CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
Bu deste hakkında
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Bu destedeki kartlar
Kart 1
Soru
What does an information security policy establish?
Cevap
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Kart 2
Soru
What is phishing?
Cevap
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Kart 3
Soru
What does a public-key certificate bind to an identity?
Cevap
A public key, together with identifying information and the issuer's signature.
Kart 4
Soru
What is data at rest?
Cevap
Data stored on media such as disks, databases, backups, or mobile devices.
Kart 5
Soru
How does policy-driven access control decide a zero-trust access request?
Cevap
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Kart 6
Soru
What does establishing a secure baseline produce?
Cevap
An approved, documented configuration that defines the required secure state for a class of computing resource.
Kart 7
Soru
What is hashing used to verify?
Cevap
Whether data has changed by comparing fixed-length digest values.
Kart 8
Soru
What is impersonation in social engineering?
Cevap
Pretending to be a trusted person or organization to obtain access, data, or action.
Kart 9
Soru
What is virtualization?
Cevap
Abstracting physical compute so multiple isolated guest systems can share a host.
Kart 10
Soru
What is chain of custody?
Cevap
A documented history of who collected, handled, transferred, stored, and examined evidence.
Kart 11
Soru
What is quantitative risk analysis?
Cevap
Estimating risk with numerical values such as money, frequency, or probability.
Kart 12
Soru
What is a phishing awareness campaign?
Cevap
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Kart 13
Soru
What is high availability?
Cevap
Designing a service to remain accessible despite expected component failures.
Kart 14
Soru
What is a network security zone?
Cevap
A group of systems with similar trust, function, or control requirements.
Kart 15
Soru
What is risk transfer?
Cevap
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Kart 16
Soru
What is media sanitization?
Cevap
Making stored data infeasible to recover for the intended level of protection.
Kart 17
Soru
What does CVSS provide?
Cevap
A standardized way to describe a vulnerability's technical severity characteristics.
Kart 18
Soru
What does security alerting do?
Cevap
It turns matched events or behavior into a notification that the right responder can review.
Kart 19
Soru
What does a firewall rule enforce?
Cevap
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Kart 20
Soru
What is deprovisioning?
Cevap
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Kart 21
Soru
How does inline placement differ from a tap or monitor port?
Cevap
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Kart 22
Soru
What is asymmetric encryption?
Cevap
Encryption that uses a mathematically related public and private key pair.
Kart 23
Soru
What does SPF authorize?
Cevap
Which mail servers may send mail for a domain in the SMTP envelope.
Kart 24
Soru
What is a possession factor?
Cevap
Something the claimant has, such as a cryptographic authenticator.
Kart 25
Soru
What does ordinary TLS usually protect and authenticate?
Cevap
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Kart 26
Soru
What is single loss expectancy?
Cevap
The estimated loss from one occurrence of a risk event.
Kart 27
Soru
What does a certificate authority do?
Cevap
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Kart 28
Soru
What is a detective control meant to do?
Cevap
Identify that an unwanted event has happened or is happening.
Kart 29
Soru
What is the security purpose of change-control approval?
Cevap
Ensure authorized reviewers assess risk before the production change occurs.
Kart 30
Soru
What is shadow IT?
Cevap
Technology used for organizational work without required approval or oversight.
Kart 31
Soru
What is a buffer overflow vulnerability?
Cevap
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Kart 32
Soru
What is ransomware?
Cevap
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Kart 33
Soru
How does network segmentation limit an incident?
Cevap
It restricts communication paths and reduces lateral movement between zones.
Kart 34
Soru
How do load balancing and clustering support availability differently?
Cevap
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Kart 35
Soru
What is vendor due diligence?
Cevap
Evaluating a provider's security, capability, stability, and fit before commitment.
Kart 36
Soru
Who is a data subject?
Cevap
The person whose personal data is collected or processed.
Kart 37
Soru
What is attestation?
Cevap
A formal assertion or report about a subject matter, often supported by an independent examination.
Kart 38
Soru
What is a replay attack?
Cevap
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Kart 39
Soru
What does a wireless site survey establish?
Cevap
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Kart 40
Soru
What is the time-of-check stage of a race-condition vulnerability?
Cevap
The application verifies a condition or resource state before acting on it.
Kart 41
Soru
What is a penetration test?
Cevap
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Kart 42
Soru
What is a cold recovery site?
Cevap
A facility with basic space and utilities but little preinstalled technology or current data.
Kart 43
Soru
What is data in transit?
Cevap
Data moving between systems or across a network.
Kart 44
Soru
What is a vendor security questionnaire?
Cevap
A structured request for information about a provider's controls and practices.
Kart 45
Soru
How does an internal actor's starting position differ from an external actor's?
Cevap
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Kart 46
Soru
What can unexpected account lockouts indicate?
Cevap
Password guessing, credential stuffing, user error, or a broken client.
Kart 47
Soru
How do permissions enforce access control?
Cevap
They specify which actions a subject may perform on a particular resource.
Kart 48
Soru
What is log aggregation?
Cevap
Central collection of logs from multiple sources for search, correlation, and retention.
Kart 49
Soru
Why plan a service restart as part of a change?
Cevap
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Kart 50
Soru
What is infrastructure as code?
Cevap
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Kart 51
Soru
What should security-awareness program development start with?
Cevap
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Kart 52
Soru
What is a voice-based social-engineering attack called?
Cevap
Vishing.
Kart 53
Soru
What happens during incident-response preparation?
Cevap
Teams establish people, tools, access, communications, training, and procedures before an incident.
Kart 54
Soru
What does an offensive penetration-testing team do?
Cevap
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Kart 55
Soru
What is federation?
Cevap
One security domain relies on identity assertions from another trusted domain.
Kart 56
Soru
What is asset classification?
Cevap
Grouping an asset by sensitivity, criticality, or required handling.
Kart 57
Soru
What is cross-site scripting?
Cevap
Injection of script-capable content that a browser executes in another site's security context.
Kart 58
Soru
What can IDS or IPS trends reveal?
Cevap
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Kart 59
Soru
What can unexpected resource inaccessibility indicate?
Cevap
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Kart 60
Soru
What is a corrective control meant to do?
Cevap
Limit damage and restore a secure state after an event.
Kart 61
Soru
How do containers differ from virtual machines?
Cevap
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Kart 62
Soru
How does an active security device differ from a passive one?
Cevap
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Kart 63
Soru
Why is unsupported software a persistent attack surface?
Cevap
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Kart 64
Soru
What is annualized rate of occurrence?
Cevap
The estimated number of times a risk event occurs per year.
Kart 65
Soru
What is an inherence factor?
Cevap
A biometric characteristic of the claimant.
Kart 66
Soru
What do a threat actor's sophistication and capability describe?
Cevap
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Kart 67
Soru
What is a SIEM?
Cevap
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Kart 68
Soru
What is sideloading?
Cevap
Installing software from outside the platform's approved distribution path.
Kart 69
Soru
What does an IDS or IPS signature match?
Cevap
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Kart 70
Soru
Why are embedded systems often difficult to patch?
Cevap
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Kart 71
Soru
What is a virtual private network?
Cevap
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Kart 72
Soru
What should an initial security-awareness report establish?
Cevap
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Kart 73
Soru
What is symmetric encryption?
Cevap
Encryption that uses the same secret key to encrypt and decrypt data.
Kart 74
Soru
What happens during incident detection?
Cevap
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Kart 75
Soru
What is recovery time objective?
Cevap
The target maximum time to restore a function after disruption.
Kart 76
Soru
Why prioritize password length?
Cevap
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Kart 77
Soru
What must sanitization accomplish before an asset leaves organizational control?
Cevap
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Kart 78
Soru
What is a real-time operating system designed to provide?
Cevap
Predictable response timing for tasks with strict deadlines.
Kart 79
Soru
What does fail-open behavior do when a control fails?
Cevap
It permits traffic or access to preserve availability.
Kart 80
Soru
What is jailbreaking or rooting a mobile device?
Cevap
Removing platform restrictions to gain privileged control over the operating system.
Kart 81
Soru
What does network access control enforce?
Cevap
Identity, device posture, and access policy at network connection time and during a session.
Kart 82
Soru
What does data loss prevention do?
Cevap
Detects and may block sensitive data use or transfer that violates policy.
Kart 83
Soru
What security property does a blockchain provide?
Cevap
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Kart 84
Soru
What is recovery point objective?
Cevap
The target maximum acceptable data loss measured backward in time.
Kart 85
Soru
How do ICS and SCADA relate?
Cevap
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Kart 86
Soru
What does fail-closed behavior do when a control fails?
Cevap
It denies traffic or access to preserve security.
Kart 87
Soru
Which keys create and verify a typical digital signature?
Cevap
The signer creates it with a private key, and others verify it with the corresponding public key.
Kart 88
Soru
What is SQL injection?
Cevap
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Kart 89
Soru
What does DKIM verify?
Cevap
That selected message content was signed by a domain and was not altered after signing.
Kart 90
Soru
What is post-incident activity?
Cevap
Learning from the event and improving controls, plans, and recovery based on evidence.
Kart 91
Soru
What characterizes an expansionary risk appetite?
Cevap
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Kart 92
Soru
How do centralized and decentralized architectures differ?
Cevap
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Kart 93
Soru
What does a certificate revocation list publish?
Cevap
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Kart 94
Soru
What is a legal hold?
Cevap
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Kart 95
Soru
What is exposure factor in quantitative risk analysis?
Cevap
The estimated percentage of an asset's value lost in one event.
Kart 96
Soru
What is decentralized architecture?
Cevap
Control or service responsibility is distributed across multiple independent components or locations.
Kart 97
Soru
What is tokenization?
Cevap
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Kart 98
Soru
How can automation act as a workforce multiplier?
Cevap
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Kart 99
Soru
What can endpoint process logs reveal?
Cevap
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Kart 100
Soru
What does the CIA triad protect?
Cevap
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Kart 101
Soru
How does data masking protect information?
Cevap
It hides selected values or characters while preserving a usable representation.
Kart 102
Soru
How can a national requirement affect security governance?
Cevap
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Kart 103
Soru
What do integrations and APIs provide to security orchestration?
Cevap
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Kart 104
Soru
What makes a compliance report external?
Cevap
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Kart 105
Soru
What does a cryptographic algorithm define?
Cevap
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Kart 106
Soru
Why compare systems with a secure baseline regularly?
Cevap
To detect drift, unauthorized changes, and missing hardening.
Kart 107
Soru
What does integrity protect?
Cevap
The accuracy and completeness of data and systems against unauthorized change.
Kart 108
Soru
What does vulnerability classification organize?
Cevap
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Kart 109
Soru
What does a password standard define?
Cevap
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Kart 110
Soru
What technology capacity must a recovery design plan for?
Cevap
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Kart 111
Soru
What does a confidential data classification indicate?
Cevap
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Kart 112
Soru
What makes a vendor assessment independent?
Cevap
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Kart 113
Soru
What lets a worm spread without attaching itself to another file?
Cevap
It is a standalone program that replicates across reachable systems or services.
Kart 114
Soru
What is microsegmentation?
Cevap
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Kart 115
Soru
What can application logs reveal?
Cevap
Transactions, errors, user actions, and application-specific security events.
Kart 116
Soru
What does deploying a secure baseline require?
Cevap
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Kart 117
Soru
How can resource-provisioning automation improve security?
Cevap
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Kart 118
Soru
What does availability protect?
Cevap
Reliable, timely access to systems and data when authorized users need them.
Kart 119
Soru
Why must a change request describe business impact?
Cevap
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Kart 120
Soru
What does an authenticated vulnerability scan add?
Cevap
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Kart 121
Soru
What does a change-management procedure specify?
Cevap
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Kart 122
Soru
What is a sanction for noncompliance?
Cevap
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Kart 123
Soru
How can email deliver a security attack?
Cevap
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Kart 124
Soru
What is an internal compliance audit?
Cevap
An organization-led examination of whether selected operations and controls meet defined requirements.
Kart 125
Soru
What is a Trojan?
Cevap
Malware disguised as legitimate or desirable software.
Kart 126
Soru
What is clustering?
Cevap
Multiple systems work together to provide a service and tolerate member failure.
Kart 127
Soru
What makes data regulated?
Cevap
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Kart 128
Soru
What does a wireless heat map show?
Cevap
Measured or modeled signal strength and coverage across a physical area.
Kart 129
Soru
How should vendor criticality affect due diligence?
Cevap
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Kart 130
Soru
How can a digital signature support non-repudiation?
Cevap
It provides evidence that the holder of a private key signed specific data.
Kart 131
Soru
What should vulnerability prioritization consider beyond severity?
Cevap
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Kart 132
Soru
What is a security guideline?
Cevap
Recommended practice that allows judgment unless adopted as a requirement.
Kart 133
Soru
What usually distinguishes a nation-state threat actor?
Cevap
Strategic objectives, substantial resources, patience, and advanced operational capability.
Kart 134
Soru
What is spyware?
Cevap
Software that secretly collects information about a user or system.
Kart 135
Soru
Why maintain an allow list for applications?
Cevap
Only explicitly approved software is permitted to execute.
Kart 136
Soru
How can an image become an attack vector?
Cevap
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Kart 137
Soru
What makes a security control technical?
Cevap
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Kart 138
Soru
What is identity proofing?
Cevap
Establishing that a person is who they claim to be before issuing an account or credential.
Kart 139
Soru
What is an automated security guardrail?
Cevap
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Kart 140
Soru
Why assign an owner to a planned change?
Cevap
To make one party accountable for coordination, execution, and follow-through.
Kart 141
Soru
How can national privacy law affect data handling?
Cevap
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Kart 142
Soru
What is continuity of operations?
Cevap
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Kart 143
Soru
What security tradeoff comes with BYOD?
Cevap
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Kart 144
Soru
How should policies and handbooks support security training?
Cevap
They provide accessible, current rules and reporting steps that training can apply to real situations.
Kart 145
Soru
What is a keylogger?
Cevap
A tool that records keystrokes to capture data such as credentials.
Kart 146
Soru
What makes information a trade secret?
Cevap
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Kart 147
Soru
What does authentication establish?
Cevap
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Kart 148
Soru
What risk comes from an untrusted file attachment?
Cevap
Opening or parsing it can execute malicious code or expose data.
Kart 149
Soru
How does risk tolerance affect vulnerability remediation?
Cevap
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Kart 150
Soru
How can a global requirement affect security governance?
Cevap
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Kart 151
Soru
Why should questionnaire answers be supported by evidence?
Cevap
Self-assertions alone may not prove that controls are designed or operating effectively.
Kart 152
Soru
What is an independent third-party audit?
Cevap
An external party with suitable independence examines evidence against defined criteria.
Kart 153
Soru
What do account provisioning and deprovisioning do?
Cevap
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Kart 154
Soru
What is an unskilled attacker commonly called?
Cevap
A script kiddie: someone who relies on tools or instructions created by others.
Kart 155
Soru
What is a rootkit?
Cevap
Software designed to maintain privileged, concealed access by altering or subverting the system.
Kart 156
Soru
What does an access control list enforce?
Cevap
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Kart 157
Soru
What should system security monitoring observe?
Cevap
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Kart 158
Soru
What can operating-system security logs reveal?
Cevap
Authentication, privilege use, policy changes, services, and other host security events.
Kart 159
Soru
Why isolate operational technology from general business networks?
Cevap
To limit attack paths into safety- and availability-critical processes.
Kart 160
Soru
What is the COPE mobile deployment model?
Cevap
The organization owns the device but permits defined personal use while retaining management control.
Kart 161
Soru
What security work belongs in asset acquisition and procurement?
Cevap
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Kart 162
Soru
How can user-provisioning automation improve security?
Cevap
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Kart 163
Soru
What people capacity must a continuity plan account for?
Cevap
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Kart 164
Soru
What do authorization models define?
Cevap
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Kart 165
Soru
Why are removable devices an attack vector?
Cevap
They can introduce malware or remove data while bypassing network controls.
Kart 166
Soru
What should predeployment change-test results show?
Cevap
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Kart 167
Soru
What is the time-of-use stage of a race-condition vulnerability?
Cevap
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Kart 168
Soru
What is data in use?
Cevap
Data actively processed in memory or by an application.
Kart 169
Soru
What does open-source vulnerability intelligence contribute?
Cevap
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Kart 170
Soru
What can file-integrity monitoring detect?
Cevap
Unexpected changes to protected files, directories, or configuration.
Kart 171
Soru
Why should deprovisioning be prompt?
Cevap
Former users or roles should not retain usable access.
Kart 172
Soru
What is an acceptable use policy?
Cevap
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Kart 173
Soru
What makes a compliance report internal?
Cevap
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Kart 174
Soru
What is a logic bomb?
Cevap
Malicious code that activates when a specified condition or time is reached.
Kart 175
Soru
What does a right-to-audit clause provide?
Cevap
Contractual authority to inspect or obtain evidence about agreed controls.
Kart 176
Soru
Where should a forward proxy sit in an enterprise traffic path?
Cevap
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Kart 177
Soru
Which cues should make a message look suspicious?
Cevap
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Kart 178
Soru
What makes a security control managerial?
Cevap
It directs risk and governance through decisions such as policies, assessments, and oversight.
Kart 179
Soru
What is the CYOD mobile deployment model?
Cevap
The user selects from organization-approved device options that remain subject to corporate security requirements.
Kart 180
Soru
How does client-based vulnerable software differ from an agentless exposure?
Cevap
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Kart 181
Soru
What makes a risk assessment recurring?
Cevap
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Kart 182
Soru
What does a defensive penetration-testing team practice?
Cevap
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Kart 183
Soru
In a zero-trust data plane, what can the subject or system represent?
Cevap
The user, device, workload, or service requesting access to a protected resource.
Kart 184
Soru
What primarily motivates a hacktivist?
Cevap
A political, social, or ideological cause.
Kart 185
Soru
What is bloatware?
Cevap
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Kart 186
Soru
Why keep endpoint-protection signatures and engines current?
Cevap
They need current detection logic to recognize newly identified malware and exploit behavior.
Kart 187
Soru
What should application security monitoring observe?
Cevap
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Kart 188
Soru
What is role-based access control?
Cevap
Permissions are assigned to roles, and identities receive access through their roles.
Kart 189
Soru
What is geographic dispersal?
Cevap
Placing redundant resources in separate locations so one regional event does not affect all copies.
Kart 190
Soru
What is a malicious update?
Cevap
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Kart 191
Soru
What does static application analysis inspect?
Cevap
Source code, bytecode, or compiled code without executing the application.
Kart 192
Soru
What does a firewall access list define?
Cevap
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Kart 193
Soru
What does a disaster recovery policy establish?
Cevap
Management expectations for restoring technology and data after a disruptive event.
Kart 194
Soru
How does logical segmentation separate workloads that share physical infrastructure?
Cevap
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Kart 195
Soru
How should IDS and IPS placement differ?
Cevap
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Kart 196
Soru
What should automated ticket creation capture?
Cevap
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Kart 197
Soru
What makes information intellectual property?
Cevap
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Kart 198
Soru
What is a backout plan?
Cevap
Predefined steps for safely reversing a failed or harmful change.
Kart 199
Soru
Why is an unsecure wireless network an attack vector?
Cevap
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Kart 200
Soru
What is physical brute force?
Cevap
Using force to defeat a lock, barrier, enclosure, or other physical control.
Kart 201
Soru
What is application sandboxing?
Cevap
Running code in a constrained environment with limited access to the host and data.
Kart 202
Soru
Why assign an asset owner?
Cevap
One accountable party must decide its use, protection, and lifecycle.
Kart 203
Soru
What happens during risk identification?
Cevap
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Kart 204
Soru
What should an SLA state about breach notification?
Cevap
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Kart 205
Soru
How do due diligence and due care differ in compliance?
Cevap
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Kart 206
Soru
What is attribute-based access control?
Cevap
Policy evaluates attributes of the subject, resource, action, and environment.
Kart 207
Soru
What does a zero-trust policy engine do?
Cevap
It evaluates policy and signals to decide whether access should be allowed.
Kart 208
Soru
How does a cloud responsibility matrix allocate security duties?
Cevap
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Kart 209
Soru
Where should a load balancer sit in a service path?
Cevap
In front of service instances so it can route requests to healthy backends.
Kart 210
Soru
What should the security team do with a reported suspicious message?
Cevap
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Kart 211
Soru
What makes an operating-system vulnerability high impact?
Cevap
It can affect every application and security control that relies on the compromised OS.
Kart 212
Soru
What does dynamic application analysis inspect?
Cevap
The behavior and externally visible weaknesses of a running application.
Kart 213
Soru
How can false-positive trends affect IDS or IPS tuning?
Cevap
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Kart 214
Soru
What does a business continuity policy establish?
Cevap
Management expectations for sustaining and restoring critical business functions.
Kart 215
Soru
What is a hot recovery site?
Cevap
A ready, synchronized environment intended to take over quickly.
Kart 216
Soru
What makes an insider threat distinct?
Cevap
The actor has legitimate access or organizational knowledge that can be misused.
Kart 217
Soru
What is RFID cloning?
Cevap
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Kart 218
Soru
Why apply vendor security updates promptly?
Cevap
They remove known weaknesses before attackers can exploit the unpatched exposure.
Kart 219
Soru
What should infrastructure security monitoring observe?
Cevap
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Kart 220
Soru
What can firewall logs reveal?
Cevap
Allowed or denied network connections across controlled boundaries.
Kart 221
Soru
Why minimize open service ports?
Cevap
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Kart 222
Soru
What is threat hunting?
Cevap
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Kart 223
Soru
What triggers an ad hoc risk assessment?
Cevap
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Kart 224
Soru
What makes an assessment external?
Cevap
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Kart 225
Soru
What is data sovereignty?
Cevap
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Kart 226
Soru
What security boundary does a cellular connection create for a mobile device?
Cevap
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Kart 227
Soru
What makes a security control operational?
Cevap
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Kart 228
Soru
What is discretionary access control?
Cevap
A resource owner can decide who receives access, within system policy.
Kart 229
Soru
How can careful automation support employee retention?
Cevap
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Kart 230
Soru
Why does ease of deployment matter in an architecture decision?
Cevap
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Kart 231
Soru
What tradeoff comes with placing an NGFW inline?
Cevap
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Kart 232
Soru
What does a zero-trust policy administrator do?
Cevap
It carries out the policy engine's decision, such as creating or ending a session.
Kart 233
Soru
What should a master service agreement define for data return and deletion?
Cevap
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Kart 234
Soru
What is an environmental physical attack?
Cevap
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Kart 235
Soru
When should a maintenance window be chosen?
Cevap
When disruption and rollback can be managed with the least business impact.
Kart 236
Soru
What is memory injection?
Cevap
Placing malicious code or data into another process's memory so it executes in that process's context.
Kart 237
Soru
What does software composition analysis find?
Cevap
Known risks and license information in third-party dependencies.
Kart 238
Soru
What is DNS filtering?
Cevap
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Kart 239
Soru
What should an incident response policy establish?
Cevap
Authority, scope, reporting duties, and organizational commitment for incident handling.
Kart 240
Soru
How can noncompliance cause reputational damage?
Cevap
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Kart 241
Soru
What does full-disk encryption protect?
Cevap
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Kart 242
Soru
Why are default credentials dangerous?
Cevap
They are widely known or easily discovered and often remain unchanged.
Kart 243
Soru
What makes a risk assessment one-time?
Cevap
It evaluates a defined decision or scope once without an established repeating cadence.
Kart 244
Soru
What is a warm recovery site?
Cevap
A partially equipped environment that needs some data restoration or configuration before use.
Kart 245
Soru
What does application input validation do?
Cevap
It checks that input matches the expected type, length, range, and format before use.
Kart 246
Soru
What should an asset inventory record besides a device name?
Cevap
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Kart 247
Soru
What is mandatory access control?
Cevap
A central authority enforces access through labels and rules that ordinary owners cannot override.
Kart 248
Soru
What security benefit does infrastructure as code provide?
Cevap
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Kart 249
Soru
When should a public service control fail closed?
Cevap
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Kart 250
Soru
What should users do with a suspicious message?
Cevap
Report it through the approved channel without interacting with its links or attachments.
Kart 251
Soru
What usually motivates organized cybercrime?
Cevap
Financial gain through scalable or repeatable criminal activity.
Kart 252
Soru
How can malicious code support a network attack?
Cevap
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Kart 253
Soru
When is virtual patching useful?
Cevap
When a network or application control can block exploit traffic before the underlying system can be patched.
Kart 254
Soru
What does security-monitoring reporting provide?
Cevap
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Kart 255
Soru
What does data geolocation identify?
Cevap
The physical or legal location where data is stored, processed, or transmitted.
Kart 256
Soru
What does a zero-trust policy enforcement point do?
Cevap
It enables, monitors, and terminates the connection between a subject and a resource.
Kart 257
Soru
What is cryptographic key exchange?
Cevap
A method for parties to establish shared key material over an untrusted channel.
Kart 258
Soru
How can a vendor become a supply-chain attack vector?
Cevap
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Kart 259
Soru
Why can legacy hardware remain vulnerable?
Cevap
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Kart 260
Soru
What can proprietary vulnerability intelligence add beyond open sources?
Cevap
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Kart 261
Soru
How does a centralized proxy apply web filtering?
Cevap
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Kart 262
Soru
How can continuous integration and testing improve security automation?
Cevap
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Kart 263
Soru
What is containment?
Cevap
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Kart 264
Soru
What is a software development lifecycle policy meant to ensure?
Cevap
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Kart 265
Soru
What makes risk assessment continuous?
Cevap
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Kart 266
Soru
What is a memorandum of agreement?
Cevap
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Kart 267
Soru
What makes a penetration test integrated?
Cevap
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Kart 268
Soru
How does a DNS amplification attack magnify traffic?
Cevap
It sends small spoofed queries that trigger larger replies toward the victim.
Kart 269
Soru
Why does ease of recovery matter in an architecture decision?
Cevap
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Kart 270
Soru
What does 802.1X control before a device receives normal network access?
Cevap
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Kart 271
Soru
What is rule-based access control?
Cevap
System-wide rules grant or deny access based on conditions such as network, time, or action.
Kart 272
Soru
What is mobile device management?
Cevap
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Kart 273
Soru
What tradeoff comes with a cold recovery site?
Cevap
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Kart 274
Soru
Why identify stakeholders before approving a security-sensitive change?
Cevap
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Kart 275
Soru
How do attestation and acknowledgement differ?
Cevap
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Kart 276
Soru
What does zero-trust adaptive identity mean?
Cevap
Access decisions adjust to current risk signals rather than relying only on a static login.
Kart 277
Soru
What makes a security control physical?
Cevap
It protects facilities or equipment through a tangible barrier or mechanism.
Kart 278
Soru
What is geo-fencing for data?
Cevap
Enforcing location-based boundaries on where data or services may be accessed or operated.
Kart 279
Soru
What does a Trusted Platform Module protect?
Cevap
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Kart 280
Soru
Why can a managed service provider amplify risk?
Cevap
Its privileged access and shared tooling can provide a path into many customers.
Kart 281
Soru
What does probability express in risk analysis?
Cevap
A quantified chance that a defined event will occur within stated conditions or time.
Kart 282
Soru
Why can shadow IT create a threat?
Cevap
It bypasses security review, inventory, monitoring, and supported configuration.
Kart 283
Soru
What is on-path interception?
Cevap
An attacker positions between communicating parties to observe or alter traffic.
Kart 284
Soru
Why include encryption in a system-hardening baseline?
Cevap
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Kart 285
Soru
Why tune security alerts?
Cevap
To keep useful detections while reducing noise that wastes analyst attention.
Kart 286
Soru
What can IPS or IDS logs contribute to an investigation?
Cevap
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Kart 287
Soru
What is VM escape?
Cevap
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Kart 288
Soru
How can segmentation reduce vulnerability exposure before a patch is available?
Cevap
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Kart 289
Soru
Why should firewall policy name the required ports and protocols explicitly?
Cevap
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Kart 290
Soru
What is a change management policy meant to control?
Cevap
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Kart 291
Soru
What is a hybrid-cloud architecture?
Cevap
An environment that integrates private or on-premises resources with public cloud services.
Kart 292
Soru
How do AH and ESP differ in the security services they can provide?
Cevap
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Kart 293
Soru
What makes user behavior risky?
Cevap
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Kart 294
Soru
What is least privilege?
Cevap
Granting only the access needed for the required task and no more.
Kart 295
Soru
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Cevap
Transmission to HTTPS, script access, and cross-site sending, respectively.
Kart 296
Soru
Why discover unmanaged assets?
Cevap
Unknown systems cannot be patched, monitored, or governed reliably.
Kart 297
Soru
What is a service-level agreement?
Cevap
Measurable service commitments and remedies, such as availability or response targets.
Kart 298
Soru
What should govern automated security escalation?
Cevap
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Kart 299
Soru
What is platform diversity as a resilience strategy?
Cevap
Using different implementations so one common flaw or failure is less likely to affect every copy.
Kart 300
Soru
How can replayed session material affect an application?
Cevap
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Kart 301
Soru
What is an implicit trust zone in zero trust?
Cevap
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Kart 302
Soru
What does salting a password hash accomplish?
Cevap
It makes identical passwords hash differently and defeats precomputed hash tables.
Kart 303
Soru
What is spear phishing?
Cevap
Phishing tailored to a specific person, role, or organization.
Kart 304
Soru
What is eradication?
Cevap
Removing the attacker's access, malicious artifacts, and exploited conditions.
Kart 305
Soru
Who is a risk owner?
Cevap
The person accountable for deciding and monitoring how a specific risk is handled.
Kart 306
Soru
What does a partially known penetration-test environment provide?
Cevap
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Kart 307
Soru
What is a microservices architecture?
Cevap
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Kart 308
Soru
What is a jump server?
Cevap
A hardened intermediary used to reach systems in a restricted management network.
Kart 309
Soru
What can happen when a configuration change is made without dependency analysis?
Cevap
A downstream service can fail even when the changed component works.
Kart 310
Soru
What is resource reuse exposure?
Cevap
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Kart 311
Soru
Why does financial information require explicit protection?
Cevap
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Kart 312
Soru
What does CVE provide?
Cevap
A common identifier for a publicly disclosed vulnerability.
Kart 313
Soru
Where can DLP controls operate?
Cevap
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Kart 314
Soru
What does privileged password vaulting protect?
Cevap
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Kart 315
Soru
What does an access-control standard define?
Cevap
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Kart 316
Soru
How can automation support compliance monitoring?
Cevap
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Kart 317
Soru
What does static code analysis examine?
Cevap
Source or compiled code for weakness patterns without executing the application.
Kart 318
Soru
What actor attribute describes funding, time, and personnel?
Cevap
Resources.
Kart 319
Soru
What is DNS poisoning?
Cevap
Introducing false DNS data so names resolve to attacker-chosen destinations.
Kart 320
Soru
Why change default credentials during hardening?
Cevap
Default secrets are predictable and commonly targeted.
Kart 321
Soru
What does quarantine do after a security alert?
Cevap
It restricts a suspected asset or object while analysts validate and remediate the risk.
Kart 322
Soru
What does key stretching do for stored passwords?
Cevap
It deliberately makes each password guess more computationally expensive.
Kart 323
Soru
What is smishing?
Cevap
Phishing delivered through SMS or another text-messaging service.
Kart 324
Soru
What is qualitative risk analysis?
Cevap
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Kart 325
Soru
What is a master service agreement?
Cevap
An umbrella contract establishing general legal and commercial terms for ongoing work.
Kart 326
Soru
What is threat scope reduction?
Cevap
Narrowing the systems, privileges, or paths an attacker can reach.
Kart 327
Soru
Why use a third-party cloud service instead of building locally?
Cevap
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Kart 328
Soru
What should determine security-device placement?
Cevap
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Kart 329
Soru
What does situational awareness mean for a user?
Cevap
Notice the people, devices, requests, location, and context around a task before acting.
Kart 330
Soru
What does a failover test validate?
Cevap
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Kart 331
Soru
What is a preventive control meant to do?
Cevap
Stop an unwanted event before it succeeds.
Kart 332
Soru
What is just-in-time privileged access?
Cevap
Elevated access is granted only when needed and expires after a short approved period.
Kart 333
Soru
What safeguard should security-group automation enforce?
Cevap
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Kart 334
Soru
How does a reflected DDoS attack hide and multiply sources?
Cevap
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Kart 335
Soru
What is a security misconfiguration?
Cevap
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Kart 336
Soru
Why can the same vulnerability have different organizational impact?
Cevap
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Kart 337
Soru
What does URL scanning evaluate before a user opens a web destination?
Cevap
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Kart 338
Soru
What is the board's security governance role?
Cevap
Provide oversight, set risk direction, and hold executives accountable.
Kart 339
Soru
What does code signing establish?
Cevap
That code came from the holder of the signing key and has not changed since signing.
Kart 340
Soru
How should an asset's classification affect security operations?
Cevap
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Kart 341
Soru
How does encryption protect data?
Cevap
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Kart 342
Soru
What is a secure enclave?
Cevap
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Kart 343
Soru
What is business email compromise?
Cevap
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Kart 344
Soru
What is recovery in incident response?
Cevap
Restoring services safely, monitoring them, and returning to normal operations.
Kart 345
Soru
How is single loss expectancy commonly estimated?
Cevap
Asset value multiplied by the exposure factor.
Kart 346
Soru
What does an unknown penetration-test environment provide?
Cevap
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Kart 347
Soru
What security boundary does a hypervisor provide?
Cevap
It isolates virtual machines while controlling their access to shared hardware.
Kart 348
Soru
Why does a TLS tunnel not protect a compromised endpoint?
Cevap
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Kart 349
Soru
Why update diagrams after an infrastructure change?
Cevap
Operations and incident responders need the documentation to match the deployed environment.
Kart 350
Soru
What does privacy ownership assign?
Cevap
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Kart 351
Soru
What does a security control gap analysis compare?
Cevap
The controls required for the target state with the controls currently in place.
Kart 352
Soru
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Cevap
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Kart 353
Soru
What is application privilege escalation?
Cevap
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Kart 354
Soru
What risk remains when unnecessary software is left installed?
Cevap
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Kart 355
Soru
What does SCAP standardize?
Cevap
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Kart 356
Soru
What can packet capture reveal?
Cevap
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Kart 357
Soru
What makes a privileged credential ephemeral?
Cevap
It is created for a limited task or session and expires or is destroyed automatically after that use.
Kart 358
Soru
How do a statement of work and a work order differ?
Cevap
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Kart 359
Soru
Why might multi-cloud improve resilience?
Cevap
A provider-wide failure need not stop workloads that can run independently elsewhere.
Kart 360
Soru
How can a service provider introduce a supply-chain vulnerability?
Cevap
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Kart 361
Soru
What is a false positive in vulnerability scanning?
Cevap
A reported weakness that is not actually present or exploitable in the assessed context.
Kart 362
Soru
How do EDR and XDR differ?
Cevap
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Kart 363
Soru
What should onboarding and offboarding procedures coordinate?
Cevap
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Kart 364
Soru
How should an organization harden managed mobile devices?
Cevap
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Kart 365
Soru
What is a certificate signing request?
Cevap
A request containing a public key and subject information for a certificate authority to sign.
Kart 366
Soru
What is pretexting?
Cevap
Using a fabricated role or situation to make a request seem legitimate.
Kart 367
Soru
How is annualized loss expectancy commonly estimated?
Cevap
Single loss expectancy multiplied by annualized rate of occurrence.
Kart 368
Soru
What security consequence follows from containers sharing a kernel?
Cevap
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Kart 369
Soru
Where does 802.1X enforce a network admission decision?
Cevap
At the controlled switch port or wireless access point before normal network access is granted.
Kart 370
Soru
What should insider-threat awareness teach?
Cevap
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Kart 371
Soru
What access action is suitable for careful automation?
Cevap
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Kart 372
Soru
What is an evil twin?
Cevap
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kart
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Bu desteyle ücretsiz çalışNibomo açılır ve hemen çalışmaya başlayabilirsiniz.
Kart 373
Soru
Does non-human-readable data need less protection?
Cevap
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Kart 374
Soru
What does authenticating a system establish?
Cevap
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Kart 375
Soru
What does LDAP provide in identity systems?
Cevap
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Kart 376
Soru
What is a deterrent control meant to do?
Cevap
Discourage an attacker from attempting an unwanted action.
Kart 377
Soru
Why update procedures after changing a security control?
Cevap
Staff need accurate steps for operating, monitoring, and recovering the new control.
Kart 378
Soru
How does OCSP differ from a certificate revocation list?
Cevap
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Kart 379
Soru
What is the goal of data exfiltration?
Cevap
Remove data from its authorized environment without permission.
Kart 380
Soru
What is a watering-hole attack?
Cevap
Compromising a site frequented by the intended targets so their visits expose them.
Kart 381
Soru
How can a hardware provider introduce a supply-chain vulnerability?
Cevap
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Kart 382
Soru
What is application forgery?
Cevap
Creating or altering a request, token, or object so the application treats it as authentic.
Kart 383
Soru
How does least privilege mitigate compromise?
Cevap
It limits the actions and resources available to a compromised account or process.
Kart 384
Soru
What is serverless computing?
Cevap
A model where the provider manages servers and the customer deploys event-driven code or functions.
Kart 385
Soru
What makes an infrastructure control effective for a specific risk?
Cevap
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Kart 386
Soru
What does parallel recovery processing test?
Cevap
Whether primary and alternate environments can run together consistently before a controlled cutover.
Kart 387
Soru
Which password-authentication method does WPA3-Personal use?
Cevap
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Kart 388
Soru
How does data retention affect asset disposal?
Cevap
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Kart 389
Soru
What is a false negative in vulnerability scanning?
Cevap
A real weakness that the assessment fails to report.
Kart 390
Soru
What does recurring security scanning add to monitoring?
Cevap
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Kart 391
Soru
What should guide port selection for a secure protocol?
Cevap
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Kart 392
Soru
What does forensic acquisition create?
Cevap
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Kart 393
Soru
How do system owners and data owners divide security accountability?
Cevap
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Kart 394
Soru
What does likelihood express in risk analysis?
Cevap
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Kart 395
Soru
What is a memorandum of understanding?
Cevap
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Kart 396
Soru
What does the right to be forgotten generally require?
Cevap
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Kart 397
Soru
What does an audit committee oversee?
Cevap
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Kart 398
Soru
What does identity interoperability require?
Cevap
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Kart 399
Soru
How does a bollard protect a facility?
Cevap
It blocks or redirects vehicles before they can reach a protected area.
Kart 400
Soru
How can hashing protect a downloaded file?
Cevap
A trusted digest lets the recipient detect whether the file changed.
Kart 401
Soru
What is a credential replay attack?
Cevap
Using captured valid credentials or tokens again without needing to discover the secret.
Kart 402
Soru
How can automation complexity create security risk?
Cevap
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Kart 403
Soru
What must an architecture provide when a component cannot be patched?
Cevap
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Kart 404
Soru
What makes remote access secure?
Cevap
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Kart 405
Soru
What should users verify before connecting removable media or a cable?
Cevap
That the device and connection are approved, expected, and handled under organizational policy.
Kart 406
Soru
What is a self-signed certificate?
Cevap
A certificate signed by its own private key rather than by a separate trusted issuer.
Kart 407
Soru
What is brand impersonation?
Cevap
Using a trusted organization's identity or look to deceive people.
Kart 408
Soru
What characterizes a conservative risk appetite?
Cevap
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Kart 409
Soru
What should a managed mobile device verify before using Wi-Fi?
Cevap
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Kart 410
Soru
What is a zero-day vulnerability?
Cevap
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Kart 411
Soru
What does verification confirm after vulnerability remediation?
Cevap
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Kart 412
Soru
What is user and entity behavior analytics?
Cevap
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Kart 413
Soru
What does a physical security policy establish?
Cevap
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Kart 414
Soru
What does a UPS provide?
Cevap
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Kart 415
Soru
What is a nondisclosure agreement?
Cevap
A contract restricting use and disclosure of defined confidential information.
Kart 416
Soru
What should be checked before assigning a user permission?
Cevap
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Kart 417
Soru
How does espionage differ from ordinary theft?
Cevap
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Kart 418
Soru
What is password spraying?
Cevap
Trying a small set of common passwords across many accounts to avoid lockouts.
Kart 419
Soru
What is the purpose of system isolation during an incident?
Cevap
Stop harmful communication while preserving the system for response and investigation.
Kart 420
Soru
What is a security benchmark?
Cevap
A documented set of recommended configuration checks for a platform or product.
Kart 421
Soru
Which metadata fields give a log record investigative context?
Cevap
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Kart 422
Soru
What does an access-control vestibule prevent?
Cevap
It limits tailgating by allowing controlled passage through one door at a time.
Kart 423
Soru
What is version control's security value for configuration?
Cevap
It preserves attributable history and enables review or rollback of changes.
Kart 424
Soru
Why use both internal and external compliance monitoring?
Cevap
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Kart 425
Soru
What distinguishes on-premises architecture?
Cevap
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Kart 426
Soru
What risk can split tunneling add to a VPN?
Cevap
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Kart 427
Soru
What is a certificate root of trust?
Cevap
A trusted root certificate or key from which a client validates a certificate chain.
Kart 428
Soru
What is typosquatting?
Cevap
Registering a look-alike domain based on common typing errors or visual similarity.
Kart 429
Soru
What is root-cause analysis?
Cevap
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Kart 430
Soru
What is risk tolerance?
Cevap
The acceptable variation or boundary around a specific objective or risk area.
Kart 431
Soru
What is a security self-assessment?
Cevap
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Kart 432
Soru
What does data masking change?
Cevap
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Kart 433
Soru
How do wireless authentication protocols let clients prove identity securely?
Cevap
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Kart 434
Soru
Why reconcile inventory with network discovery?
Cevap
Differences expose missing records, retired systems, or unauthorized devices.
Kart 435
Soru
Why does sideloading raise mobile risk?
Cevap
It can bypass store review, signing policy, and managed application controls.
Kart 436
Soru
What does an information-sharing organization add to vulnerability management?
Cevap
Sector or community intelligence about relevant threats, incidents, and defensive action.
Kart 437
Soru
What does a web-filter block rule specify?
Cevap
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Kart 438
Soru
How do data custodians and data stewards differ?
Cevap
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Kart 439
Soru
What is a brute-force password attack?
Cevap
Systematically trying many candidate secrets against an account or protected value.
Kart 440
Soru
What is a compensating control?
Cevap
An alternative safeguard used when the preferred control is impractical or unavailable.
Kart 441
Soru
How can location act as an authentication factor?
Cevap
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Kart 442
Soru
Why must security automation remain supportable?
Cevap
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Kart 443
Soru
What does a standby generator provide?
Cevap
Longer-duration power during a utility outage, after a startup delay.
Kart 444
Soru
What makes an architecture air-gapped?
Cevap
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Kart 445
Soru
What is a software-defined WAN?
Cevap
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Kart 446
Soru
What password-management behavior should awareness training reinforce?
Cevap
Use unique long passwords through an approved manager and report suspected compromise promptly.
Kart 447
Soru
What security value does fencing provide?
Cevap
It defines and delays entry across a physical perimeter.
Kart 448
Soru
What is a wildcard certificate?
Cevap
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Kart 449
Soru
How does misinformation differ from disinformation?
Cevap
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Kart 450
Soru
What is a risk threshold?
Cevap
A defined level that triggers escalation, treatment, or another required response.
Kart 451
Soru
What does a vendor penetration test contribute to assessment?
Cevap
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Kart 452
Soru
What is the objective of a service-disruption attack?
Cevap
Make a system or business function unavailable or unreliable.
Kart 453
Soru
What is directory traversal?
Cevap
Manipulating a file path to reach files outside the directory the application intended to expose.
Kart 454
Soru
Why decommission an unsupported system?
Cevap
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Kart 455
Soru
Why archive security-monitoring data?
Cevap
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Kart 456
Soru
What role does RADIUS commonly play in enterprise Wi-Fi?
Cevap
It centralizes authentication, authorization information, and accounting for network access.
Kart 457
Soru
Why separate the requester and approver of a high-risk change?
Cevap
To reduce error, fraud, and unilateral unauthorized modification.
Kart 458
Soru
Why can a jailbroken device violate a security baseline?
Cevap
It weakens platform isolation and allows unapproved privileged changes.
Kart 459
Soru
When is tokenization especially useful?
Cevap
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Kart 460
Soru
Why can dark-web intelligence affect vulnerability priority?
Cevap
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Kart 461
Soru
What firewall policy should govern traffic from a screened subnet to internal systems?
Cevap
Deny it by default and allow only explicitly required flows.
Kart 462
Soru
What does SAML commonly carry?
Cevap
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Kart 463
Soru
What does a security governance committee do?
Cevap
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Kart 464
Soru
How can global privacy requirements affect one data process?
Cevap
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Kart 465
Soru
What characterizes an IoT device?
Cevap
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Kart 466
Soru
What is a unified threat management appliance?
Cevap
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Kart 467
Soru
What does a hardware security module provide?
Cevap
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Kart 468
Soru
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Cevap
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Kart 469
Soru
What is a tabletop exercise?
Cevap
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Kart 470
Soru
What does a risk exemption authorize?
Cevap
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Kart 471
Soru
What is a regulatory examination?
Cevap
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Kart 472
Soru
What does physical video surveillance primarily provide?
Cevap
Detection and evidence of activity in monitored areas.
Kart 473
Soru
What is a birthday attack against a hash?
Cevap
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Kart 474
Soru
Why keep backups both onsite and offsite?
Cevap
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Kart 475
Soru
How does technical debt affect security automation?
Cevap
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Kart 476
Soru
What should switch hardening restrict first?
Cevap
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Kart 477
Soru
What should happen when an asset changes owners?
Cevap
Inventory, access, support responsibility, and data handling should be updated.
Kart 478
Soru
What does evidence of a vendor's internal audits contribute?
Cevap
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Kart 479
Soru
What is identity attestation?
Cevap
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Kart 480
Soru
Why can standard enterprise patching be unsafe for an RTOS device?
Cevap
A change can disrupt timing guarantees or certified operational behavior.
Kart 481
Soru
What is secure access service edge?
Cevap
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Kart 482
Soru
What social-engineering habit should awareness training reinforce?
Cevap
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Kart 483
Soru
How can a software provider introduce a supply-chain vulnerability?
Cevap
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Kart 484
Soru
Why include internet exposure in remediation priority?
Cevap
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Kart 485
Soru
What does a mail gateway inspect?
Cevap
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Kart 486
Soru
What is a data controller?
Cevap
The entity that determines why and how personal data is processed.
Kart 487
Soru
How does blackmail motivate a cyberattack?
Cevap
The attacker threatens disclosure or harm unless the victim complies.
Kart 488
Soru
What is a downgrade attack?
Cevap
Forcing parties to use an older or weaker protocol or security mode.
Kart 489
Soru
How does encryption mitigate data exposure?
Cevap
It makes captured data unreadable without the required key.
Kart 490
Soru
How do network and web vulnerability scanners differ?
Cevap
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Kart 491
Soru
How can vulnerability-scan data support an investigation?
Cevap
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Kart 492
Soru
What is key escrow?
Cevap
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Kart 493
Soru
Which human vector commonly uses a fake sign-in page to harvest credentials?
Cevap
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Kart 494
Soru
What is risk avoidance?
Cevap
Stopping or not starting the activity that creates the risk.
Kart 495
Soru
What is data obfuscation?
Cevap
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Kart 496
Soru
What is a directive control?
Cevap
A safeguard that tells people what behavior or action is required.
Kart 497
Soru
What does a security guard add that a camera cannot?
Cevap
Human judgment and an immediate physical response.
Kart 498
Soru
Why define restricted activities in change management?
Cevap
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Kart 499
Soru
What contractual impact can noncompliance create?
Cevap
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Kart 500
Soru
What should determine backup frequency?
Cevap
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Kart 501
Soru
What should router hardening protect?
Cevap
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Kart 502
Soru
What problem does OAuth 2.0 address?
Cevap
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Kart 503
Soru
What does SCADA do?
Cevap
It provides supervisory monitoring and control across distributed industrial equipment.
Kart 504
Soru
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Cevap
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Kart 505
Soru
What distinguishes a computer virus?
Cevap
It attaches to a host file or program and spreads when that infected host executes or is shared.
Kart 506
Soru
What does a key management system coordinate?
Cevap
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Kart 507
Soru
How can an unsecure wired network expose traffic?
Cevap
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Kart 508
Soru
Why is vulnerable device firmware hard to remediate?
Cevap
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Kart 509
Soru
What does patching change in vulnerability remediation?
Cevap
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Kart 510
Soru
What does DMARC add to SPF and DKIM?
Cevap
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Kart 511
Soru
How does automation improve security efficiency?
Cevap
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Kart 512
Soru
What is a simulation exercise?
Cevap
A more realistic practice in which participants respond to injected events using operational processes.
Kart 513
Soru
What is a data processor?
Cevap
An entity that processes personal data on behalf of a controller.
Kart 514
Soru
What is risk mitigation?
Cevap
Reducing likelihood, impact, or both through controls or process changes.
Kart 515
Soru
Why monitor a vendor after onboarding?
Cevap
Security posture, ownership, services, incidents, and dependencies can change.
Kart 516
Soru
What does a physical penetration test assess?
Cevap
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Kart 517
Soru
Why use access badges at a facility?
Cevap
To associate entry attempts with authorized identities and enforce access rules.
Kart 518
Soru
How does permission restriction protect data?
Cevap
Only authorized identities receive the actions and scope their roles require.
Kart 519
Soru
What is the usual objective of ransomware extortion?
Cevap
Force payment by denying access, threatening disclosure, or both.
Kart 520
Soru
What does impossible travel indicate?
Cevap
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Kart 521
Soru
What is configuration enforcement?
Cevap
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Kart 522
Soru
What does a web vulnerability scanner inspect?
Cevap
Running web behavior for issues such as unsafe input handling and insecure configuration.
Kart 523
Soru
How does cost affect an architecture choice?
Cevap
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Kart 524
Soru
What does EAP provide with 802.1X?
Cevap
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Kart 525
Soru
What should operational-security training help users protect?
Cevap
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Kart 526
Soru
What does a time-of-day access rule do?
Cevap
Allows or denies a requested action according to an approved schedule.
Kart 527
Soru
What should cloud infrastructure hardening establish?
Cevap
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Kart 528
Soru
What should an asset owner ensure during offboarding?
Cevap
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Kart 529
Soru
Why encrypt backups?
Cevap
Backup media and transfers can expose the same sensitive data as production systems.
Kart 530
Soru
What is steganography?
Cevap
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Kart 531
Soru
Which human vector uses a fabricated authority role to justify a sensitive request?
Cevap
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Kart 532
Soru
Why does risk transfer not remove accountability?
Cevap
The organization can retain legal, reputational, operational, and oversight consequences.
Kart 533
Soru
Why validate a change after deployment?
Cevap
To confirm the intended result occurred without introducing unacceptable side effects.
Kart 534
Soru
What makes end-of-life hardware a security vulnerability?
Cevap
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Kart 535
Soru
What does an audit add to remediation validation?
Cevap
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Kart 536
Soru
Why can SPF pass while a message still impersonates a brand?
Cevap
SPF checks the envelope domain, which may differ from the visible From domain.
Kart 537
Soru
What role can a government entity have in security governance?
Cevap
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Kart 538
Soru
How do data inventory and retention support privacy governance?
Cevap
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Kart 539
Soru
What can concurrent sessions from distant regions indicate?
Cevap
A stolen account or shared credential, subject to VPN and proxy context.
Kart 540
Soru
What does supply-chain analysis examine?
Cevap
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Kart 541
Soru
What is the purpose of facility lighting as a control?
Cevap
Deter covert activity and improve observation of people and areas.
Kart 542
Soru
What architecture quality keeps a service usable during component failure?
Cevap
Availability.
Kart 543
Soru
When is fail-open behavior preferable to fail-closed behavior?
Cevap
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Kart 544
Soru
Which control function does a login-failure alert provide?
Cevap
Detection; it reveals suspicious authentication activity.
Kart 545
Soru
What does a biometric MFA implementation verify?
Cevap
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Kart 546
Soru
How can automation enforce a security baseline?
Cevap
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Kart 547
Soru
How do wireless cryptographic protocols protect network traffic?
Cevap
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Kart 548
Soru
Why segment sensitive data stores?
Cevap
It limits reachable paths and separates them from lower-trust workloads.
Kart 549
Soru
What must remain secret in an asymmetric key pair?
Cevap
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Kart 550
Soru
How can a supplier become a supply-chain attack vector?
Cevap
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Kart 551
Soru
What is e-discovery?
Cevap
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Kart 552
Soru
What characterizes a neutral risk appetite?
Cevap
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Kart 553
Soru
What is passive reconnaissance?
Cevap
Gathering information without directly interacting with the target's systems.
Kart 554
Soru
What does a philosophical motive mean for a threat actor?
Cevap
The actor acts to advance a belief or moral position rather than primarily for money.
Kart 555
Soru
What does unexpected resource consumption indicate?
Cevap
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Kart 556
Soru
What does a host-based intrusion prevention system do?
Cevap
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Kart 557
Soru
How does agent-based monitoring differ from agentless monitoring?
Cevap
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Kart 558
Soru
What can network logs contribute to an investigation?
Cevap
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Kart 559
Soru
What is the purpose of a backup restore test?
Cevap
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Kart 560
Soru
Why can obsolete hardware become a security risk?
Cevap
It may lack supported firmware, modern protections, or replacement parts.
Kart 561
Soru
What does rescanning confirm after remediation?
Cevap
Whether the scanner can still detect the original finding on the affected asset.
Kart 562
Soru
What should a secure transport method provide?
Cevap
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Kart 563
Soru
How can law affect security governance?
Cevap
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Kart 564
Soru
What does resilience mean for a security architecture?
Cevap
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Kart 565
Soru
Why minimize an infrastructure's attack surface?
Cevap
Fewer exposed services and paths leave fewer opportunities for exploitation.
Kart 566
Soru
What does executing a security-awareness program require?
Cevap
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Kart 567
Soru
What does an infrared security sensor detect?
Cevap
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Kart 568
Soru
What is a knowledge factor?
Cevap
Something the claimant knows, such as a password.
Kart 569
Soru
Why review allow-list and deny-list impact before a change?
Cevap
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Kart 570
Soru
What does partition-level encryption protect?
Cevap
One selected disk partition, leaving other partitions outside that encryption boundary.
Kart 571
Soru
How can instant messaging deliver a security attack?
Cevap
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Kart 572
Soru
What can repeated blocked-content events indicate?
Cevap
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Kart 573
Soru
What should a server-hardening baseline reduce?
Cevap
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Kart 574
Soru
When is physical media destruction appropriate?
Cevap
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Kart 575
Soru
What is mean time to repair?
Cevap
The average time required to restore a failed component or service.
Kart 576
Soru
Why disclose conflicts of interest during vendor selection?
Cevap
A personal or financial relationship can bias evaluation away from the organization's requirements.
Kart 577
Soru
What is a fine for noncompliance?
Cevap
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Kart 578
Soru
What does a public data classification authorize?
Cevap
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Kart 579
Soru
What security benefit comes from standard infrastructure configurations?
Cevap
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Kart 580
Soru
How does horizontal scaling increase capacity?
Cevap
It adds more service instances and distributes work among them.
Kart 581
Soru
Why can added connectivity weaken segmentation?
Cevap
Each allowed path can become a route for lateral movement or data escape.
Kart 582
Soru
What coding practice is central to preventing SQL injection?
Cevap
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Kart 583
Soru
When is a compensating control appropriate for a vulnerability?
Cevap
When timely removal or patching is infeasible and another control can reduce the risk.
Kart 584
Soru
How does agent-based web filtering enforce policy?
Cevap
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Kart 585
Soru
How can regulation differ from an internal policy?
Cevap
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Kart 586
Soru
What is a storage snapshot?
Cevap
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Kart 587
Soru
What does password age measure?
Cevap
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Kart 588
Soru
What does an ethical motive mean in vulnerability research?
Cevap
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Kart 589
Soru
What can missing security logs indicate?
Cevap
Logging failure, tampering, retention misconfiguration, or an inactive source.
Kart 590
Soru
Why disable unused ports and protocols?
Cevap
They expose unnecessary communication paths and code that attackers can reach.
Kart 591
Soru
What does antivirus contribute to monitoring?
Cevap
It scans files, memory, or behavior and reports suspected malicious code.
Kart 592
Soru
What is a honeypot?
Cevap
A decoy system or service designed to attract and observe malicious activity.
Kart 593
Soru
What does file-level encryption protect?
Cevap
Selected files independently of whether the rest of the disk or volume is encrypted.
Kart 594
Soru
How can SMS deliver a security attack?
Cevap
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Kart 595
Soru
What happens during incident analysis?
Cevap
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Kart 596
Soru
What is mean time between failures?
Cevap
The average operating time between repairable failures.
Kart 597
Soru
What is active reconnaissance?
Cevap
Probing or interacting with target systems to discover services and behavior.
Kart 598
Soru
What constraint should guide ICS or SCADA hardening?
Cevap
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Kart 599
Soru
Which control function does restoring a clean system image provide?
Cevap
Correction; it returns the system to a known-good state.
Kart 600
Soru
What does responsiveness mean in an architecture decision?
Cevap
How quickly the system and its operators can adapt to demand, failure, or attack.
Kart 601
Soru
How does out-of-band access strengthen remote administration?
Cevap
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Kart 602
Soru
What makes user behavior unexpected?
Cevap
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Kart 603
Soru
What is a work order?
Cevap
A document authorizing a defined unit of work under an existing agreement.
Kart 604
Soru
What can out-of-cycle logging indicate?
Cevap
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Kart 605
Soru
Why update a standard operating procedure after a change?
Cevap
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Kart 606
Soru
What coding practice limits cross-site scripting?
Cevap
Context-appropriate output encoding, supported by safe templating and input handling.
Kart 607
Soru
What does a restricted data classification indicate?
Cevap
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Kart 608
Soru
How does a bug bounty support responsible disclosure?
Cevap
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Kart 609
Soru
What does web-filter content categorization provide?
Cevap
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Kart 610
Soru
How do hard and soft authentication tokens differ?
Cevap
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Kart 611
Soru
How can industry requirements affect security governance?
Cevap
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Kart 612
Soru
How can noncompliance cause loss of a license?
Cevap
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Kart 613
Soru
What does volume-level encryption protect?
Cevap
All data within a selected logical storage volume.
Kart 614
Soru
How can impersonation exploit familiarity?
Cevap
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Kart 615
Soru
How does RTO guide recovery design?
Cevap
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Kart 616
Soru
What is a honeynet?
Cevap
A network of decoy systems used to study or divert attackers.
Kart 617
Soru
What does backup replication provide?
Cevap
Additional synchronized or copied recovery data in another system or location.
Kart 618
Soru
What lets automation scale securely?
Cevap
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Kart 619
Soru
Why monitor a hardened computing resource continuously?
Cevap
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Kart 620
Soru
Why keep a certificate of destruction?
Cevap
It documents that a disposal provider handled specified media under the agreed process.
Kart 621
Soru
Why consider patch availability before selecting a platform?
Cevap
Unsupported or difficult-to-update components accumulate known exposure.
Kart 622
Soru
Why should remote administration use an encrypted, authenticated protocol?
Cevap
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Kart 623
Soru
How can revenge motivate an insider incident?
Cevap
A disgruntled person may damage systems or disclose data to punish the organization.
Kart 624
Soru
What is a published or documented indicator of malicious activity?
Cevap
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Kart 625
Soru
Why monitor a system more closely when a mitigation exception is accepted?
Cevap
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Kart 626
Soru
What is an SNMP trap?
Cevap
An unsolicited device notification sent to a management system when a configured event occurs.
Kart 627
Soru
How can an automated report support an investigation?
Cevap
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Kart 628
Soru
What is a security key?
Cevap
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Kart 629
Soru
What does database-level encryption protect?
Cevap
A database or selected database structures through controls managed at the database layer.
Kart 630
Soru
How does brand impersonation exploit trust?
Cevap
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Kart 631
Soru
What browser-side impact can a cross-site scripting vulnerability create?
Cevap
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Kart 632
Soru
How can a system or process audit identify vulnerabilities?
Cevap
It compares evidence with required configuration and procedure to reveal control gaps.
Kart 633
Soru
What security role can Group Policy provide?
Cevap
Centralized Windows configuration of account, application, audit, and system security settings.
Kart 634
Soru
What should incident-response training prepare people to do?
Cevap
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Kart 635
Soru
Why must governance track local or regional requirements?
Cevap
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Kart 636
Soru
How can a dependency become a useful key risk indicator?
Cevap
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Kart 637
Soru
What is a business partners agreement?
Cevap
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Kart 638
Soru
What makes an audit regulatory?
Cevap
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Kart 639
Soru
What is a honeyfile?
Cevap
A decoy file whose access can reveal unauthorized activity.
Kart 640
Soru
Why does legal information require explicit protection?
Cevap
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Kart 641
Soru
Which indicator can mass file renaming and encryption produce?
Cevap
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Kart 642
Soru
What remains with an organization after transferring architecture risk?
Cevap
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Kart 643
Soru
When does local console placement provide useful administrative access?
Cevap
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Kart 644
Soru
What makes a harmful user action unintentional?
Cevap
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Kart 645
Soru
How should an organization harden workstations?
Cevap
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Kart 646
Soru
What is journaling in recovery?
Cevap
Recording ordered changes so data can be replayed or restored to a consistent point.
Kart 647
Soru
What downtime must a change plan account for?
Cevap
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Kart 648
Soru
Why must a privacy program map local or regional law to data flows?
Cevap
The applicable duties can change with the location of the person, organization, processing, or stored data.
Kart 649
Soru
Why combine independent preventive controls at different layers?
Cevap
A failure at one layer does not automatically let the same attack succeed at the next layer.
Kart 650
Soru
What is passwordless authentication?
Cevap
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Kart 651
Soru
How can automation improve security reaction time?
Cevap
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Kart 652
Soru
What does record-level encryption protect?
Cevap
Individual records or fields, allowing finer protection than encrypting the entire database.
Kart 653
Soru
How can business email compromise misuse urgency?
Cevap
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Kart 654
Soru
What does impact measure in risk analysis?
Cevap
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Kart 655
Soru
What makes cyber activity part of warfare?
Cevap
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Kart 656
Soru
Which indicator can a newly created privileged account produce outside the normal change window?
Cevap
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Kart 657
Soru
How can configuration enforcement validate a deployed mitigation?
Cevap
It compares the realized settings with the approved state and corrects or reports drift.
Kart 658
Soru
How does validating an alert improve alert tuning?
Cevap
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Kart 659
Soru
What data-layer impact can a SQL injection vulnerability create?
Cevap
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Kart 660
Soru
What environmental variables can change vulnerability priority?
Cevap
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Kart 661
Soru
What security role does SELinux provide?
Cevap
Mandatory access controls that confine processes according to centrally defined policy.
Kart 662
Soru
Why review governance documents periodically?
Cevap
Business, technology, threats, and external obligations change.
Kart 663
Soru
Why evaluate power requirements for a system design?
Cevap
Power capacity and redundancy constrain availability and recovery.
Kart 664
Soru
When is IPsec a better tunnel choice than TLS?
Cevap
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Kart 665
Soru
What is a honeytoken?
Cevap
A fake credential or data element that generates a high-confidence alert when used.
Kart 666
Soru
What should embedded-system hardening prioritize?
Cevap
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Kart 667
Soru
Why must sanitization address data remanence?
Cevap
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Kart 668
Soru
Why require rules of engagement for vendor testing?
Cevap
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Kart 669
Soru
What does a private data classification indicate?
Cevap
The information concerns an individual or limited internal audience and should not be exposed publicly.
Kart 670
Soru
What does a tabletop recovery exercise test?
Cevap
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Kart 671
Soru
Why prevent password reuse?
Cevap
One compromised password should not unlock other accounts or services.
Kart 672
Soru
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Cevap
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Kart 673
Soru
What does transport encryption protect?
Cevap
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Kart 674
Soru
How can a voice call become an attack vector?
Cevap
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Kart 675
Soru
What should a digital-forensics report document?
Cevap
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Kart 676
Soru
What tradeoff comes with an expansionary risk appetite?
Cevap
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Kart 677
Soru
What does a known penetration-test environment provide?
Cevap
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Kart 678
Soru
Why evaluate compute requirements before deployment?
Cevap
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Kart 679
Soru
Why place sensors at network choke points?
Cevap
They can observe traffic crossing important trust boundaries.
Kart 680
Soru
What should hybrid or remote-work security training emphasize?
Cevap
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Kart 681
Soru
Why plan an application restart separately from a service restart?
Cevap
The application may need its own state handling, user coordination, health checks, and rollback point.
Kart 682
Soru
What is a cryptographic vulnerability?
Cevap
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Kart 683
Soru
Why report findings by asset owner?
Cevap
Owners need clear accountability and a prioritized remediation queue.
Kart 684
Soru
What should guide selection of a secure protocol?
Cevap
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Kart 685
Soru
How do centralized and decentralized governance structures differ?
Cevap
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Kart 686
Soru
How does privacy-aware design limit data retention?
Cevap
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Kart 687
Soru
What does a pressure security sensor detect?
Cevap
Force or weight applied to a protected surface, such as a floor mat or fence line.
Kart 688
Soru
What automation costs should a security team plan for?
Cevap
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Kart 689
Soru
What should RTOS hardening preserve while reducing attack surface?
Cevap
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Kart 690
Soru
What is the goal of disruption-for-chaos activity?
Cevap
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Kart 691
Soru
Which indicator can repeated password guessing produce?
Cevap
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Kart 692
Soru
How does removing unnecessary software harden a system?
Cevap
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Kart 693
Soru
What does NetFlow provide?
Cevap
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Kart 694
Soru
How can a dashboard support an investigation?
Cevap
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Kart 695
Soru
When should a password be expired?
Cevap
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Kart 696
Soru
Why does cryptographic key length matter?
Cevap
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Kart 697
Soru
How can an unsecure Bluetooth connection become an attack vector?
Cevap
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Kart 698
Soru
What is a key risk indicator?
Cevap
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Kart 699
Soru
What should vendor monitoring verify when a contract ends?
Cevap
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Kart 700
Soru
What does a sensitive data classification indicate?
Cevap
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Kart 701
Soru
What does software-defined networking separate?
Cevap
The control plane that decides traffic behavior from the data plane that forwards traffic.
Kart 702
Soru
Where should a web application firewall be placed?
Cevap
In the path of web requests before they reach the protected application.
Kart 703
Soru
What does a simulated recovery exercise test?
Cevap
Participants perform realistic response actions in a controlled environment without disrupting production.
Kart 704
Soru
How can a team verify that a detective control is effective?
Cevap
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Kart 705
Soru
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Cevap
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Kart 706
Soru
What makes a vulnerability cloud-specific?
Cevap
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Kart 707
Soru
How can insurance respond to vulnerability risk?
Cevap
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Kart 708
Soru
How does reputation improve web filtering?
Cevap
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Kart 709
Soru
What does an encryption policy establish?
Cevap
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Kart 710
Soru
How does a microwave security sensor detect movement?
Cevap
It emits microwave energy and detects changes in the reflected signal caused by motion.
Kart 711
Soru
What should IoT-device hardening change before deployment?
Cevap
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Kart 712
Soru
Why track software licenses as assets?
Cevap
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Kart 713
Soru
What does a password manager improve?
Cevap
It can generate and store unique long passwords so users do not memorize or reuse them.
Kart 714
Soru
What makes a ledger open and public?
Cevap
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Kart 715
Soru
What should a payment-change request trigger?
Cevap
Independent verification through a known channel before any account or payment detail is changed.
Kart 716
Soru
What does preserving digital evidence require?
Cevap
Protecting its integrity, context, access history, and availability from collection through final disposition.
Kart 717
Soru
What should a risk report tell decision-makers?
Cevap
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Kart 718
Soru
What should an external assessment report provide?
Cevap
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Kart 719
Soru
What is a centralized design's main resilience risk?
Cevap
A central dependency can become a bottleneck or single point of failure.
Kart 720
Soru
What does mutual TLS add to a TLS-protected service connection?
Cevap
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Kart 721
Soru
What should recurring security-awareness reporting show?
Cevap
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Kart 722
Soru
Why do legacy applications require extra change planning?
Cevap
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Kart 723
Soru
How do a data controller and a data processor differ?
Cevap
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Kart 724
Soru
How can orchestration become a single point of failure?
Cevap
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Kart 725
Soru
Why should defenses account for a threat actor's sophistication and capability?
Cevap
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Kart 726
Soru
How does an injection attack make an application execute unintended instructions?
Cevap
It sends crafted input that an interpreter treats as code or commands instead of data.
Kart 727
Soru
What does a host-based firewall control?
Cevap
Inbound and outbound network traffic for one endpoint according to local rules.
Kart 728
Soru
Why revise alerting after an incident?
Cevap
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Kart 729
Soru
Why include security duties in procurement criteria?
Cevap
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Kart 730
Soru
What does a critical data classification indicate?
Cevap
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Kart 731
Soru
What infrastructure capacity must support failover?
Cevap
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Kart 732
Soru
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Cevap
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Kart 733
Soru
How does a remediation exemption differ from an exception?
Cevap
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Kart 734
Soru
Why should automated EDR or XDR blocking have an exception and rollback path?
Cevap
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Kart 735
Soru
What does a security playbook provide?
Cevap
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Kart 736
Soru
How does an ultrasonic security sensor detect movement?
Cevap
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Kart 737
Soru
What should a managed mobile device require for Bluetooth connections?
Cevap
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Kart 738
Soru
How do password complexity rules differ from password length?
Cevap
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Kart 739
Soru
What makes a certificate third-party trusted?
Cevap
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Kart 740
Soru
Why is an out-of-band check effective against impersonation?
Cevap
It verifies the request through a separate, previously trusted communication path.
Kart 741
Soru
What does a risk exception authorize?
Cevap
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Kart 742
Soru
What security challenge grows in a decentralized design?
Cevap
Consistent policy, inventory, monitoring, and patching become harder.
Kart 743
Soru
How should controls be selected for an unused network path?
Cevap
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Kart 744
Soru
How can a buffer-overflow attack affect an application?
Cevap
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 kart
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Nibomo açılır ve hemen çalışmaya başlayabilirsiniz.