audit?
คำตอบ
An external party with suitable independence examines evidence against defined criteria.
การ์ด 153
คำถาม
What do account provisioning and deprovisioning do?
คำตอบ
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
การ์ด 154
คำถาม
What is an unskilled attacker commonly called?
คำตอบ
A script kiddie: someone who relies on tools or instructions created by others.
การ์ด 155
คำถาม
What is a rootkit?
คำตอบ
Software designed to maintain privileged, concealed access by altering or subverting the system.
การ์ด 156
คำถาม
What does an access control list enforce?
คำตอบ
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
การ์ด 157
คำถาม
What should system security monitoring observe?
คำตอบ
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
การ์ด 158
คำถาม
What can operating-system security logs reveal?
คำตอบ
Authentication, privilege use, policy changes, services, and other host security events.
การ์ด 159
คำถาม
Why isolate operational technology from general business networks?
คำตอบ
To limit attack paths into safety- and availability-critical processes.
การ์ด 160
คำถาม
What is the COPE mobile deployment model?
คำตอบ
The organization owns the device but permits defined personal use while retaining management control.
การ์ด 161
คำถาม
What security work belongs in asset acquisition and procurement?
คำตอบ
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
การ์ด 162
คำถาม
How can user-provisioning automation improve security?
คำตอบ
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
การ์ด 163
คำถาม
What people capacity must a continuity plan account for?
คำตอบ
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
การ์ด 164
คำถาม
What do authorization models define?
คำตอบ
How permissions are assigned to authenticated subjects and evaluated for requested actions.
การ์ด 165
คำถาม
Why are removable devices an attack vector?
คำตอบ
They can introduce malware or remove data while bypassing network controls.
การ์ด 166
คำถาม
What should predeployment change-test results show?
คำตอบ
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
การ์ด 167
คำถาม
What is the time-of-use stage of a race-condition vulnerability?
คำตอบ
The application acts on a resource after the check, creating a gap in which another process may change the resource.
การ์ด 168
คำถาม
What is data in use?
คำตอบ
Data actively processed in memory or by an application.
การ์ด 169
คำถาม
What does open-source vulnerability intelligence contribute?
คำตอบ
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
การ์ด 170
คำถาม
What can file-integrity monitoring detect?
คำตอบ
Unexpected changes to protected files, directories, or configuration.
การ์ด 171
คำถาม
Why should deprovisioning be prompt?
คำตอบ
Former users or roles should not retain usable access.
การ์ด 172
คำถาม
What is an acceptable use policy?
คำตอบ
Rules for permitted and prohibited use of organizational systems, accounts, and data.
การ์ด 173
คำถาม
What makes a compliance report internal?
คำตอบ
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
การ์ด 174
คำถาม
What is a logic bomb?
คำตอบ
Malicious code that activates when a specified condition or time is reached.
การ์ด 175
คำถาม
What does a right-to-audit clause provide?
คำตอบ
Contractual authority to inspect or obtain evidence about agreed controls.
การ์ด 176
คำถาม
Where should a forward proxy sit in an enterprise traffic path?
คำตอบ
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
การ์ด 177
คำถาม
Which cues should make a message look suspicious?
คำตอบ
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
การ์ด 178
คำถาม
What makes a security control managerial?
คำตอบ
It directs risk and governance through decisions such as policies, assessments, and oversight.
การ์ด 179
คำถาม
What is the CYOD mobile deployment model?
คำตอบ
The user selects from organization-approved device options that remain subject to corporate security requirements.
การ์ด 180
คำถาม
How does client-based vulnerable software differ from an agentless exposure?
คำตอบ
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
การ์ด 181
คำถาม
What makes a risk assessment recurring?
คำตอบ
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
การ์ด 182
คำถาม
What does a defensive penetration-testing team practice?
คำตอบ
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
การ์ด 183
คำถาม
In a zero-trust data plane, what can the subject or system represent?
คำตอบ
The user, device, workload, or service requesting access to a protected resource.
การ์ด 184
คำถาม
What primarily motivates a hacktivist?
คำตอบ
A political, social, or ideological cause.
การ์ด 185
คำถาม
What is bloatware?
คำตอบ
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
การ์ด 186
คำถาม
Why keep endpoint-protection signatures and engines current?
คำตอบ
They need current detection logic to recognize newly identified malware and exploit behavior.
การ์ด 187
คำถาม
What should application security monitoring observe?
คำตอบ
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
การ์ด 188
คำถาม
What is role-based access control?
คำตอบ
Permissions are assigned to roles, and identities receive access through their roles.
การ์ด 189
คำถาม
What is geographic dispersal?
คำตอบ
Placing redundant resources in separate locations so one regional event does not affect all copies.
การ์ด 190
คำถาม
What is a malicious update?
คำตอบ
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
การ์ด 191
คำถาม
What does static application analysis inspect?
คำตอบ
Source code, bytecode, or compiled code without executing the application.
การ์ด 192
คำถาม
What does a firewall access list define?
คำตอบ
An ordered set of traffic-matching conditions and the action applied when a condition matches.
การ์ด 193
คำถาม
What does a disaster recovery policy establish?
คำตอบ
Management expectations for restoring technology and data after a disruptive event.
การ์ด 194
คำถาม
How does logical segmentation separate workloads that share physical infrastructure?
คำตอบ
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
การ์ด 195
คำถาม
How should IDS and IPS placement differ?
คำตอบ
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
การ์ด 196
คำถาม
What should automated ticket creation capture?
คำตอบ
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
การ์ด 197
คำถาม
What makes information intellectual property?
คำตอบ
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
การ์ด 198
คำถาม
What is a backout plan?
คำตอบ
Predefined steps for safely reversing a failed or harmful change.
การ์ด 199
คำถาม
Why is an unsecure wireless network an attack vector?
คำตอบ
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
การ์ด 200
คำถาม
What is physical brute force?
คำตอบ
Using force to defeat a lock, barrier, enclosure, or other physical control.
การ์ด 201
คำถาม
What is application sandboxing?
คำตอบ
Running code in a constrained environment with limited access to the host and data.
การ์ด 202
คำถาม
Why assign an asset owner?
คำตอบ
One accountable party must decide its use, protection, and lifecycle.
การ์ด 203
คำถาม
What happens during risk identification?
คำตอบ
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
การ์ด 204
คำถาม
What should an SLA state about breach notification?
คำตอบ
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
การ์ด 205
คำถาม
How do due diligence and due care differ in compliance?
คำตอบ
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
การ์ด 206
คำถาม
What is attribute-based access control?
คำตอบ
Policy evaluates attributes of the subject, resource, action, and environment.
การ์ด 207
คำถาม
What does a zero-trust policy engine do?
คำตอบ
It evaluates policy and signals to decide whether access should be allowed.
การ์ด 208
คำถาม
How does a cloud responsibility matrix allocate security duties?
คำตอบ
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
การ์ด 209
คำถาม
Where should a load balancer sit in a service path?
คำตอบ
In front of service instances so it can route requests to healthy backends.
การ์ด 210
คำถาม
What should the security team do with a reported suspicious message?
คำตอบ
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
การ์ด 211
คำถาม
What makes an operating-system vulnerability high impact?
คำตอบ
It can affect every application and security control that relies on the compromised OS.
การ์ด 212
คำถาม
What does dynamic application analysis inspect?
คำตอบ
The behavior and externally visible weaknesses of a running application.
การ์ด 213
คำถาม
How can false-positive trends affect IDS or IPS tuning?
คำตอบ
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
การ์ด 214
คำถาม
What does a business continuity policy establish?
คำตอบ
Management expectations for sustaining and restoring critical business functions.
การ์ด 215
คำถาม
What is a hot recovery site?
คำตอบ
A ready, synchronized environment intended to take over quickly.
การ์ด 216
คำถาม
What makes an insider threat distinct?
คำตอบ
The actor has legitimate access or organizational knowledge that can be misused.
การ์ด 217
คำถาม
What is RFID cloning?
คำตอบ
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
การ์ด 218
คำถาม
Why apply vendor security updates promptly?
คำตอบ
They remove known weaknesses before attackers can exploit the unpatched exposure.
การ์ด 219
คำถาม
What should infrastructure security monitoring observe?
คำตอบ
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
การ์ด 220
คำถาม
What can firewall logs reveal?
คำตอบ
Allowed or denied network connections across controlled boundaries.
การ์ด 221
คำถาม
Why minimize open service ports?
คำตอบ
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
การ์ด 222
คำถาม
What is threat hunting?
คำตอบ
A proactive search for evidence of malicious activity that existing detections have not confirmed.
การ์ด 223
คำถาม
What triggers an ad hoc risk assessment?
คำตอบ
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
การ์ด 224
คำถาม
What makes an assessment external?
คำตอบ
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
การ์ด 225
คำถาม
What is data sovereignty?
คำตอบ
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
การ์ด 226
คำถาม
What security boundary does a cellular connection create for a mobile device?
คำตอบ
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
การ์ด 227
คำถาม
What makes a security control operational?
คำตอบ
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
การ์ด 228
คำถาม
What is discretionary access control?
คำตอบ
A resource owner can decide who receives access, within system policy.
การ์ด 229
คำถาม
How can careful automation support employee retention?
คำตอบ
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
การ์ด 230
คำถาม
Why does ease of deployment matter in an architecture decision?
คำตอบ
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
การ์ด 231
คำถาม
What tradeoff comes with placing an NGFW inline?
คำตอบ
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
การ์ด 232
คำถาม
What does a zero-trust policy administrator do?
คำตอบ
It carries out the policy engine's decision, such as creating or ending a session.
การ์ด 233
คำถาม
What should a master service agreement define for data return and deletion?
คำตอบ
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
การ์ด 234
คำถาม
What is an environmental physical attack?
คำตอบ
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
การ์ด 235
คำถาม
When should a maintenance window be chosen?
คำตอบ
When disruption and rollback can be managed with the least business impact.
การ์ด 236
คำถาม
What is memory injection?
คำตอบ
Placing malicious code or data into another process's memory so it executes in that process's context.
การ์ด 237
คำถาม
What does software composition analysis find?
คำตอบ
Known risks and license information in third-party dependencies.
การ์ด 238
คำถาม
What is DNS filtering?
คำตอบ
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
การ์ด 239
คำถาม
What should an incident response policy establish?
คำตอบ
Authority, scope, reporting duties, and organizational commitment for incident handling.
การ์ด 240
คำถาม
How can noncompliance cause reputational damage?
คำตอบ
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
การ์ด 241
คำถาม
What does full-disk encryption protect?
คำตอบ
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
การ์ด 242
คำถาม
Why are default credentials dangerous?
คำตอบ
They are widely known or easily discovered and often remain unchanged.
การ์ด 243
คำถาม
What makes a risk assessment one-time?
คำตอบ
It evaluates a defined decision or scope once without an established repeating cadence.
การ์ด 244
คำถาม
What is a warm recovery site?
คำตอบ
A partially equipped environment that needs some data restoration or configuration before use.
การ์ด 245
คำถาม
What does application input validation do?
คำตอบ
It checks that input matches the expected type, length, range, and format before use.
การ์ด 246
คำถาม
What should an asset inventory record besides a device name?
คำตอบ
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
การ์ด 247
คำถาม
What is mandatory access control?
คำตอบ
A central authority enforces access through labels and rules that ordinary owners cannot override.
การ์ด 248
คำถาม
What security benefit does infrastructure as code provide?
คำตอบ
Repeatable, reviewable deployments that reduce undocumented configuration drift.
การ์ด 249
คำถาม
When should a public service control fail closed?
คำตอบ
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
การ์ด 250
คำถาม
What should users do with a suspicious message?
คำตอบ
Report it through the approved channel without interacting with its links or attachments.
การ์ด 251
คำถาม
What usually motivates organized cybercrime?
คำตอบ
Financial gain through scalable or repeatable criminal activity.
การ์ด 252
คำถาม
How can malicious code support a network attack?
คำตอบ
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
การ์ด 253
คำถาม
When is virtual patching useful?
คำตอบ
When a network or application control can block exploit traffic before the underlying system can be patched.
การ์ด 254
คำถาม
What does security-monitoring reporting provide?
คำตอบ
A summarized, audience-appropriate view of findings, trends, risk, and response status.
การ์ด 255
คำถาม
What does data geolocation identify?
คำตอบ
The physical or legal location where data is stored, processed, or transmitted.
การ์ด 256
คำถาม
What does a zero-trust policy enforcement point do?
คำตอบ
It enables, monitors, and terminates the connection between a subject and a resource.
การ์ด 257
คำถาม
What is cryptographic key exchange?
คำตอบ
A method for parties to establish shared key material over an untrusted channel.
การ์ด 258
คำถาม
How can a vendor become a supply-chain attack vector?
คำตอบ
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
การ์ด 259
คำถาม
Why can legacy hardware remain vulnerable?
คำตอบ
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
การ์ด 260
คำถาม
What can proprietary vulnerability intelligence add beyond open sources?
คำตอบ
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
การ์ด 261
คำถาม
How does a centralized proxy apply web filtering?
คำตอบ
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
การ์ด 262
คำถาม
How can continuous integration and testing improve security automation?
คำตอบ
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
การ์ด 263
คำถาม
What is containment?
คำตอบ
Limiting an incident's spread or damage while preserving necessary operations and evidence.
การ์ด 264
คำถาม
What is a software development lifecycle policy meant to ensure?
คำตอบ
Security requirements and checks are integrated throughout design, development, release, and maintenance.
การ์ด 265
คำถาม
What makes risk assessment continuous?
คำตอบ
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
การ์ด 266
คำถาม
What is a memorandum of agreement?
คำตอบ
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
การ์ด 267
คำถาม
What makes a penetration test integrated?
คำตอบ
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
การ์ด 268
คำถาม
How does a DNS amplification attack magnify traffic?
คำตอบ
It sends small spoofed queries that trigger larger replies toward the victim.
การ์ด 269
คำถาม
Why does ease of recovery matter in an architecture decision?
คำตอบ
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
การ์ด 270
คำถาม
What does 802.1X control before a device receives normal network access?
คำตอบ
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
การ์ด 271
คำถาม
What is rule-based access control?
คำตอบ
System-wide rules grant or deny access based on conditions such as network, time, or action.
การ์ด 272
คำถาม
What is mobile device management?
คำตอบ
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
การ์ด 273
คำถาม
What tradeoff comes with a cold recovery site?
คำตอบ
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
การ์ด 274
คำถาม
Why identify stakeholders before approving a security-sensitive change?
คำตอบ
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
การ์ด 275
คำถาม
How do attestation and acknowledgement differ?
คำตอบ
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
การ์ด 276
คำถาม
What does zero-trust adaptive identity mean?
คำตอบ
Access decisions adjust to current risk signals rather than relying only on a static login.
การ์ด 277
คำถาม
What makes a security control physical?
คำตอบ
It protects facilities or equipment through a tangible barrier or mechanism.
การ์ด 278
คำถาม
What is geo-fencing for data?
คำตอบ
Enforcing location-based boundaries on where data or services may be accessed or operated.
การ์ด 279
คำถาม
What does a Trusted Platform Module protect?
คำตอบ
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
การ์ด 280
คำถาม
Why can a managed service provider amplify risk?
คำตอบ
Its privileged access and shared tooling can provide a path into many customers.
การ์ด 281
คำถาม
What does probability express in risk analysis?
คำตอบ
A quantified chance that a defined event will occur within stated conditions or time.
การ์ด 282
คำถาม
Why can shadow IT create a threat?
คำตอบ
It bypasses security review, inventory, monitoring, and supported configuration.
การ์ด 283
คำถาม
What is on-path interception?
คำตอบ
An attacker positions between communicating parties to observe or alter traffic.
การ์ด 284
คำถาม
Why include encryption in a system-hardening baseline?
คำตอบ
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
การ์ด 285
คำถาม
Why tune security alerts?
คำตอบ
To keep useful detections while reducing noise that wastes analyst attention.
การ์ด 286
คำถาม
What can IPS or IDS logs contribute to an investigation?
คำตอบ
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
การ์ด 287
คำถาม
What is VM escape?
คำตอบ
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
การ์ด 288
คำถาม
How can segmentation reduce vulnerability exposure before a patch is available?
คำตอบ
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
การ์ด 289
คำถาม
Why should firewall policy name the required ports and protocols explicitly?
คำตอบ
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
การ์ด 290
คำถาม
What is a change management policy meant to control?
คำตอบ
How changes are requested, assessed, approved, tested, implemented, and reviewed.
การ์ด 291
คำถาม
What is a hybrid-cloud architecture?
คำตอบ
An environment that integrates private or on-premises resources with public cloud services.
การ์ด 292
คำถาม
How do AH and ESP differ in the security services they can provide?
คำตอบ
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
การ์ด 293
คำถาม
What makes user behavior risky?
คำตอบ
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
การ์ด 294
คำถาม
What is least privilege?
คำตอบ
Granting only the access needed for the required task and no more.
การ์ด 295
คำถาม
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
คำตอบ
Transmission to HTTPS, script access, and cross-site sending, respectively.
การ์ด 296
คำถาม
Why discover unmanaged assets?
คำตอบ
Unknown systems cannot be patched, monitored, or governed reliably.
การ์ด 297
คำถาม
What is a service-level agreement?
คำตอบ
Measurable service commitments and remedies, such as availability or response targets.
การ์ด 298
คำถาม
What should govern automated security escalation?
คำตอบ
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
การ์ด 299
คำถาม
What is platform diversity as a resilience strategy?
คำตอบ
Using different implementations so one common flaw or failure is less likely to affect every copy.
การ์ด 300
คำถาม
How can replayed session material affect an application?
คำตอบ
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
การ์ด 301
คำถาม
What is an implicit trust zone in zero trust?
คำตอบ
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
การ์ด 302
คำถาม
What does salting a password hash accomplish?
คำตอบ
It makes identical passwords hash differently and defeats precomputed hash tables.
การ์ด 303
คำถาม
What is spear phishing?
คำตอบ
Phishing tailored to a specific person, role, or organization.
การ์ด 304
คำถาม
What is eradication?
คำตอบ
Removing the attacker's access, malicious artifacts, and exploited conditions.
การ์ด 305
คำถาม
Who is a risk owner?
คำตอบ
The person accountable for deciding and monitoring how a specific risk is handled.
การ์ด 306
คำถาม
What does a partially known penetration-test environment provide?
คำตอบ
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
การ์ด 307
คำถาม
What is a microservices architecture?
คำตอบ
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
การ์ด 308
คำถาม
What is a jump server?
คำตอบ
A hardened intermediary used to reach systems in a restricted management network.
การ์ด 309
คำถาม
What can happen when a configuration change is made without dependency analysis?
คำตอบ
A downstream service can fail even when the changed component works.
การ์ด 310
คำถาม
What is resource reuse exposure?
คำตอบ
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
การ์ด 311
คำถาม
Why does financial information require explicit protection?
คำตอบ
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
การ์ด 312
คำถาม
What does CVE provide?
คำตอบ
A common identifier for a publicly disclosed vulnerability.
การ์ด 313
คำถาม
Where can DLP controls operate?
คำตอบ
On endpoints, networks, email, and cloud services, depending on the product and visibility.
การ์ด 314
คำถาม
What does privileged password vaulting protect?
คำตอบ
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
การ์ด 315
คำถาม
What does an access-control standard define?
คำตอบ
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
การ์ด 316
คำถาม
How can automation support compliance monitoring?
คำตอบ
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
การ์ด 317
คำถาม
What does static code analysis examine?
คำตอบ
Source or compiled code for weakness patterns without executing the application.
การ์ด 318
คำถาม
What actor attribute describes funding, time, and personnel?
คำตอบ
Resources.
การ์ด 319
คำถาม
What is DNS poisoning?
คำตอบ
Introducing false DNS data so names resolve to attacker-chosen destinations.
การ์ด 320
คำถาม
Why change default credentials during hardening?
คำตอบ
Default secrets are predictable and commonly targeted.
การ์ด 321
คำถาม
What does quarantine do after a security alert?
คำตอบ
It restricts a suspected asset or object while analysts validate and remediate the risk.
การ์ด 322
คำถาม
What does key stretching do for stored passwords?
คำตอบ
It deliberately makes each password guess more computationally expensive.
การ์ด 323
คำถาม
What is smishing?
คำตอบ
Phishing delivered through SMS or another text-messaging service.
การ์ด 324
คำถาม
What is qualitative risk analysis?
คำตอบ
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
การ์ด 325
คำถาม
What is a master service agreement?
คำตอบ
An umbrella contract establishing general legal and commercial terms for ongoing work.
การ์ด 326
คำถาม
What is threat scope reduction?
คำตอบ
Narrowing the systems, privileges, or paths an attacker can reach.
การ์ด 327
คำถาม
Why use a third-party cloud service instead of building locally?
คำตอบ
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
การ์ด 328
คำถาม
What should determine security-device placement?
คำตอบ
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
การ์ด 329
คำถาม
What does situational awareness mean for a user?
คำตอบ
Notice the people, devices, requests, location, and context around a task before acting.
การ์ด 330
คำถาม
What does a failover test validate?
คำตอบ
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
การ์ด 331
คำถาม
What is a preventive control meant to do?
คำตอบ
Stop an unwanted event before it succeeds.
การ์ด 332
คำถาม
What is just-in-time privileged access?
คำตอบ
Elevated access is granted only when needed and expires after a short approved period.
การ์ด 333
คำถาม
What safeguard should security-group automation enforce?
คำตอบ
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
การ์ด 334
คำถาม
How does a reflected DDoS attack hide and multiply sources?
คำตอบ
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
การ์ด 335
คำถาม
What is a security misconfiguration?
คำตอบ
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
การ์ด 336
คำถาม
Why can the same vulnerability have different organizational impact?
คำตอบ
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
การ์ด 337
คำถาม
What does URL scanning evaluate before a user opens a web destination?
คำตอบ
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
การ์ด 338
คำถาม
What is the board's security governance role?
คำตอบ
Provide oversight, set risk direction, and hold executives accountable.
การ์ด 339
คำถาม
What does code signing establish?
คำตอบ
That code came from the holder of the signing key and has not changed since signing.
การ์ด 340
คำถาม
How should an asset's classification affect security operations?
คำตอบ
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
การ์ด 341
คำถาม
How does encryption protect data?
คำตอบ
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
การ์ด 342
คำถาม
What is a secure enclave?
คำตอบ
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
การ์ด 343
คำถาม
What is business email compromise?
คำตอบ
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
การ์ด 344
คำถาม
What is recovery in incident response?
คำตอบ
Restoring services safely, monitoring them, and returning to normal operations.
การ์ด 345
คำถาม
How is single loss expectancy commonly estimated?
คำตอบ
Asset value multiplied by the exposure factor.
การ์ด 346
คำถาม
What does an unknown penetration-test environment provide?
คำตอบ
The tester begins with little or no internal information, modeling an external attacker's discovery process.
การ์ด 347
คำถาม
What security boundary does a hypervisor provide?
คำตอบ
It isolates virtual machines while controlling their access to shared hardware.
การ์ด 348
คำถาม
Why does a TLS tunnel not protect a compromised endpoint?
คำตอบ
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
การ์ด 349
คำถาม
Why update diagrams after an infrastructure change?
คำตอบ
Operations and incident responders need the documentation to match the deployed environment.
การ์ด 350
คำถาม
What does privacy ownership assign?
คำตอบ
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
การ์ด 351
คำถาม
What does a security control gap analysis compare?
คำตอบ
The controls required for the target state with the controls currently in place.
การ์ด 352
คำถาม
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
คำตอบ
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
การ์ด 353
คำถาม
What is application privilege escalation?
คำตอบ
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
การ์ด 354
คำถาม
What risk remains when unnecessary software is left installed?
คำตอบ
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
การ์ด 355
คำถาม
What does SCAP standardize?
คำตอบ
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
การ์ด 356
คำถาม
What can packet capture reveal?
คำตอบ
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
การ์ด 357
คำถาม
What makes a privileged credential ephemeral?
คำตอบ
It is created for a limited task or session and expires or is destroyed automatically after that use.
การ์ด 358
คำถาม
How do a statement of work and a work order differ?
คำตอบ
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
การ์ด 359
คำถาม
Why might multi-cloud improve resilience?
คำตอบ
A provider-wide failure need not stop workloads that can run independently elsewhere.
การ์ด 360
คำถาม
How can a service provider introduce a supply-chain vulnerability?
คำตอบ
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
การ์ด 361
คำถาม
What is a false positive in vulnerability scanning?
คำตอบ
A reported weakness that is not actually present or exploitable in the assessed context.
การ์ด 362
คำถาม
How do EDR and XDR differ?
คำตอบ
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
การ์ด 363
คำถาม
What should onboarding and offboarding procedures coordinate?
คำตอบ
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
การ์ด 364
คำถาม
How should an organization harden managed mobile devices?
คำตอบ
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
การ์ด 365
คำถาม
What is a certificate signing request?
คำตอบ
A request containing a public key and subject information for a certificate authority to sign.
การ์ด 366
คำถาม
What is pretexting?
คำตอบ
Using a fabricated role or situation to make a request seem legitimate.
การ์ด 367
คำถาม
How is annualized loss expectancy commonly estimated?
คำตอบ
Single loss expectancy multiplied by annualized rate of occurrence.
การ์ด 368
คำถาม
What security consequence follows from containers sharing a kernel?
คำตอบ
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
การ์ด 369
คำถาม
Where does 802.1X enforce a network admission decision?
คำตอบ
At the controlled switch port or wireless access point before normal network access is granted.
การ์ด 370
คำถาม
What should insider-threat awareness teach?
คำตอบ
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
การ์ด 371
คำถาม
What access action is suitable for careful automation?
คำตอบ
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
การ์ด 372
คำถาม
What is an evil twin?
คำตอบ
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 การ์ด
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
เรียนเด็คนี้ฟรีNibomo จะเปิดขึ้นเพื่อให้คุณเริ่มเรียนได้ทันที
การ์ด 373
คำถาม
Does non-human-readable data need less protection?
คำตอบ
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
การ์ด 374
คำถาม
What does authenticating a system establish?
คำตอบ
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
การ์ด 375
คำถาม
What does LDAP provide in identity systems?
คำตอบ
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
การ์ด 376
คำถาม
What is a deterrent control meant to do?
คำตอบ
Discourage an attacker from attempting an unwanted action.
การ์ด 377
คำถาม
Why update procedures after changing a security control?
คำตอบ
Staff need accurate steps for operating, monitoring, and recovering the new control.
การ์ด 378
คำถาม
How does OCSP differ from a certificate revocation list?
คำตอบ
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
การ์ด 379
คำถาม
What is the goal of data exfiltration?
คำตอบ
Remove data from its authorized environment without permission.
การ์ด 380
คำถาม
What is a watering-hole attack?
คำตอบ
Compromising a site frequented by the intended targets so their visits expose them.
การ์ด 381
คำถาม
How can a hardware provider introduce a supply-chain vulnerability?
คำตอบ
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
การ์ด 382
คำถาม
What is application forgery?
คำตอบ
Creating or altering a request, token, or object so the application treats it as authentic.
การ์ด 383
คำถาม
How does least privilege mitigate compromise?
คำตอบ
It limits the actions and resources available to a compromised account or process.
การ์ด 384
คำถาม
What is serverless computing?
คำตอบ
A model where the provider manages servers and the customer deploys event-driven code or functions.
การ์ด 385
คำถาม
What makes an infrastructure control effective for a specific risk?
คำตอบ
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
การ์ด 386
คำถาม
What does parallel recovery processing test?
คำตอบ
Whether primary and alternate environments can run together consistently before a controlled cutover.
การ์ด 387
คำถาม
Which password-authentication method does WPA3-Personal use?
คำตอบ
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
การ์ด 388
คำถาม
How does data retention affect asset disposal?
คำตอบ
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
การ์ด 389
คำถาม
What is a false negative in vulnerability scanning?
คำตอบ
A real weakness that the assessment fails to report.
การ์ด 390
คำถาม
What does recurring security scanning add to monitoring?
คำตอบ
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
การ์ด 391
คำถาม
What should guide port selection for a secure protocol?
คำตอบ
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
การ์ด 392
คำถาม
What does forensic acquisition create?
คำตอบ
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
การ์ด 393
คำถาม
How do system owners and data owners divide security accountability?
คำตอบ
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
การ์ด 394
คำถาม
What does likelihood express in risk analysis?
คำตอบ
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
การ์ด 395
คำถาม
What is a memorandum of understanding?
คำตอบ
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
การ์ด 396
คำถาม
What does the right to be forgotten generally require?
คำตอบ
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
การ์ด 397
คำถาม
What does an audit committee oversee?
คำตอบ
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
การ์ด 398
คำถาม
What does identity interoperability require?
คำตอบ
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
การ์ด 399
คำถาม
How does a bollard protect a facility?
คำตอบ
It blocks or redirects vehicles before they can reach a protected area.
การ์ด 400
คำถาม
How can hashing protect a downloaded file?
คำตอบ
A trusted digest lets the recipient detect whether the file changed.
การ์ด 401
คำถาม
What is a credential replay attack?
คำตอบ
Using captured valid credentials or tokens again without needing to discover the secret.
การ์ด 402
คำถาม
How can automation complexity create security risk?
คำตอบ
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
การ์ด 403
คำถาม
What must an architecture provide when a component cannot be patched?
คำตอบ
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
การ์ด 404
คำถาม
What makes remote access secure?
คำตอบ
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
การ์ด 405
คำถาม
What should users verify before connecting removable media or a cable?
คำตอบ
That the device and connection are approved, expected, and handled under organizational policy.
การ์ด 406
คำถาม
What is a self-signed certificate?
คำตอบ
A certificate signed by its own private key rather than by a separate trusted issuer.
การ์ด 407
คำถาม
What is brand impersonation?
คำตอบ
Using a trusted organization's identity or look to deceive people.
การ์ด 408
คำถาม
What characterizes a conservative risk appetite?
คำตอบ
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
การ์ด 409
คำถาม
What should a managed mobile device verify before using Wi-Fi?
คำตอบ
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
การ์ด 410
คำถาม
What is a zero-day vulnerability?
คำตอบ
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
การ์ด 411
คำถาม
What does verification confirm after vulnerability remediation?
คำตอบ
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
การ์ด 412
คำถาม
What is user and entity behavior analytics?
คำตอบ
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
การ์ด 413
คำถาม
What does a physical security policy establish?
คำตอบ
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
การ์ด 414
คำถาม
What does a UPS provide?
คำตอบ
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
การ์ด 415
คำถาม
What is a nondisclosure agreement?
คำตอบ
A contract restricting use and disclosure of defined confidential information.
การ์ด 416
คำถาม
What should be checked before assigning a user permission?
คำตอบ
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
การ์ด 417
คำถาม
How does espionage differ from ordinary theft?
คำตอบ
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
การ์ด 418
คำถาม
What is password spraying?
คำตอบ
Trying a small set of common passwords across many accounts to avoid lockouts.
การ์ด 419
คำถาม
What is the purpose of system isolation during an incident?
คำตอบ
Stop harmful communication while preserving the system for response and investigation.
การ์ด 420
คำถาม
What is a security benchmark?
คำตอบ
A documented set of recommended configuration checks for a platform or product.
การ์ด 421
คำถาม
Which metadata fields give a log record investigative context?
คำตอบ
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
การ์ด 422
คำถาม
What does an access-control vestibule prevent?
คำตอบ
It limits tailgating by allowing controlled passage through one door at a time.
การ์ด 423
คำถาม
What is version control's security value for configuration?
คำตอบ
It preserves attributable history and enables review or rollback of changes.
การ์ด 424
คำถาม
Why use both internal and external compliance monitoring?
คำตอบ
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
การ์ด 425
คำถาม
What distinguishes on-premises architecture?
คำตอบ
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
การ์ด 426
คำถาม
What risk can split tunneling add to a VPN?
คำตอบ
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
การ์ด 427
คำถาม
What is a certificate root of trust?
คำตอบ
A trusted root certificate or key from which a client validates a certificate chain.
การ์ด 428
คำถาม
What is typosquatting?
คำตอบ
Registering a look-alike domain based on common typing errors or visual similarity.
การ์ด 429
คำถาม
What is root-cause analysis?
คำตอบ
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
การ์ด 430
คำถาม
What is risk tolerance?
คำตอบ
The acceptable variation or boundary around a specific objective or risk area.
การ์ด 431
คำถาม
What is a security self-assessment?
คำตอบ
A structured internal evaluation in which the organization measures its own controls against selected criteria.
การ์ด 432
คำถาม
What does data masking change?
คำตอบ
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
การ์ด 433
คำถาม
How do wireless authentication protocols let clients prove identity securely?
คำตอบ
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
การ์ด 434
คำถาม
Why reconcile inventory with network discovery?
คำตอบ
Differences expose missing records, retired systems, or unauthorized devices.
การ์ด 435
คำถาม
Why does sideloading raise mobile risk?
คำตอบ
It can bypass store review, signing policy, and managed application controls.
การ์ด 436
คำถาม
What does an information-sharing organization add to vulnerability management?
คำตอบ
Sector or community intelligence about relevant threats, incidents, and defensive action.
การ์ด 437
คำถาม
What does a web-filter block rule specify?
คำตอบ
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
การ์ด 438
คำถาม
How do data custodians and data stewards differ?
คำตอบ
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
การ์ด 439
คำถาม
What is a brute-force password attack?
คำตอบ
Systematically trying many candidate secrets against an account or protected value.
การ์ด 440
คำถาม
What is a compensating control?
คำตอบ
An alternative safeguard used when the preferred control is impractical or unavailable.
การ์ด 441
คำถาม
How can location act as an authentication factor?
คำตอบ
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
การ์ด 442
คำถาม
Why must security automation remain supportable?
คำตอบ
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
การ์ด 443
คำถาม
What does a standby generator provide?
คำตอบ
Longer-duration power during a utility outage, after a startup delay.
การ์ด 444
คำถาม
What makes an architecture air-gapped?
คำตอบ
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
การ์ด 445
คำถาม
What is a software-defined WAN?
คำตอบ
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
การ์ด 446
คำถาม
What password-management behavior should awareness training reinforce?
คำตอบ
Use unique long passwords through an approved manager and report suspected compromise promptly.
การ์ด 447
คำถาม
What security value does fencing provide?
คำตอบ
It defines and delays entry across a physical perimeter.
การ์ด 448
คำถาม
What is a wildcard certificate?
คำตอบ
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
การ์ด 449
คำถาม
How does misinformation differ from disinformation?
คำตอบ
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
การ์ด 450
คำถาม
What is a risk threshold?
คำตอบ
A defined level that triggers escalation, treatment, or another required response.
การ์ด 451
คำถาม
What does a vendor penetration test contribute to assessment?
คำตอบ
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
การ์ด 452
คำถาม
What is the objective of a service-disruption attack?
คำตอบ
Make a system or business function unavailable or unreliable.
การ์ด 453
คำถาม
What is directory traversal?
คำตอบ
Manipulating a file path to reach files outside the directory the application intended to expose.
การ์ด 454
คำถาม
Why decommission an unsupported system?
คำตอบ
Removing it eliminates an exposure that can no longer be patched or securely maintained.
การ์ด 455
คำถาม
Why archive security-monitoring data?
คำตอบ
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
การ์ด 456
คำถาม
What role does RADIUS commonly play in enterprise Wi-Fi?
คำตอบ
It centralizes authentication, authorization information, and accounting for network access.
การ์ด 457
คำถาม
Why separate the requester and approver of a high-risk change?
คำตอบ
To reduce error, fraud, and unilateral unauthorized modification.
การ์ด 458
คำถาม
Why can a jailbroken device violate a security baseline?
คำตอบ
It weakens platform isolation and allows unapproved privileged changes.
การ์ด 459
คำถาม
When is tokenization especially useful?
คำตอบ
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
การ์ด 460
คำถาม
Why can dark-web intelligence affect vulnerability priority?
คำตอบ
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
การ์ด 461
คำถาม
What firewall policy should govern traffic from a screened subnet to internal systems?
คำตอบ
Deny it by default and allow only explicitly required flows.
การ์ด 462
คำถาม
What does SAML commonly carry?
คำตอบ
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
การ์ด 463
คำถาม
What does a security governance committee do?
คำตอบ
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
การ์ด 464
คำถาม
How can global privacy requirements affect one data process?
คำตอบ
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
การ์ด 465
คำถาม
What characterizes an IoT device?
คำตอบ
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
การ์ด 466
คำถาม
What is a unified threat management appliance?
คำตอบ
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
การ์ด 467
คำถาม
What does a hardware security module provide?
คำตอบ
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
การ์ด 468
คำถาม
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
คำตอบ
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
การ์ด 469
คำถาม
What is a tabletop exercise?
คำตอบ
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
การ์ด 470
คำถาม
What does a risk exemption authorize?
คำตอบ
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
การ์ด 471
คำถาม
What is a regulatory examination?
คำตอบ
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
การ์ด 472
คำถาม
What does physical video surveillance primarily provide?
คำตอบ
Detection and evidence of activity in monitored areas.
การ์ด 473
คำถาม
What is a birthday attack against a hash?
คำตอบ
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
การ์ด 474
คำถาม
Why keep backups both onsite and offsite?
คำตอบ
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
การ์ด 475
คำถาม
How does technical debt affect security automation?
คำตอบ
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
การ์ด 476
คำถาม
What should switch hardening restrict first?
คำตอบ
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
การ์ด 477
คำถาม
What should happen when an asset changes owners?
คำตอบ
Inventory, access, support responsibility, and data handling should be updated.
การ์ด 478
คำถาม
What does evidence of a vendor's internal audits contribute?
คำตอบ
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
การ์ด 479
คำถาม
What is identity attestation?
คำตอบ
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
การ์ด 480
คำถาม
Why can standard enterprise patching be unsafe for an RTOS device?
คำตอบ
A change can disrupt timing guarantees or certified operational behavior.
การ์ด 481
คำถาม
What is secure access service edge?
คำตอบ
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
การ์ด 482
คำถาม
What social-engineering habit should awareness training reinforce?
คำตอบ
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
การ์ด 483
คำถาม
How can a software provider introduce a supply-chain vulnerability?
คำตอบ
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
การ์ด 484
คำถาม
Why include internet exposure in remediation priority?
คำตอบ
A reachable vulnerable service usually has more attack opportunity than an isolated one.
การ์ด 485
คำถาม
What does a mail gateway inspect?
คำตอบ
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
การ์ด 486
คำถาม
What is a data controller?
คำตอบ
The entity that determines why and how personal data is processed.
การ์ด 487
คำถาม
How does blackmail motivate a cyberattack?
คำตอบ
The attacker threatens disclosure or harm unless the victim complies.
การ์ด 488
คำถาม
What is a downgrade attack?
คำตอบ
Forcing parties to use an older or weaker protocol or security mode.
การ์ด 489
คำถาม
How does encryption mitigate data exposure?
คำตอบ
It makes captured data unreadable without the required key.
การ์ด 490
คำถาม
How do network and web vulnerability scanners differ?
คำตอบ
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
การ์ด 491
คำถาม
How can vulnerability-scan data support an investigation?
คำตอบ
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
การ์ด 492
คำถาม
What is key escrow?
คำตอบ
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
การ์ด 493
คำถาม
Which human vector commonly uses a fake sign-in page to harvest credentials?
คำตอบ
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
การ์ด 494
คำถาม
What is risk avoidance?
คำตอบ
Stopping or not starting the activity that creates the risk.
การ์ด 495
คำถาม
What is data obfuscation?
คำตอบ
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
การ์ด 496
คำถาม
What is a directive control?
คำตอบ
A safeguard that tells people what behavior or action is required.
การ์ด 497
คำถาม
What does a security guard add that a camera cannot?
คำตอบ
Human judgment and an immediate physical response.
การ์ด 498
คำถาม
Why define restricted activities in change management?
คำตอบ
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
การ์ด 499
คำถาม
What contractual impact can noncompliance create?
คำตอบ
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
การ์ด 500
คำถาม
What should determine backup frequency?
คำตอบ
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
การ์ด 501
คำถาม
What should router hardening protect?
คำตอบ
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
การ์ด 502
คำถาม
What problem does OAuth 2.0 address?
คำตอบ
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
การ์ด 503
คำถาม
What does SCADA do?
คำตอบ
It provides supervisory monitoring and control across distributed industrial equipment.
การ์ด 504
คำถาม
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
คำตอบ
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
การ์ด 505
คำถาม
What distinguishes a computer virus?
คำตอบ
It attaches to a host file or program and spreads when that infected host executes or is shared.
การ์ด 506
คำถาม
What does a key management system coordinate?
คำตอบ
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
การ์ด 507
คำถาม
How can an unsecure wired network expose traffic?
คำตอบ
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
การ์ด 508
คำถาม
Why is vulnerable device firmware hard to remediate?
คำตอบ
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
การ์ด 509
คำถาม
What does patching change in vulnerability remediation?
คำตอบ
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
การ์ด 510
คำถาม
What does DMARC add to SPF and DKIM?
คำตอบ
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
การ์ด 511
คำถาม
How does automation improve security efficiency?
คำตอบ
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
การ์ด 512
คำถาม
What is a simulation exercise?
คำตอบ
A more realistic practice in which participants respond to injected events using operational processes.
การ์ด 513
คำถาม
What is a data processor?
คำตอบ
An entity that processes personal data on behalf of a controller.
การ์ด 514
คำถาม
What is risk mitigation?
คำตอบ
Reducing likelihood, impact, or both through controls or process changes.
การ์ด 515
คำถาม
Why monitor a vendor after onboarding?
คำตอบ
Security posture, ownership, services, incidents, and dependencies can change.
การ์ด 516
คำถาม
What does a physical penetration test assess?
คำตอบ
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
การ์ด 517
คำถาม
Why use access badges at a facility?
คำตอบ
To associate entry attempts with authorized identities and enforce access rules.
การ์ด 518
คำถาม
How does permission restriction protect data?
คำตอบ
Only authorized identities receive the actions and scope their roles require.
การ์ด 519
คำถาม
What is the usual objective of ransomware extortion?
คำตอบ
Force payment by denying access, threatening disclosure, or both.
การ์ด 520
คำถาม
What does impossible travel indicate?
คำตอบ
One identity appears to authenticate from distant locations too quickly for legitimate travel.
การ์ด 521
คำถาม
What is configuration enforcement?
คำตอบ
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
การ์ด 522
คำถาม
What does a web vulnerability scanner inspect?
คำตอบ
Running web behavior for issues such as unsafe input handling and insecure configuration.
การ์ด 523
คำถาม
How does cost affect an architecture choice?
คำตอบ
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
การ์ด 524
คำถาม
What does EAP provide with 802.1X?
คำตอบ
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
การ์ด 525
คำถาม
What should operational-security training help users protect?
คำตอบ
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
การ์ด 526
คำถาม
What does a time-of-day access rule do?
คำตอบ
Allows or denies a requested action according to an approved schedule.
การ์ด 527
คำถาม
What should cloud infrastructure hardening establish?
คำตอบ
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
การ์ด 528
คำถาม
What should an asset owner ensure during offboarding?
คำตอบ
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
การ์ด 529
คำถาม
Why encrypt backups?
คำตอบ
Backup media and transfers can expose the same sensitive data as production systems.
การ์ด 530
คำถาม
What is steganography?
คำตอบ
Hiding the existence of data inside another medium rather than merely encrypting its contents.
การ์ด 531
คำถาม
Which human vector uses a fabricated authority role to justify a sensitive request?
คำตอบ
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
การ์ด 532
คำถาม
Why does risk transfer not remove accountability?
คำตอบ
The organization can retain legal, reputational, operational, and oversight consequences.
การ์ด 533
คำถาม
Why validate a change after deployment?
คำตอบ
To confirm the intended result occurred without introducing unacceptable side effects.
การ์ด 534
คำถาม
What makes end-of-life hardware a security vulnerability?
คำตอบ
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
การ์ด 535
คำถาม
What does an audit add to remediation validation?
คำตอบ
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
การ์ด 536
คำถาม
Why can SPF pass while a message still impersonates a brand?
คำตอบ
SPF checks the envelope domain, which may differ from the visible From domain.
การ์ด 537
คำถาม
What role can a government entity have in security governance?
คำตอบ
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
การ์ด 538
คำถาม
How do data inventory and retention support privacy governance?
คำตอบ
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
การ์ด 539
คำถาม
What can concurrent sessions from distant regions indicate?
คำตอบ
A stolen account or shared credential, subject to VPN and proxy context.
การ์ด 540
คำถาม
What does supply-chain analysis examine?
คำตอบ
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
การ์ด 541
คำถาม
What is the purpose of facility lighting as a control?
คำตอบ
Deter covert activity and improve observation of people and areas.
การ์ด 542
คำถาม
What architecture quality keeps a service usable during component failure?
คำตอบ
Availability.
การ์ด 543
คำถาม
When is fail-open behavior preferable to fail-closed behavior?
คำตอบ
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
การ์ด 544
คำถาม
Which control function does a login-failure alert provide?
คำตอบ
Detection; it reveals suspicious authentication activity.
การ์ด 545
คำถาม
What does a biometric MFA implementation verify?
คำตอบ
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
การ์ด 546
คำถาม
How can automation enforce a security baseline?
คำตอบ
It compares realized settings with the approved state and reports or corrects unauthorized drift.
การ์ด 547
คำถาม
How do wireless cryptographic protocols protect network traffic?
คำตอบ
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
การ์ด 548
คำถาม
Why segment sensitive data stores?
คำตอบ
It limits reachable paths and separates them from lower-trust workloads.
การ์ด 549
คำถาม
What must remain secret in an asymmetric key pair?
คำตอบ
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
การ์ด 550
คำถาม
How can a supplier become a supply-chain attack vector?
คำตอบ
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
การ์ด 551
คำถาม
What is e-discovery?
คำตอบ
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
การ์ด 552
คำถาม
What characterizes a neutral risk appetite?
คำตอบ
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
การ์ด 553
คำถาม
What is passive reconnaissance?
คำตอบ
Gathering information without directly interacting with the target's systems.
การ์ด 554
คำถาม
What does a philosophical motive mean for a threat actor?
คำตอบ
The actor acts to advance a belief or moral position rather than primarily for money.
การ์ด 555
คำถาม
What does unexpected resource consumption indicate?
คำตอบ
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
การ์ด 556
คำถาม
What does a host-based intrusion prevention system do?
คำตอบ
It monitors activity on one host and can block behavior that matches exploit or attack rules.
การ์ด 557
คำถาม
How does agent-based monitoring differ from agentless monitoring?
คำตอบ
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
การ์ด 558
คำถาม
What can network logs contribute to an investigation?
คำตอบ
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
การ์ด 559
คำถาม
What is the purpose of a backup restore test?
คำตอบ
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
การ์ด 560
คำถาม
Why can obsolete hardware become a security risk?
คำตอบ
It may lack supported firmware, modern protections, or replacement parts.
การ์ด 561
คำถาม
What does rescanning confirm after remediation?
คำตอบ
Whether the scanner can still detect the original finding on the affected asset.
การ์ด 562
คำถาม
What should a secure transport method provide?
คำตอบ
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
การ์ด 563
คำถาม
How can law affect security governance?
คำตอบ
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
การ์ด 564
คำถาม
What does resilience mean for a security architecture?
คำตอบ
The ability to withstand disruption, adapt, and recover while preserving essential functions.
การ์ด 565
คำถาม
Why minimize an infrastructure's attack surface?
คำตอบ
Fewer exposed services and paths leave fewer opportunities for exploitation.
การ์ด 566
คำถาม
What does executing a security-awareness program require?
คำตอบ
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
การ์ด 567
คำถาม
What does an infrared security sensor detect?
คำตอบ
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
การ์ด 568
คำถาม
What is a knowledge factor?
คำตอบ
Something the claimant knows, such as a password.
การ์ด 569
คำถาม
Why review allow-list and deny-list impact before a change?
คำตอบ
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
การ์ด 570
คำถาม
What does partition-level encryption protect?
คำตอบ
One selected disk partition, leaving other partitions outside that encryption boundary.
การ์ด 571
คำถาม
How can instant messaging deliver a security attack?
คำตอบ
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
การ์ด 572
คำถาม
What can repeated blocked-content events indicate?
คำตอบ
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
การ์ด 573
คำถาม
What should a server-hardening baseline reduce?
คำตอบ
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
การ์ด 574
คำถาม
When is physical media destruction appropriate?
คำตอบ
When reuse is unnecessary or sanitization cannot provide adequate assurance.
การ์ด 575
คำถาม
What is mean time to repair?
คำตอบ
The average time required to restore a failed component or service.
การ์ด 576
คำถาม
Why disclose conflicts of interest during vendor selection?
คำตอบ
A personal or financial relationship can bias evaluation away from the organization's requirements.
การ์ด 577
คำถาม
What is a fine for noncompliance?
คำตอบ
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
การ์ด 578
คำถาม
What does a public data classification authorize?
คำตอบ
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
การ์ด 579
คำถาม
What security benefit comes from standard infrastructure configurations?
คำตอบ
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
การ์ด 580
คำถาม
How does horizontal scaling increase capacity?
คำตอบ
It adds more service instances and distributes work among them.
การ์ด 581
คำถาม
Why can added connectivity weaken segmentation?
คำตอบ
Each allowed path can become a route for lateral movement or data escape.
การ์ด 582
คำถาม
What coding practice is central to preventing SQL injection?
คำตอบ
Use parameterized queries so untrusted values remain data rather than executable query syntax.
การ์ด 583
คำถาม
When is a compensating control appropriate for a vulnerability?
คำตอบ
When timely removal or patching is infeasible and another control can reduce the risk.
การ์ด 584
คำถาม
How does agent-based web filtering enforce policy?
คำตอบ
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
การ์ด 585
คำถาม
How can regulation differ from an internal policy?
คำตอบ
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
การ์ด 586
คำถาม
What is a storage snapshot?
คำตอบ
A point-in-time representation of data or system state, whose independence depends on how it is stored.
การ์ด 587
คำถาม
What does password age measure?
คำตอบ
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
การ์ด 588
คำถาม
What does an ethical motive mean in vulnerability research?
คำตอบ
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
การ์ด 589
คำถาม
What can missing security logs indicate?
คำตอบ
Logging failure, tampering, retention misconfiguration, or an inactive source.
การ์ด 590
คำถาม
Why disable unused ports and protocols?
คำตอบ
They expose unnecessary communication paths and code that attackers can reach.
การ์ด 591
คำถาม
What does antivirus contribute to monitoring?
คำตอบ
It scans files, memory, or behavior and reports suspected malicious code.
การ์ด 592
คำถาม
What is a honeypot?
คำตอบ
A decoy system or service designed to attract and observe malicious activity.
การ์ด 593
คำถาม
What does file-level encryption protect?
คำตอบ
Selected files independently of whether the rest of the disk or volume is encrypted.
การ์ด 594
คำถาม
How can SMS deliver a security attack?
คำตอบ
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
การ์ด 595
คำถาม
What happens during incident analysis?
คำตอบ
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
การ์ด 596
คำถาม
What is mean time between failures?
คำตอบ
The average operating time between repairable failures.
การ์ด 597
คำถาม
What is active reconnaissance?
คำตอบ
Probing or interacting with target systems to discover services and behavior.
การ์ด 598
คำถาม
What constraint should guide ICS or SCADA hardening?
คำตอบ
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
การ์ด 599
คำถาม
Which control function does restoring a clean system image provide?
คำตอบ
Correction; it returns the system to a known-good state.
การ์ด 600
คำถาม
What does responsiveness mean in an architecture decision?
คำตอบ
How quickly the system and its operators can adapt to demand, failure, or attack.
การ์ด 601
คำถาม
How does out-of-band access strengthen remote administration?
คำตอบ
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
การ์ด 602
คำถาม
What makes user behavior unexpected?
คำตอบ
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
การ์ด 603
คำถาม
What is a work order?
คำตอบ
A document authorizing a defined unit of work under an existing agreement.
การ์ด 604
คำถาม
What can out-of-cycle logging indicate?
คำตอบ
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
การ์ด 605
คำถาม
Why update a standard operating procedure after a change?
คำตอบ
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
การ์ด 606
คำถาม
What coding practice limits cross-site scripting?
คำตอบ
Context-appropriate output encoding, supported by safe templating and input handling.
การ์ด 607
คำถาม
What does a restricted data classification indicate?
คำตอบ
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
การ์ด 608
คำถาม
How does a bug bounty support responsible disclosure?
คำตอบ
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
การ์ด 609
คำถาม
What does web-filter content categorization provide?
คำตอบ
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
การ์ด 610
คำถาม
How do hard and soft authentication tokens differ?
คำตอบ
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
การ์ด 611
คำถาม
How can industry requirements affect security governance?
คำตอบ
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
การ์ด 612
คำถาม
How can noncompliance cause loss of a license?
คำตอบ
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
การ์ด 613
คำถาม
What does volume-level encryption protect?
คำตอบ
All data within a selected logical storage volume.
การ์ด 614
คำถาม
How can impersonation exploit familiarity?
คำตอบ
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
การ์ด 615
คำถาม
How does RTO guide recovery design?
คำตอบ
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
การ์ด 616
คำถาม
What is a honeynet?
คำตอบ
A network of decoy systems used to study or divert attackers.
การ์ด 617
คำถาม
What does backup replication provide?
คำตอบ
Additional synchronized or copied recovery data in another system or location.
การ์ด 618
คำถาม
What lets automation scale securely?
คำตอบ
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
การ์ด 619
คำถาม
Why monitor a hardened computing resource continuously?
คำตอบ
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
การ์ด 620
คำถาม
Why keep a certificate of destruction?
คำตอบ
It documents that a disposal provider handled specified media under the agreed process.
การ์ด 621
คำถาม
Why consider patch availability before selecting a platform?
คำตอบ
Unsupported or difficult-to-update components accumulate known exposure.
การ์ด 622
คำถาม
Why should remote administration use an encrypted, authenticated protocol?
คำตอบ
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
การ์ด 623
คำถาม
How can revenge motivate an insider incident?
คำตอบ
A disgruntled person may damage systems or disclose data to punish the organization.
การ์ด 624
คำถาม
What is a published or documented indicator of malicious activity?
คำตอบ
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
การ์ด 625
คำถาม
Why monitor a system more closely when a mitigation exception is accepted?
คำตอบ
Monitoring can reveal exploitation or control failure while the documented exception remains open.
การ์ด 626
คำถาม
What is an SNMP trap?
คำตอบ
An unsolicited device notification sent to a management system when a configured event occurs.
การ์ด 627
คำถาม
How can an automated report support an investigation?
คำตอบ
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
การ์ด 628
คำถาม
What is a security key?
คำตอบ
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
การ์ด 629
คำถาม
What does database-level encryption protect?
คำตอบ
A database or selected database structures through controls managed at the database layer.
การ์ด 630
คำถาม
How does brand impersonation exploit trust?
คำตอบ
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
การ์ด 631
คำถาม
What browser-side impact can a cross-site scripting vulnerability create?
คำตอบ
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
การ์ด 632
คำถาม
How can a system or process audit identify vulnerabilities?
คำตอบ
It compares evidence with required configuration and procedure to reveal control gaps.
การ์ด 633
คำถาม
What security role can Group Policy provide?
คำตอบ
Centralized Windows configuration of account, application, audit, and system security settings.
การ์ด 634
คำถาม
What should incident-response training prepare people to do?
คำตอบ
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
การ์ด 635
คำถาม
Why must governance track local or regional requirements?
คำตอบ
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
การ์ด 636
คำถาม
How can a dependency become a useful key risk indicator?
คำตอบ
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
การ์ด 637
คำถาม
What is a business partners agreement?
คำตอบ
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
การ์ด 638
คำถาม
What makes an audit regulatory?
คำตอบ
It evaluates compliance with requirements established or enforced by a government or delegated authority.
การ์ด 639
คำถาม
What is a honeyfile?
คำตอบ
A decoy file whose access can reveal unauthorized activity.
การ์ด 640
คำถาม
Why does legal information require explicit protection?
คำตอบ
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
การ์ด 641
คำถาม
Which indicator can mass file renaming and encryption produce?
คำตอบ
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
การ์ด 642
คำถาม
What remains with an organization after transferring architecture risk?
คำตอบ
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
การ์ด 643
คำถาม
When does local console placement provide useful administrative access?
คำตอบ
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
การ์ด 644
คำถาม
What makes a harmful user action unintentional?
คำตอบ
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
การ์ด 645
คำถาม
How should an organization harden workstations?
คำตอบ
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
การ์ด 646
คำถาม
What is journaling in recovery?
คำตอบ
Recording ordered changes so data can be replayed or restored to a consistent point.
การ์ด 647
คำถาม
What downtime must a change plan account for?
คำตอบ
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
การ์ด 648
คำถาม
Why must a privacy program map local or regional law to data flows?
คำตอบ
The applicable duties can change with the location of the person, organization, processing, or stored data.
การ์ด 649
คำถาม
Why combine independent preventive controls at different layers?
คำตอบ
A failure at one layer does not automatically let the same attack succeed at the next layer.
การ์ด 650
คำถาม
What is passwordless authentication?
คำตอบ
A flow that does not require the user to enter a memorized password, often using public-key credentials.
การ์ด 651
คำถาม
How can automation improve security reaction time?
คำตอบ
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
การ์ด 652
คำถาม
What does record-level encryption protect?
คำตอบ
Individual records or fields, allowing finer protection than encrypting the entire database.
การ์ด 653
คำถาม
How can business email compromise misuse urgency?
คำตอบ
It pressures an employee to bypass normal verification for a payment, credential, or data request.
การ์ด 654
คำถาม
What does impact measure in risk analysis?
คำตอบ
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
การ์ด 655
คำถาม
What makes cyber activity part of warfare?
คำตอบ
It supports military or state conflict objectives such as disruption, intelligence, or influence.
การ์ด 656
คำถาม
Which indicator can a newly created privileged account produce outside the normal change window?
คำตอบ
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
การ์ด 657
คำถาม
How can configuration enforcement validate a deployed mitigation?
คำตอบ
It compares the realized settings with the approved state and corrects or reports drift.
การ์ด 658
คำถาม
How does validating an alert improve alert tuning?
คำตอบ
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
การ์ด 659
คำถาม
What data-layer impact can a SQL injection vulnerability create?
คำตอบ
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
การ์ด 660
คำถาม
What environmental variables can change vulnerability priority?
คำตอบ
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
การ์ด 661
คำถาม
What security role does SELinux provide?
คำตอบ
Mandatory access controls that confine processes according to centrally defined policy.
การ์ด 662
คำถาม
Why review governance documents periodically?
คำตอบ
Business, technology, threats, and external obligations change.
การ์ด 663
คำถาม
Why evaluate power requirements for a system design?
คำตอบ
Power capacity and redundancy constrain availability and recovery.
การ์ด 664
คำถาม
When is IPsec a better tunnel choice than TLS?
คำตอบ
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
การ์ด 665
คำถาม
What is a honeytoken?
คำตอบ
A fake credential or data element that generates a high-confidence alert when used.
การ์ด 666
คำถาม
What should embedded-system hardening prioritize?
คำตอบ
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
การ์ด 667
คำถาม
Why must sanitization address data remanence?
คำตอบ
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
การ์ด 668
คำถาม
Why require rules of engagement for vendor testing?
คำตอบ
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
การ์ด 669
คำถาม
What does a private data classification indicate?
คำตอบ
The information concerns an individual or limited internal audience and should not be exposed publicly.
การ์ด 670
คำถาม
What does a tabletop recovery exercise test?
คำตอบ
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
การ์ด 671
คำถาม
Why prevent password reuse?
คำตอบ
One compromised password should not unlock other accounts or services.
การ์ด 672
คำถาม
Which malicious-activity indicator is unexplained sustained CPU or memory use?
คำตอบ
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
การ์ด 673
คำถาม
What does transport encryption protect?
คำตอบ
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
การ์ด 674
คำถาม
How can a voice call become an attack vector?
คำตอบ
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
การ์ด 675
คำถาม
What should a digital-forensics report document?
คำตอบ
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
การ์ด 676
คำถาม
What tradeoff comes with an expansionary risk appetite?
คำตอบ
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
การ์ด 677
คำถาม
What does a known penetration-test environment provide?
คำตอบ
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
การ์ด 678
คำถาม
Why evaluate compute requirements before deployment?
คำตอบ
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
การ์ด 679
คำถาม
Why place sensors at network choke points?
คำตอบ
They can observe traffic crossing important trust boundaries.
การ์ด 680
คำถาม
What should hybrid or remote-work security training emphasize?
คำตอบ
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
การ์ด 681
คำถาม
Why plan an application restart separately from a service restart?
คำตอบ
The application may need its own state handling, user coordination, health checks, and rollback point.
การ์ด 682
คำถาม
What is a cryptographic vulnerability?
คำตอบ
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
การ์ด 683
คำถาม
Why report findings by asset owner?
คำตอบ
Owners need clear accountability and a prioritized remediation queue.
การ์ด 684
คำถาม
What should guide selection of a secure protocol?
คำตอบ
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
การ์ด 685
คำถาม
How do centralized and decentralized governance structures differ?
คำตอบ
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
การ์ด 686
คำถาม
How does privacy-aware design limit data retention?
คำตอบ
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
การ์ด 687
คำถาม
What does a pressure security sensor detect?
คำตอบ
Force or weight applied to a protected surface, such as a floor mat or fence line.
การ์ด 688
คำถาม
What automation costs should a security team plan for?
คำตอบ
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
การ์ด 689
คำถาม
What should RTOS hardening preserve while reducing attack surface?
คำตอบ
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
การ์ด 690
คำถาม
What is the goal of disruption-for-chaos activity?
คำตอบ
Create instability or damage itself rather than pursue a clear financial or intelligence return.
การ์ด 691
คำถาม
Which indicator can repeated password guessing produce?
คำตอบ
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
การ์ด 692
คำถาม
How does removing unnecessary software harden a system?
คำตอบ
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
การ์ด 693
คำถาม
What does NetFlow provide?
คำตอบ
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
การ์ด 694
คำถาม
How can a dashboard support an investigation?
คำตอบ
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
การ์ด 695
คำถาม
When should a password be expired?
คำตอบ
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
การ์ด 696
คำถาม
Why does cryptographic key length matter?
คำตอบ
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
การ์ด 697
คำถาม
How can an unsecure Bluetooth connection become an attack vector?
คำตอบ
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
การ์ด 698
คำถาม
What is a key risk indicator?
คำตอบ
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
การ์ด 699
คำถาม
What should vendor monitoring verify when a contract ends?
คำตอบ
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
การ์ด 700
คำถาม
What does a sensitive data classification indicate?
คำตอบ
The information needs safeguards because unauthorized access, change, or loss could cause harm.
การ์ด 701
คำถาม
What does software-defined networking separate?
คำตอบ
The control plane that decides traffic behavior from the data plane that forwards traffic.
การ์ด 702
คำถาม
Where should a web application firewall be placed?
คำตอบ
In the path of web requests before they reach the protected application.
การ์ด 703
คำถาม
What does a simulated recovery exercise test?
คำตอบ
Participants perform realistic response actions in a controlled environment without disrupting production.
การ์ด 704
คำถาม
How can a team verify that a detective control is effective?
คำตอบ
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
การ์ด 705
คำถาม
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
คำตอบ
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
การ์ด 706
คำถาม
What makes a vulnerability cloud-specific?
คำตอบ
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
การ์ด 707
คำถาม
How can insurance respond to vulnerability risk?
คำตอบ
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
การ์ด 708
คำถาม
How does reputation improve web filtering?
คำตอบ
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
การ์ด 709
คำถาม
What does an encryption policy establish?
คำตอบ
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
การ์ด 710
คำถาม
How does a microwave security sensor detect movement?
คำตอบ
It emits microwave energy and detects changes in the reflected signal caused by motion.
การ์ด 711
คำถาม
What should IoT-device hardening change before deployment?
คำตอบ
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
การ์ด 712
คำถาม
Why track software licenses as assets?
คำตอบ
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
การ์ด 713
คำถาม
What does a password manager improve?
คำตอบ
It can generate and store unique long passwords so users do not memorize or reuse them.
การ์ด 714
คำถาม
What makes a ledger open and public?
คำตอบ
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
การ์ด 715
คำถาม
What should a payment-change request trigger?
คำตอบ
Independent verification through a known channel before any account or payment detail is changed.
การ์ด 716
คำถาม
What does preserving digital evidence require?
คำตอบ
Protecting its integrity, context, access history, and availability from collection through final disposition.
การ์ด 717
คำถาม
What should a risk report tell decision-makers?
คำตอบ
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
การ์ด 718
คำถาม
What should an external assessment report provide?
คำตอบ
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
การ์ด 719
คำถาม
What is a centralized design's main resilience risk?
คำตอบ
A central dependency can become a bottleneck or single point of failure.
การ์ด 720
คำถาม
What does mutual TLS add to a TLS-protected service connection?
คำตอบ
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
การ์ด 721
คำถาม
What should recurring security-awareness reporting show?
คำตอบ
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
การ์ด 722
คำถาม
Why do legacy applications require extra change planning?
คำตอบ
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
การ์ด 723
คำถาม
How do a data controller and a data processor differ?
คำตอบ
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
การ์ด 724
คำถาม
How can orchestration become a single point of failure?
คำตอบ
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
การ์ด 725
คำถาม
Why should defenses account for a threat actor's sophistication and capability?
คำตอบ
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
การ์ด 726
คำถาม
How does an injection attack make an application execute unintended instructions?
คำตอบ
It sends crafted input that an interpreter treats as code or commands instead of data.
การ์ด 727
คำถาม
What does a host-based firewall control?
คำตอบ
Inbound and outbound network traffic for one endpoint according to local rules.
การ์ด 728
คำถาม
Why revise alerting after an incident?
คำตอบ
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
การ์ด 729
คำถาม
Why include security duties in procurement criteria?
คำตอบ
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
การ์ด 730
คำถาม
What does a critical data classification indicate?
คำตอบ
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
การ์ด 731
คำถาม
What infrastructure capacity must support failover?
คำตอบ
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
การ์ด 732
คำถาม
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
คำตอบ
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
การ์ด 733
คำถาม
How does a remediation exemption differ from an exception?
คำตอบ
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
การ์ด 734
คำถาม
Why should automated EDR or XDR blocking have an exception and rollback path?
คำตอบ
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
การ์ด 735
คำถาม
What does a security playbook provide?
คำตอบ
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
การ์ด 736
คำถาม
How does an ultrasonic security sensor detect movement?
คำตอบ
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
การ์ด 737
คำถาม
What should a managed mobile device require for Bluetooth connections?
คำตอบ
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
การ์ด 738
คำถาม
How do password complexity rules differ from password length?
คำตอบ
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
การ์ด 739
คำถาม
What makes a certificate third-party trusted?
คำตอบ
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
การ์ด 740
คำถาม
Why is an out-of-band check effective against impersonation?
คำตอบ
It verifies the request through a separate, previously trusted communication path.
การ์ด 741
คำถาม
What does a risk exception authorize?
คำตอบ
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
การ์ด 742
คำถาม
What security challenge grows in a decentralized design?
คำตอบ
Consistent policy, inventory, monitoring, and patching become harder.
การ์ด 743
คำถาม
How should controls be selected for an unused network path?
คำตอบ
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
การ์ด 744
คำถาม
How can a buffer-overflow attack affect an application?
คำตอบ
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 การ์ด
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo จะเปิดขึ้นเพื่อให้คุณเริ่มเรียนได้ทันที