CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
Про цю колоду
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Картки в цій колоді
Картка 1
Питання
What does an information security policy establish?
Відповідь
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
Картка 2
Питання
What is phishing?
Відповідь
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
Картка 3
Питання
What does a public-key certificate bind to an identity?
Відповідь
A public key, together with identifying information and the issuer's signature.
Картка 4
Питання
What is data at rest?
Відповідь
Data stored on media such as disks, databases, backups, or mobile devices.
Картка 5
Питання
How does policy-driven access control decide a zero-trust access request?
Відповідь
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
Картка 6
Питання
What does establishing a secure baseline produce?
Відповідь
An approved, documented configuration that defines the required secure state for a class of computing resource.
Картка 7
Питання
What is hashing used to verify?
Відповідь
Whether data has changed by comparing fixed-length digest values.
Картка 8
Питання
What is impersonation in social engineering?
Відповідь
Pretending to be a trusted person or organization to obtain access, data, or action.
Картка 9
Питання
What is virtualization?
Відповідь
Abstracting physical compute so multiple isolated guest systems can share a host.
Картка 10
Питання
What is chain of custody?
Відповідь
A documented history of who collected, handled, transferred, stored, and examined evidence.
Картка 11
Питання
What is quantitative risk analysis?
Відповідь
Estimating risk with numerical values such as money, frequency, or probability.
Картка 12
Питання
What is a phishing awareness campaign?
Відповідь
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
Картка 13
Питання
What is high availability?
Відповідь
Designing a service to remain accessible despite expected component failures.
Картка 14
Питання
What is a network security zone?
Відповідь
A group of systems with similar trust, function, or control requirements.
Картка 15
Питання
What is risk transfer?
Відповідь
Shifting some financial or operational consequence to another party, such as through insurance or contract.
Картка 16
Питання
What is media sanitization?
Відповідь
Making stored data infeasible to recover for the intended level of protection.
Картка 17
Питання
What does CVSS provide?
Відповідь
A standardized way to describe a vulnerability's technical severity characteristics.
Картка 18
Питання
What does security alerting do?
Відповідь
It turns matched events or behavior into a notification that the right responder can review.
Картка 19
Питання
What does a firewall rule enforce?
Відповідь
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
Картка 20
Питання
What is deprovisioning?
Відповідь
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
Картка 21
Питання
How does inline placement differ from a tap or monitor port?
Відповідь
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
Картка 22
Питання
What is asymmetric encryption?
Відповідь
Encryption that uses a mathematically related public and private key pair.
Картка 23
Питання
What does SPF authorize?
Відповідь
Which mail servers may send mail for a domain in the SMTP envelope.
Картка 24
Питання
What is a possession factor?
Відповідь
Something the claimant has, such as a cryptographic authenticator.
Картка 25
Питання
What does ordinary TLS usually protect and authenticate?
Відповідь
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
Картка 26
Питання
What is single loss expectancy?
Відповідь
The estimated loss from one occurrence of a risk event.
Картка 27
Питання
What does a certificate authority do?
Відповідь
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
Картка 28
Питання
What is a detective control meant to do?
Відповідь
Identify that an unwanted event has happened or is happening.
Картка 29
Питання
What is the security purpose of change-control approval?
Відповідь
Ensure authorized reviewers assess risk before the production change occurs.
Картка 30
Питання
What is shadow IT?
Відповідь
Technology used for organizational work without required approval or oversight.
Картка 31
Питання
What is a buffer overflow vulnerability?
Відповідь
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
Картка 32
Питання
What is ransomware?
Відповідь
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
Картка 33
Питання
How does network segmentation limit an incident?
Відповідь
It restricts communication paths and reduces lateral movement between zones.
Картка 34
Питання
How do load balancing and clustering support availability differently?
Відповідь
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
Картка 35
Питання
What is vendor due diligence?
Відповідь
Evaluating a provider's security, capability, stability, and fit before commitment.
Картка 36
Питання
Who is a data subject?
Відповідь
The person whose personal data is collected or processed.
Картка 37
Питання
What is attestation?
Відповідь
A formal assertion or report about a subject matter, often supported by an independent examination.
Картка 38
Питання
What is a replay attack?
Відповідь
Valid captured data is retransmitted to repeat an authenticated or authorized action.
Картка 39
Питання
What does a wireless site survey establish?
Відповідь
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
Картка 40
Питання
What is the time-of-check stage of a race-condition vulnerability?
Відповідь
The application verifies a condition or resource state before acting on it.
Картка 41
Питання
What is a penetration test?
Відповідь
An authorized attempt to exploit weaknesses and demonstrate practical impact.
Картка 42
Питання
What is a cold recovery site?
Відповідь
A facility with basic space and utilities but little preinstalled technology or current data.
Картка 43
Питання
What is data in transit?
Відповідь
Data moving between systems or across a network.
Картка 44
Питання
What is a vendor security questionnaire?
Відповідь
A structured request for information about a provider's controls and practices.
Картка 45
Питання
How does an internal actor's starting position differ from an external actor's?
Відповідь
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
Картка 46
Питання
What can unexpected account lockouts indicate?
Відповідь
Password guessing, credential stuffing, user error, or a broken client.
Картка 47
Питання
How do permissions enforce access control?
Відповідь
They specify which actions a subject may perform on a particular resource.
Картка 48
Питання
What is log aggregation?
Відповідь
Central collection of logs from multiple sources for search, correlation, and retention.
Картка 49
Питання
Why plan a service restart as part of a change?
Відповідь
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
Картка 50
Питання
What is infrastructure as code?
Відповідь
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
Картка 51
Питання
What should security-awareness program development start with?
Відповідь
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
Картка 52
Питання
What is a voice-based social-engineering attack called?
Відповідь
Vishing.
Картка 53
Питання
What happens during incident-response preparation?
Відповідь
Teams establish people, tools, access, communications, training, and procedures before an incident.
Картка 54
Питання
What does an offensive penetration-testing team do?
Відповідь
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
Картка 55
Питання
What is federation?
Відповідь
One security domain relies on identity assertions from another trusted domain.
Картка 56
Питання
What is asset classification?
Відповідь
Grouping an asset by sensitivity, criticality, or required handling.
Картка 57
Питання
What is cross-site scripting?
Відповідь
Injection of script-capable content that a browser executes in another site's security context.
Картка 58
Питання
What can IDS or IPS trends reveal?
Відповідь
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
Картка 59
Питання
What can unexpected resource inaccessibility indicate?
Відповідь
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
Картка 60
Питання
What is a corrective control meant to do?
Відповідь
Limit damage and restore a secure state after an event.
Картка 61
Питання
How do containers differ from virtual machines?
Відповідь
Containers share the host kernel; virtual machines normally run separate guest operating systems.
Картка 62
Питання
How does an active security device differ from a passive one?
Відповідь
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
Картка 63
Питання
Why is unsupported software a persistent attack surface?
Відповідь
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
Картка 64
Питання
What is annualized rate of occurrence?
Відповідь
The estimated number of times a risk event occurs per year.
Картка 65
Питання
What is an inherence factor?
Відповідь
A biometric characteristic of the claimant.
Картка 66
Питання
What do a threat actor's sophistication and capability describe?
Відповідь
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
Картка 67
Питання
What is a SIEM?
Відповідь
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
Картка 68
Питання
What is sideloading?
Відповідь
Installing software from outside the platform's approved distribution path.
Картка 69
Питання
What does an IDS or IPS signature match?
Відповідь
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
Картка 70
Питання
Why are embedded systems often difficult to patch?
Відповідь
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
Картка 71
Питання
What is a virtual private network?
Відповідь
An encrypted logical connection that carries private traffic across an untrusted or shared network.
Картка 72
Питання
What should an initial security-awareness report establish?
Відповідь
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
Картка 73
Питання
What is symmetric encryption?
Відповідь
Encryption that uses the same secret key to encrypt and decrypt data.
Картка 74
Питання
What happens during incident detection?
Відповідь
Monitoring or a report identifies activity that may meet the organization's incident criteria.
Картка 75
Питання
What is recovery time objective?
Відповідь
The target maximum time to restore a function after disruption.
Картка 76
Питання
Why prioritize password length?
Відповідь
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
Картка 77
Питання
What must sanitization accomplish before an asset leaves organizational control?
Відповідь
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
Картка 78
Питання
What is a real-time operating system designed to provide?
Відповідь
Predictable response timing for tasks with strict deadlines.
Картка 79
Питання
What does fail-open behavior do when a control fails?
Відповідь
It permits traffic or access to preserve availability.
Картка 80
Питання
What is jailbreaking or rooting a mobile device?
Відповідь
Removing platform restrictions to gain privileged control over the operating system.
Картка 81
Питання
What does network access control enforce?
Відповідь
Identity, device posture, and access policy at network connection time and during a session.
Картка 82
Питання
What does data loss prevention do?
Відповідь
Detects and may block sensitive data use or transfer that violates policy.
Картка 83
Питання
What security property does a blockchain provide?
Відповідь
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
Картка 84
Питання
What is recovery point objective?
Відповідь
The target maximum acceptable data loss measured backward in time.
Картка 85
Питання
How do ICS and SCADA relate?
Відповідь
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
Картка 86
Питання
What does fail-closed behavior do when a control fails?
Відповідь
It denies traffic or access to preserve security.
Картка 87
Питання
Which keys create and verify a typical digital signature?
Відповідь
The signer creates it with a private key, and others verify it with the corresponding public key.
Картка 88
Питання
What is SQL injection?
Відповідь
Input that alters the structure or meaning of a database query because code and data were not safely separated.
Картка 89
Питання
What does DKIM verify?
Відповідь
That selected message content was signed by a domain and was not altered after signing.
Картка 90
Питання
What is post-incident activity?
Відповідь
Learning from the event and improving controls, plans, and recovery based on evidence.
Картка 91
Питання
What characterizes an expansionary risk appetite?
Відповідь
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
Картка 92
Питання
How do centralized and decentralized architectures differ?
Відповідь
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
Картка 93
Питання
What does a certificate revocation list publish?
Відповідь
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
Картка 94
Питання
What is a legal hold?
Відповідь
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
Картка 95
Питання
What is exposure factor in quantitative risk analysis?
Відповідь
The estimated percentage of an asset's value lost in one event.
Картка 96
Питання
What is decentralized architecture?
Відповідь
Control or service responsibility is distributed across multiple independent components or locations.
Картка 97
Питання
What is tokenization?
Відповідь
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
Картка 98
Питання
How can automation act as a workforce multiplier?
Відповідь
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
Картка 99
Питання
What can endpoint process logs reveal?
Відповідь
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
Картка 100
Питання
What does the CIA triad protect?
Відповідь
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
Картка 101
Питання
How does data masking protect information?
Відповідь
It hides selected values or characters while preserving a usable representation.
Картка 102
Питання
How can a national requirement affect security governance?
Відповідь
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
Картка 103
Питання
What do integrations and APIs provide to security orchestration?
Відповідь
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
Картка 104
Питання
What makes a compliance report external?
Відповідь
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
Картка 105
Питання
What does a cryptographic algorithm define?
Відповідь
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
Картка 106
Питання
Why compare systems with a secure baseline regularly?
Відповідь
To detect drift, unauthorized changes, and missing hardening.
Картка 107
Питання
What does integrity protect?
Відповідь
The accuracy and completeness of data and systems against unauthorized change.
Картка 108
Питання
What does vulnerability classification organize?
Відповідь
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
Картка 109
Питання
What does a password standard define?
Відповідь
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
Картка 110
Питання
What technology capacity must a recovery design plan for?
Відповідь
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
Картка 111
Питання
What does a confidential data classification indicate?
Відповідь
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
Картка 112
Питання
What makes a vendor assessment independent?
Відповідь
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
Картка 113
Питання
What lets a worm spread without attaching itself to another file?
Відповідь
It is a standalone program that replicates across reachable systems or services.
Картка 114
Питання
What is microsegmentation?
Відповідь
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
Картка 115
Питання
What can application logs reveal?
Відповідь
Transactions, errors, user actions, and application-specific security events.
Картка 116
Питання
What does deploying a secure baseline require?
Відповідь
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
Картка 117
Питання
How can resource-provisioning automation improve security?
Відповідь
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
Картка 118
Питання
What does availability protect?
Відповідь
Reliable, timely access to systems and data when authorized users need them.
Картка 119
Питання
Why must a change request describe business impact?
Відповідь
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
Картка 120
Питання
What does an authenticated vulnerability scan add?
Відповідь
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
Картка 121
Питання
What does a change-management procedure specify?
Відповідь
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
Картка 122
Питання
What is a sanction for noncompliance?
Відповідь
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
Картка 123
Питання
How can email deliver a security attack?
Відповідь
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
Картка 124
Питання
What is an internal compliance audit?
Відповідь
An organization-led examination of whether selected operations and controls meet defined requirements.
Картка 125
Питання
What is a Trojan?
Відповідь
Malware disguised as legitimate or desirable software.
Картка 126
Питання
What is clustering?
Відповідь
Multiple systems work together to provide a service and tolerate member failure.
Картка 127
Питання
What makes data regulated?
Відповідь
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
Картка 128
Питання
What does a wireless heat map show?
Відповідь
Measured or modeled signal strength and coverage across a physical area.
Картка 129
Питання
How should vendor criticality affect due diligence?
Відповідь
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
Картка 130
Питання
How can a digital signature support non-repudiation?
Відповідь
It provides evidence that the holder of a private key signed specific data.
Картка 131
Питання
What should vulnerability prioritization consider beyond severity?
Відповідь
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
Картка 132
Питання
What is a security guideline?
Відповідь
Recommended practice that allows judgment unless adopted as a requirement.
Картка 133
Питання
What usually distinguishes a nation-state threat actor?
Відповідь
Strategic objectives, substantial resources, patience, and advanced operational capability.
Картка 134
Питання
What is spyware?
Відповідь
Software that secretly collects information about a user or system.
Картка 135
Питання
Why maintain an allow list for applications?
Відповідь
Only explicitly approved software is permitted to execute.
Картка 136
Питання
How can an image become an attack vector?
Відповідь
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
Картка 137
Питання
What makes a security control technical?
Відповідь
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
Картка 138
Питання
What is identity proofing?
Відповідь
Establishing that a person is who they claim to be before issuing an account or credential.
Картка 139
Питання
What is an automated security guardrail?
Відповідь
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
Картка 140
Питання
Why assign an owner to a planned change?
Відповідь
To make one party accountable for coordination, execution, and follow-through.
Картка 141
Питання
How can national privacy law affect data handling?
Відповідь
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
Картка 142
Питання
What is continuity of operations?
Відповідь
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
Картка 143
Питання
What security tradeoff comes with BYOD?
Відповідь
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
Картка 144
Питання
How should policies and handbooks support security training?
Відповідь
They provide accessible, current rules and reporting steps that training can apply to real situations.
Картка 145
Питання
What is a keylogger?
Відповідь
A tool that records keystrokes to capture data such as credentials.
Картка 146
Питання
What makes information a trade secret?
Відповідь
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
Картка 147
Питання
What does authentication establish?
Відповідь
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
Картка 148
Питання
What risk comes from an untrusted file attachment?
Відповідь
Opening or parsing it can execute malicious code or expose data.
Картка 149
Питання
How does risk tolerance affect vulnerability remediation?
Відповідь
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
Картка 150
Питання
How can a global requirement affect security governance?
Відповідь
It can require a common control and oversight approach across multiple countries while local obligations still apply.
Картка 151
Питання
Why should questionnaire answers be supported by evidence?
Відповідь
Self-assertions alone may not prove that controls are designed or operating effectively.
Картка 152
Питання
What is an independent third-party audit?
Відповідь
An external party with suitable independence examines evidence against defined criteria.
Картка 153
Питання
What do account provisioning and deprovisioning do?
Відповідь
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
Картка 154
Питання
What is an unskilled attacker commonly called?
Відповідь
A script kiddie: someone who relies on tools or instructions created by others.
Картка 155
Питання
What is a rootkit?
Відповідь
Software designed to maintain privileged, concealed access by altering or subverting the system.
Картка 156
Питання
What does an access control list enforce?
Відповідь
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
Картка 157
Питання
What should system security monitoring observe?
Відповідь
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
Картка 158
Питання
What can operating-system security logs reveal?
Відповідь
Authentication, privilege use, policy changes, services, and other host security events.
Картка 159
Питання
Why isolate operational technology from general business networks?
Відповідь
To limit attack paths into safety- and availability-critical processes.
Картка 160
Питання
What is the COPE mobile deployment model?
Відповідь
The organization owns the device but permits defined personal use while retaining management control.
Картка 161
Питання
What security work belongs in asset acquisition and procurement?
Відповідь
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
Картка 162
Питання
How can user-provisioning automation improve security?
Відповідь
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
Картка 163
Питання
What people capacity must a continuity plan account for?
Відповідь
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
Картка 164
Питання
What do authorization models define?
Відповідь
How permissions are assigned to authenticated subjects and evaluated for requested actions.
Картка 165
Питання
Why are removable devices an attack vector?
Відповідь
They can introduce malware or remove data while bypassing network controls.
Картка 166
Питання
What should predeployment change-test results show?
Відповідь
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
Картка 167
Питання
What is the time-of-use stage of a race-condition vulnerability?
Відповідь
The application acts on a resource after the check, creating a gap in which another process may change the resource.
Картка 168
Питання
What is data in use?
Відповідь
Data actively processed in memory or by an application.
Картка 169
Питання
What does open-source vulnerability intelligence contribute?
Відповідь
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
Картка 170
Питання
What can file-integrity monitoring detect?
Відповідь
Unexpected changes to protected files, directories, or configuration.
Картка 171
Питання
Why should deprovisioning be prompt?
Відповідь
Former users or roles should not retain usable access.
Картка 172
Питання
What is an acceptable use policy?
Відповідь
Rules for permitted and prohibited use of organizational systems, accounts, and data.
Картка 173
Питання
What makes a compliance report internal?
Відповідь
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
Картка 174
Питання
What is a logic bomb?
Відповідь
Malicious code that activates when a specified condition or time is reached.
Картка 175
Питання
What does a right-to-audit clause provide?
Відповідь
Contractual authority to inspect or obtain evidence about agreed controls.
Картка 176
Питання
Where should a forward proxy sit in an enterprise traffic path?
Відповідь
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
Картка 177
Питання
Which cues should make a message look suspicious?
Відповідь
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
Картка 178
Питання
What makes a security control managerial?
Відповідь
It directs risk and governance through decisions such as policies, assessments, and oversight.
Картка 179
Питання
What is the CYOD mobile deployment model?
Відповідь
The user selects from organization-approved device options that remain subject to corporate security requirements.
Картка 180
Питання
How does client-based vulnerable software differ from an agentless exposure?
Відповідь
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
Картка 181
Питання
What makes a risk assessment recurring?
Відповідь
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
Картка 182
Питання
What does a defensive penetration-testing team practice?
Відповідь
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
Картка 183
Питання
In a zero-trust data plane, what can the subject or system represent?
Відповідь
The user, device, workload, or service requesting access to a protected resource.
Картка 184
Питання
What primarily motivates a hacktivist?
Відповідь
A political, social, or ideological cause.
Картка 185
Питання
What is bloatware?
Відповідь
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
Картка 186
Питання
Why keep endpoint-protection signatures and engines current?
Відповідь
They need current detection logic to recognize newly identified malware and exploit behavior.
Картка 187
Питання
What should application security monitoring observe?
Відповідь
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
Картка 188
Питання
What is role-based access control?
Відповідь
Permissions are assigned to roles, and identities receive access through their roles.
Картка 189
Питання
What is geographic dispersal?
Відповідь
Placing redundant resources in separate locations so one regional event does not affect all copies.
Картка 190
Питання
What is a malicious update?
Відповідь
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
Картка 191
Питання
What does static application analysis inspect?
Відповідь
Source code, bytecode, or compiled code without executing the application.
Картка 192
Питання
What does a firewall access list define?
Відповідь
An ordered set of traffic-matching conditions and the action applied when a condition matches.
Картка 193
Питання
What does a disaster recovery policy establish?
Відповідь
Management expectations for restoring technology and data after a disruptive event.
Картка 194
Питання
How does logical segmentation separate workloads that share physical infrastructure?
Відповідь
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
Картка 195
Питання
How should IDS and IPS placement differ?
Відповідь
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
Картка 196
Питання
What should automated ticket creation capture?
Відповідь
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
Картка 197
Питання
What makes information intellectual property?
Відповідь
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
Картка 198
Питання
What is a backout plan?
Відповідь
Predefined steps for safely reversing a failed or harmful change.
Картка 199
Питання
Why is an unsecure wireless network an attack vector?
Відповідь
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
Картка 200
Питання
What is physical brute force?
Відповідь
Using force to defeat a lock, barrier, enclosure, or other physical control.
Картка 201
Питання
What is application sandboxing?
Відповідь
Running code in a constrained environment with limited access to the host and data.
Картка 202
Питання
Why assign an asset owner?
Відповідь
One accountable party must decide its use, protection, and lifecycle.
Картка 203
Питання
What happens during risk identification?
Відповідь
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
Картка 204
Питання
What should an SLA state about breach notification?
Відповідь
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
Картка 205
Питання
How do due diligence and due care differ in compliance?
Відповідь
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
Картка 206
Питання
What is attribute-based access control?
Відповідь
Policy evaluates attributes of the subject, resource, action, and environment.
Картка 207
Питання
What does a zero-trust policy engine do?
Відповідь
It evaluates policy and signals to decide whether access should be allowed.
Картка 208
Питання
How does a cloud responsibility matrix allocate security duties?
Відповідь
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
Картка 209
Питання
Where should a load balancer sit in a service path?
Відповідь
In front of service instances so it can route requests to healthy backends.
Картка 210
Питання
What should the security team do with a reported suspicious message?
Відповідь
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
Картка 211
Питання
What makes an operating-system vulnerability high impact?
Відповідь
It can affect every application and security control that relies on the compromised OS.
Картка 212
Питання
What does dynamic application analysis inspect?
Відповідь
The behavior and externally visible weaknesses of a running application.
Картка 213
Питання
How can false-positive trends affect IDS or IPS tuning?
Відповідь
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
Картка 214
Питання
What does a business continuity policy establish?
Відповідь
Management expectations for sustaining and restoring critical business functions.
Картка 215
Питання
What is a hot recovery site?
Відповідь
A ready, synchronized environment intended to take over quickly.
Картка 216
Питання
What makes an insider threat distinct?
Відповідь
The actor has legitimate access or organizational knowledge that can be misused.
Картка 217
Питання
What is RFID cloning?
Відповідь
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
Картка 218
Питання
Why apply vendor security updates promptly?
Відповідь
They remove known weaknesses before attackers can exploit the unpatched exposure.
Картка 219
Питання
What should infrastructure security monitoring observe?
Відповідь
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
Картка 220
Питання
What can firewall logs reveal?
Відповідь
Allowed or denied network connections across controlled boundaries.
Картка 221
Питання
Why minimize open service ports?
Відповідь
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
Картка 222
Питання
What is threat hunting?
Відповідь
A proactive search for evidence of malicious activity that existing detections have not confirmed.
Картка 223
Питання
What triggers an ad hoc risk assessment?
Відповідь
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
Картка 224
Питання
What makes an assessment external?
Відповідь
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
Картка 225
Питання
What is data sovereignty?
Відповідь
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
Картка 226
Питання
What security boundary does a cellular connection create for a mobile device?
Відповідь
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
Картка 227
Питання
What makes a security control operational?
Відповідь
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
Картка 228
Питання
What is discretionary access control?
Відповідь
A resource owner can decide who receives access, within system policy.
Картка 229
Питання
How can careful automation support employee retention?
Відповідь
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
Картка 230
Питання
Why does ease of deployment matter in an architecture decision?
Відповідь
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
Картка 231
Питання
What tradeoff comes with placing an NGFW inline?
Відповідь
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
Картка 232
Питання
What does a zero-trust policy administrator do?
Відповідь
It carries out the policy engine's decision, such as creating or ending a session.
Картка 233
Питання
What should a master service agreement define for data return and deletion?
Відповідь
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
Картка 234
Питання
What is an environmental physical attack?
Відповідь
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
Картка 235
Питання
When should a maintenance window be chosen?
Відповідь
When disruption and rollback can be managed with the least business impact.
Картка 236
Питання
What is memory injection?
Відповідь
Placing malicious code or data into another process's memory so it executes in that process's context.
Картка 237
Питання
What does software composition analysis find?
Відповідь
Known risks and license information in third-party dependencies.
Картка 238
Питання
What is DNS filtering?
Відповідь
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
Картка 239
Питання
What should an incident response policy establish?
Відповідь
Authority, scope, reporting duties, and organizational commitment for incident handling.
Картка 240
Питання
How can noncompliance cause reputational damage?
Відповідь
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
Картка 241
Питання
What does full-disk encryption protect?
Відповідь
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
Картка 242
Питання
Why are default credentials dangerous?
Відповідь
They are widely known or easily discovered and often remain unchanged.
Картка 243
Питання
What makes a risk assessment one-time?
Відповідь
It evaluates a defined decision or scope once without an established repeating cadence.
Картка 244
Питання
What is a warm recovery site?
Відповідь
A partially equipped environment that needs some data restoration or configuration before use.
Картка 245
Питання
What does application input validation do?
Відповідь
It checks that input matches the expected type, length, range, and format before use.
Картка 246
Питання
What should an asset inventory record besides a device name?
Відповідь
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
Картка 247
Питання
What is mandatory access control?
Відповідь
A central authority enforces access through labels and rules that ordinary owners cannot override.
Картка 248
Питання
What security benefit does infrastructure as code provide?
Відповідь
Repeatable, reviewable deployments that reduce undocumented configuration drift.
Картка 249
Питання
When should a public service control fail closed?
Відповідь
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
Картка 250
Питання
What should users do with a suspicious message?
Відповідь
Report it through the approved channel without interacting with its links or attachments.
Картка 251
Питання
What usually motivates organized cybercrime?
Відповідь
Financial gain through scalable or repeatable criminal activity.
Картка 252
Питання
How can malicious code support a network attack?
Відповідь
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
Картка 253
Питання
When is virtual patching useful?
Відповідь
When a network or application control can block exploit traffic before the underlying system can be patched.
Картка 254
Питання
What does security-monitoring reporting provide?
Відповідь
A summarized, audience-appropriate view of findings, trends, risk, and response status.
Картка 255
Питання
What does data geolocation identify?
Відповідь
The physical or legal location where data is stored, processed, or transmitted.
Картка 256
Питання
What does a zero-trust policy enforcement point do?
Відповідь
It enables, monitors, and terminates the connection between a subject and a resource.
Картка 257
Питання
What is cryptographic key exchange?
Відповідь
A method for parties to establish shared key material over an untrusted channel.
Картка 258
Питання
How can a vendor become a supply-chain attack vector?
Відповідь
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
Картка 259
Питання
Why can legacy hardware remain vulnerable?
Відповідь
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
Картка 260
Питання
What can proprietary vulnerability intelligence add beyond open sources?
Відповідь
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
Картка 261
Питання
How does a centralized proxy apply web filtering?
Відповідь
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
Картка 262
Питання
How can continuous integration and testing improve security automation?
Відповідь
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
Картка 263
Питання
What is containment?
Відповідь
Limiting an incident's spread or damage while preserving necessary operations and evidence.
Картка 264
Питання
What is a software development lifecycle policy meant to ensure?
Відповідь
Security requirements and checks are integrated throughout design, development, release, and maintenance.
Картка 265
Питання
What makes risk assessment continuous?
Відповідь
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
Картка 266
Питання
What is a memorandum of agreement?
Відповідь
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
Картка 267
Питання
What makes a penetration test integrated?
Відповідь
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
Картка 268
Питання
How does a DNS amplification attack magnify traffic?
Відповідь
It sends small spoofed queries that trigger larger replies toward the victim.
Картка 269
Питання
Why does ease of recovery matter in an architecture decision?
Відповідь
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
Картка 270
Питання
What does 802.1X control before a device receives normal network access?
Відповідь
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
Картка 271
Питання
What is rule-based access control?
Відповідь
System-wide rules grant or deny access based on conditions such as network, time, or action.
Картка 272
Питання
What is mobile device management?
Відповідь
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
Картка 273
Питання
What tradeoff comes with a cold recovery site?
Відповідь
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
Картка 274
Питання
Why identify stakeholders before approving a security-sensitive change?
Відповідь
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
Картка 275
Питання
How do attestation and acknowledgement differ?
Відповідь
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
Картка 276
Питання
What does zero-trust adaptive identity mean?
Відповідь
Access decisions adjust to current risk signals rather than relying only on a static login.
Картка 277
Питання
What makes a security control physical?
Відповідь
It protects facilities or equipment through a tangible barrier or mechanism.
Картка 278
Питання
What is geo-fencing for data?
Відповідь
Enforcing location-based boundaries on where data or services may be accessed or operated.
Картка 279
Питання
What does a Trusted Platform Module protect?
Відповідь
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
Картка 280
Питання
Why can a managed service provider amplify risk?
Відповідь
Its privileged access and shared tooling can provide a path into many customers.
Картка 281
Питання
What does probability express in risk analysis?
Відповідь
A quantified chance that a defined event will occur within stated conditions or time.
Картка 282
Питання
Why can shadow IT create a threat?
Відповідь
It bypasses security review, inventory, monitoring, and supported configuration.
Картка 283
Питання
What is on-path interception?
Відповідь
An attacker positions between communicating parties to observe or alter traffic.
Картка 284
Питання
Why include encryption in a system-hardening baseline?
Відповідь
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
Картка 285
Питання
Why tune security alerts?
Відповідь
To keep useful detections while reducing noise that wastes analyst attention.
Картка 286
Питання
What can IPS or IDS logs contribute to an investigation?
Відповідь
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
Картка 287
Питання
What is VM escape?
Відповідь
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
Картка 288
Питання
How can segmentation reduce vulnerability exposure before a patch is available?
Відповідь
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
Картка 289
Питання
Why should firewall policy name the required ports and protocols explicitly?
Відповідь
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
Картка 290
Питання
What is a change management policy meant to control?
Відповідь
How changes are requested, assessed, approved, tested, implemented, and reviewed.
Картка 291
Питання
What is a hybrid-cloud architecture?
Відповідь
An environment that integrates private or on-premises resources with public cloud services.
Картка 292
Питання
How do AH and ESP differ in the security services they can provide?
Відповідь
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
Картка 293
Питання
What makes user behavior risky?
Відповідь
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
Картка 294
Питання
What is least privilege?
Відповідь
Granting only the access needed for the required task and no more.
Картка 295
Питання
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Відповідь
Transmission to HTTPS, script access, and cross-site sending, respectively.
Картка 296
Питання
Why discover unmanaged assets?
Відповідь
Unknown systems cannot be patched, monitored, or governed reliably.
Картка 297
Питання
What is a service-level agreement?
Відповідь
Measurable service commitments and remedies, such as availability or response targets.
Картка 298
Питання
What should govern automated security escalation?
Відповідь
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
Картка 299
Питання
What is platform diversity as a resilience strategy?
Відповідь
Using different implementations so one common flaw or failure is less likely to affect every copy.
Картка 300
Питання
How can replayed session material affect an application?
Відповідь
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
Картка 301
Питання
What is an implicit trust zone in zero trust?
Відповідь
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
Картка 302
Питання
What does salting a password hash accomplish?
Відповідь
It makes identical passwords hash differently and defeats precomputed hash tables.
Картка 303
Питання
What is spear phishing?
Відповідь
Phishing tailored to a specific person, role, or organization.
Картка 304
Питання
What is eradication?
Відповідь
Removing the attacker's access, malicious artifacts, and exploited conditions.
Картка 305
Питання
Who is a risk owner?
Відповідь
The person accountable for deciding and monitoring how a specific risk is handled.
Картка 306
Питання
What does a partially known penetration-test environment provide?
Відповідь
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
Картка 307
Питання
What is a microservices architecture?
Відповідь
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
Картка 308
Питання
What is a jump server?
Відповідь
A hardened intermediary used to reach systems in a restricted management network.
Картка 309
Питання
What can happen when a configuration change is made without dependency analysis?
Відповідь
A downstream service can fail even when the changed component works.
Картка 310
Питання
What is resource reuse exposure?
Відповідь
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
Картка 311
Питання
Why does financial information require explicit protection?
Відповідь
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
Картка 312
Питання
What does CVE provide?
Відповідь
A common identifier for a publicly disclosed vulnerability.
Картка 313
Питання
Where can DLP controls operate?
Відповідь
On endpoints, networks, email, and cloud services, depending on the product and visibility.
Картка 314
Питання
What does privileged password vaulting protect?
Відповідь
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
Картка 315
Питання
What does an access-control standard define?
Відповідь
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
Картка 316
Питання
How can automation support compliance monitoring?
Відповідь
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
Картка 317
Питання
What does static code analysis examine?
Відповідь
Source or compiled code for weakness patterns without executing the application.
Картка 318
Питання
What actor attribute describes funding, time, and personnel?
Відповідь
Resources.
Картка 319
Питання
What is DNS poisoning?
Відповідь
Introducing false DNS data so names resolve to attacker-chosen destinations.
Картка 320
Питання
Why change default credentials during hardening?
Відповідь
Default secrets are predictable and commonly targeted.
Картка 321
Питання
What does quarantine do after a security alert?
Відповідь
It restricts a suspected asset or object while analysts validate and remediate the risk.
Картка 322
Питання
What does key stretching do for stored passwords?
Відповідь
It deliberately makes each password guess more computationally expensive.
Картка 323
Питання
What is smishing?
Відповідь
Phishing delivered through SMS or another text-messaging service.
Картка 324
Питання
What is qualitative risk analysis?
Відповідь
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
Картка 325
Питання
What is a master service agreement?
Відповідь
An umbrella contract establishing general legal and commercial terms for ongoing work.
Картка 326
Питання
What is threat scope reduction?
Відповідь
Narrowing the systems, privileges, or paths an attacker can reach.
Картка 327
Питання
Why use a third-party cloud service instead of building locally?
Відповідь
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
Картка 328
Питання
What should determine security-device placement?
Відповідь
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
Картка 329
Питання
What does situational awareness mean for a user?
Відповідь
Notice the people, devices, requests, location, and context around a task before acting.
Картка 330
Питання
What does a failover test validate?
Відповідь
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
Картка 331
Питання
What is a preventive control meant to do?
Відповідь
Stop an unwanted event before it succeeds.
Картка 332
Питання
What is just-in-time privileged access?
Відповідь
Elevated access is granted only when needed and expires after a short approved period.
Картка 333
Питання
What safeguard should security-group automation enforce?
Відповідь
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
Картка 334
Питання
How does a reflected DDoS attack hide and multiply sources?
Відповідь
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
Картка 335
Питання
What is a security misconfiguration?
Відповідь
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
Картка 336
Питання
Why can the same vulnerability have different organizational impact?
Відповідь
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
Картка 337
Питання
What does URL scanning evaluate before a user opens a web destination?
Відповідь
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
Картка 338
Питання
What is the board's security governance role?
Відповідь
Provide oversight, set risk direction, and hold executives accountable.
Картка 339
Питання
What does code signing establish?
Відповідь
That code came from the holder of the signing key and has not changed since signing.
Картка 340
Питання
How should an asset's classification affect security operations?
Відповідь
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
Картка 341
Питання
How does encryption protect data?
Відповідь
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
Картка 342
Питання
What is a secure enclave?
Відповідь
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
Картка 343
Питання
What is business email compromise?
Відповідь
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
Картка 344
Питання
What is recovery in incident response?
Відповідь
Restoring services safely, monitoring them, and returning to normal operations.
Картка 345
Питання
How is single loss expectancy commonly estimated?
Відповідь
Asset value multiplied by the exposure factor.
Картка 346
Питання
What does an unknown penetration-test environment provide?
Відповідь
The tester begins with little or no internal information, modeling an external attacker's discovery process.
Картка 347
Питання
What security boundary does a hypervisor provide?
Відповідь
It isolates virtual machines while controlling their access to shared hardware.
Картка 348
Питання
Why does a TLS tunnel not protect a compromised endpoint?
Відповідь
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
Картка 349
Питання
Why update diagrams after an infrastructure change?
Відповідь
Operations and incident responders need the documentation to match the deployed environment.
Картка 350
Питання
What does privacy ownership assign?
Відповідь
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
Картка 351
Питання
What does a security control gap analysis compare?
Відповідь
The controls required for the target state with the controls currently in place.
Картка 352
Питання
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Відповідь
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
Картка 353
Питання
What is application privilege escalation?
Відповідь
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
Картка 354
Питання
What risk remains when unnecessary software is left installed?
Відповідь
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
Картка 355
Питання
What does SCAP standardize?
Відповідь
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
Картка 356
Питання
What can packet capture reveal?
Відповідь
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
Картка 357
Питання
What makes a privileged credential ephemeral?
Відповідь
It is created for a limited task or session and expires or is destroyed automatically after that use.
Картка 358
Питання
How do a statement of work and a work order differ?
Відповідь
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
Картка 359
Питання
Why might multi-cloud improve resilience?
Відповідь
A provider-wide failure need not stop workloads that can run independently elsewhere.
Картка 360
Питання
How can a service provider introduce a supply-chain vulnerability?
Відповідь
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
Картка 361
Питання
What is a false positive in vulnerability scanning?
Відповідь
A reported weakness that is not actually present or exploitable in the assessed context.
Картка 362
Питання
How do EDR and XDR differ?
Відповідь
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
Картка 363
Питання
What should onboarding and offboarding procedures coordinate?
Відповідь
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
Картка 364
Питання
How should an organization harden managed mobile devices?
Відповідь
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
Картка 365
Питання
What is a certificate signing request?
Відповідь
A request containing a public key and subject information for a certificate authority to sign.
Картка 366
Питання
What is pretexting?
Відповідь
Using a fabricated role or situation to make a request seem legitimate.
Картка 367
Питання
How is annualized loss expectancy commonly estimated?
Відповідь
Single loss expectancy multiplied by annualized rate of occurrence.
Картка 368
Питання
What security consequence follows from containers sharing a kernel?
Відповідь
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
Картка 369
Питання
Where does 802.1X enforce a network admission decision?
Відповідь
At the controlled switch port or wireless access point before normal network access is granted.
Картка 370
Питання
What should insider-threat awareness teach?
Відповідь
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
Картка 371
Питання
What access action is suitable for careful automation?
Відповідь
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
Картка 372
Питання
What is an evil twin?
Відповідь
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 картки
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Вивчати цю колоду безкоштовноВідкриється Nibomo, і ви зможете почати навчання.
Картка 373
Питання
Does non-human-readable data need less protection?
Відповідь
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
Картка 374
Питання
What does authenticating a system establish?
Відповідь
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
Картка 375
Питання
What does LDAP provide in identity systems?
Відповідь
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
Картка 376
Питання
What is a deterrent control meant to do?
Відповідь
Discourage an attacker from attempting an unwanted action.
Картка 377
Питання
Why update procedures after changing a security control?
Відповідь
Staff need accurate steps for operating, monitoring, and recovering the new control.
Картка 378
Питання
How does OCSP differ from a certificate revocation list?
Відповідь
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
Картка 379
Питання
What is the goal of data exfiltration?
Відповідь
Remove data from its authorized environment without permission.
Картка 380
Питання
What is a watering-hole attack?
Відповідь
Compromising a site frequented by the intended targets so their visits expose them.
Картка 381
Питання
How can a hardware provider introduce a supply-chain vulnerability?
Відповідь
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
Картка 382
Питання
What is application forgery?
Відповідь
Creating or altering a request, token, or object so the application treats it as authentic.
Картка 383
Питання
How does least privilege mitigate compromise?
Відповідь
It limits the actions and resources available to a compromised account or process.
Картка 384
Питання
What is serverless computing?
Відповідь
A model where the provider manages servers and the customer deploys event-driven code or functions.
Картка 385
Питання
What makes an infrastructure control effective for a specific risk?
Відповідь
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
Картка 386
Питання
What does parallel recovery processing test?
Відповідь
Whether primary and alternate environments can run together consistently before a controlled cutover.
Картка 387
Питання
Which password-authentication method does WPA3-Personal use?
Відповідь
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
Картка 388
Питання
How does data retention affect asset disposal?
Відповідь
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
Картка 389
Питання
What is a false negative in vulnerability scanning?
Відповідь
A real weakness that the assessment fails to report.
Картка 390
Питання
What does recurring security scanning add to monitoring?
Відповідь
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
Картка 391
Питання
What should guide port selection for a secure protocol?
Відповідь
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
Картка 392
Питання
What does forensic acquisition create?
Відповідь
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
Картка 393
Питання
How do system owners and data owners divide security accountability?
Відповідь
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
Картка 394
Питання
What does likelihood express in risk analysis?
Відповідь
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
Картка 395
Питання
What is a memorandum of understanding?
Відповідь
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
Картка 396
Питання
What does the right to be forgotten generally require?
Відповідь
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
Картка 397
Питання
What does an audit committee oversee?
Відповідь
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
Картка 398
Питання
What does identity interoperability require?
Відповідь
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
Картка 399
Питання
How does a bollard protect a facility?
Відповідь
It blocks or redirects vehicles before they can reach a protected area.
Картка 400
Питання
How can hashing protect a downloaded file?
Відповідь
A trusted digest lets the recipient detect whether the file changed.
Картка 401
Питання
What is a credential replay attack?
Відповідь
Using captured valid credentials or tokens again without needing to discover the secret.
Картка 402
Питання
How can automation complexity create security risk?
Відповідь
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
Картка 403
Питання
What must an architecture provide when a component cannot be patched?
Відповідь
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
Картка 404
Питання
What makes remote access secure?
Відповідь
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
Картка 405
Питання
What should users verify before connecting removable media or a cable?
Відповідь
That the device and connection are approved, expected, and handled under organizational policy.
Картка 406
Питання
What is a self-signed certificate?
Відповідь
A certificate signed by its own private key rather than by a separate trusted issuer.
Картка 407
Питання
What is brand impersonation?
Відповідь
Using a trusted organization's identity or look to deceive people.
Картка 408
Питання
What characterizes a conservative risk appetite?
Відповідь
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
Картка 409
Питання
What should a managed mobile device verify before using Wi-Fi?
Відповідь
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
Картка 410
Питання
What is a zero-day vulnerability?
Відповідь
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
Картка 411
Питання
What does verification confirm after vulnerability remediation?
Відповідь
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
Картка 412
Питання
What is user and entity behavior analytics?
Відповідь
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
Картка 413
Питання
What does a physical security policy establish?
Відповідь
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
Картка 414
Питання
What does a UPS provide?
Відповідь
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
Картка 415
Питання
What is a nondisclosure agreement?
Відповідь
A contract restricting use and disclosure of defined confidential information.
Картка 416
Питання
What should be checked before assigning a user permission?
Відповідь
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
Картка 417
Питання
How does espionage differ from ordinary theft?
Відповідь
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
Картка 418
Питання
What is password spraying?
Відповідь
Trying a small set of common passwords across many accounts to avoid lockouts.
Картка 419
Питання
What is the purpose of system isolation during an incident?
Відповідь
Stop harmful communication while preserving the system for response and investigation.
Картка 420
Питання
What is a security benchmark?
Відповідь
A documented set of recommended configuration checks for a platform or product.
Картка 421
Питання
Which metadata fields give a log record investigative context?
Відповідь
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
Картка 422
Питання
What does an access-control vestibule prevent?
Відповідь
It limits tailgating by allowing controlled passage through one door at a time.
Картка 423
Питання
What is version control's security value for configuration?
Відповідь
It preserves attributable history and enables review or rollback of changes.
Картка 424
Питання
Why use both internal and external compliance monitoring?
Відповідь
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
Картка 425
Питання
What distinguishes on-premises architecture?
Відповідь
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
Картка 426
Питання
What risk can split tunneling add to a VPN?
Відповідь
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
Картка 427
Питання
What is a certificate root of trust?
Відповідь
A trusted root certificate or key from which a client validates a certificate chain.
Картка 428
Питання
What is typosquatting?
Відповідь
Registering a look-alike domain based on common typing errors or visual similarity.
Картка 429
Питання
What is root-cause analysis?
Відповідь
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
Картка 430
Питання
What is risk tolerance?
Відповідь
The acceptable variation or boundary around a specific objective or risk area.
Картка 431
Питання
What is a security self-assessment?
Відповідь
A structured internal evaluation in which the organization measures its own controls against selected criteria.
Картка 432
Питання
What does data masking change?
Відповідь
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
Картка 433
Питання
How do wireless authentication protocols let clients prove identity securely?
Відповідь
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
Картка 434
Питання
Why reconcile inventory with network discovery?
Відповідь
Differences expose missing records, retired systems, or unauthorized devices.
Картка 435
Питання
Why does sideloading raise mobile risk?
Відповідь
It can bypass store review, signing policy, and managed application controls.
Картка 436
Питання
What does an information-sharing organization add to vulnerability management?
Відповідь
Sector or community intelligence about relevant threats, incidents, and defensive action.
Картка 437
Питання
What does a web-filter block rule specify?
Відповідь
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
Картка 438
Питання
How do data custodians and data stewards differ?
Відповідь
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
Картка 439
Питання
What is a brute-force password attack?
Відповідь
Systematically trying many candidate secrets against an account or protected value.
Картка 440
Питання
What is a compensating control?
Відповідь
An alternative safeguard used when the preferred control is impractical or unavailable.
Картка 441
Питання
How can location act as an authentication factor?
Відповідь
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
Картка 442
Питання
Why must security automation remain supportable?
Відповідь
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
Картка 443
Питання
What does a standby generator provide?
Відповідь
Longer-duration power during a utility outage, after a startup delay.
Картка 444
Питання
What makes an architecture air-gapped?
Відповідь
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
Картка 445
Питання
What is a software-defined WAN?
Відповідь
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
Картка 446
Питання
What password-management behavior should awareness training reinforce?
Відповідь
Use unique long passwords through an approved manager and report suspected compromise promptly.
Картка 447
Питання
What security value does fencing provide?
Відповідь
It defines and delays entry across a physical perimeter.
Картка 448
Питання
What is a wildcard certificate?
Відповідь
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
Картка 449
Питання
How does misinformation differ from disinformation?
Відповідь
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
Картка 450
Питання
What is a risk threshold?
Відповідь
A defined level that triggers escalation, treatment, or another required response.
Картка 451
Питання
What does a vendor penetration test contribute to assessment?
Відповідь
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
Картка 452
Питання
What is the objective of a service-disruption attack?
Відповідь
Make a system or business function unavailable or unreliable.
Картка 453
Питання
What is directory traversal?
Відповідь
Manipulating a file path to reach files outside the directory the application intended to expose.
Картка 454
Питання
Why decommission an unsupported system?
Відповідь
Removing it eliminates an exposure that can no longer be patched or securely maintained.
Картка 455
Питання
Why archive security-monitoring data?
Відповідь
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
Картка 456
Питання
What role does RADIUS commonly play in enterprise Wi-Fi?
Відповідь
It centralizes authentication, authorization information, and accounting for network access.
Картка 457
Питання
Why separate the requester and approver of a high-risk change?
Відповідь
To reduce error, fraud, and unilateral unauthorized modification.
Картка 458
Питання
Why can a jailbroken device violate a security baseline?
Відповідь
It weakens platform isolation and allows unapproved privileged changes.
Картка 459
Питання
When is tokenization especially useful?
Відповідь
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
Картка 460
Питання
Why can dark-web intelligence affect vulnerability priority?
Відповідь
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
Картка 461
Питання
What firewall policy should govern traffic from a screened subnet to internal systems?
Відповідь
Deny it by default and allow only explicitly required flows.
Картка 462
Питання
What does SAML commonly carry?
Відповідь
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
Картка 463
Питання
What does a security governance committee do?
Відповідь
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
Картка 464
Питання
How can global privacy requirements affect one data process?
Відповідь
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
Картка 465
Питання
What characterizes an IoT device?
Відповідь
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
Картка 466
Питання
What is a unified threat management appliance?
Відповідь
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
Картка 467
Питання
What does a hardware security module provide?
Відповідь
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
Картка 468
Питання
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Відповідь
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
Картка 469
Питання
What is a tabletop exercise?
Відповідь
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
Картка 470
Питання
What does a risk exemption authorize?
Відповідь
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
Картка 471
Питання
What is a regulatory examination?
Відповідь
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
Картка 472
Питання
What does physical video surveillance primarily provide?
Відповідь
Detection and evidence of activity in monitored areas.
Картка 473
Питання
What is a birthday attack against a hash?
Відповідь
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
Картка 474
Питання
Why keep backups both onsite and offsite?
Відповідь
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
Картка 475
Питання
How does technical debt affect security automation?
Відповідь
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
Картка 476
Питання
What should switch hardening restrict first?
Відповідь
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
Картка 477
Питання
What should happen when an asset changes owners?
Відповідь
Inventory, access, support responsibility, and data handling should be updated.
Картка 478
Питання
What does evidence of a vendor's internal audits contribute?
Відповідь
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
Картка 479
Питання
What is identity attestation?
Відповідь
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
Картка 480
Питання
Why can standard enterprise patching be unsafe for an RTOS device?
Відповідь
A change can disrupt timing guarantees or certified operational behavior.
Картка 481
Питання
What is secure access service edge?
Відповідь
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
Картка 482
Питання
What social-engineering habit should awareness training reinforce?
Відповідь
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
Картка 483
Питання
How can a software provider introduce a supply-chain vulnerability?
Відповідь
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
Картка 484
Питання
Why include internet exposure in remediation priority?
Відповідь
A reachable vulnerable service usually has more attack opportunity than an isolated one.
Картка 485
Питання
What does a mail gateway inspect?
Відповідь
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
Картка 486
Питання
What is a data controller?
Відповідь
The entity that determines why and how personal data is processed.
Картка 487
Питання
How does blackmail motivate a cyberattack?
Відповідь
The attacker threatens disclosure or harm unless the victim complies.
Картка 488
Питання
What is a downgrade attack?
Відповідь
Forcing parties to use an older or weaker protocol or security mode.
Картка 489
Питання
How does encryption mitigate data exposure?
Відповідь
It makes captured data unreadable without the required key.
Картка 490
Питання
How do network and web vulnerability scanners differ?
Відповідь
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
Картка 491
Питання
How can vulnerability-scan data support an investigation?
Відповідь
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
Картка 492
Питання
What is key escrow?
Відповідь
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
Картка 493
Питання
Which human vector commonly uses a fake sign-in page to harvest credentials?
Відповідь
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
Картка 494
Питання
What is risk avoidance?
Відповідь
Stopping or not starting the activity that creates the risk.
Картка 495
Питання
What is data obfuscation?
Відповідь
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
Картка 496
Питання
What is a directive control?
Відповідь
A safeguard that tells people what behavior or action is required.
Картка 497
Питання
What does a security guard add that a camera cannot?
Відповідь
Human judgment and an immediate physical response.
Картка 498
Питання
Why define restricted activities in change management?
Відповідь
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
Картка 499
Питання
What contractual impact can noncompliance create?
Відповідь
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
Картка 500
Питання
What should determine backup frequency?
Відповідь
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
Картка 501
Питання
What should router hardening protect?
Відповідь
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
Картка 502
Питання
What problem does OAuth 2.0 address?
Відповідь
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
Картка 503
Питання
What does SCADA do?
Відповідь
It provides supervisory monitoring and control across distributed industrial equipment.
Картка 504
Питання
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Відповідь
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
Картка 505
Питання
What distinguishes a computer virus?
Відповідь
It attaches to a host file or program and spreads when that infected host executes or is shared.
Картка 506
Питання
What does a key management system coordinate?
Відповідь
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
Картка 507
Питання
How can an unsecure wired network expose traffic?
Відповідь
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
Картка 508
Питання
Why is vulnerable device firmware hard to remediate?
Відповідь
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
Картка 509
Питання
What does patching change in vulnerability remediation?
Відповідь
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
Картка 510
Питання
What does DMARC add to SPF and DKIM?
Відповідь
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
Картка 511
Питання
How does automation improve security efficiency?
Відповідь
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
Картка 512
Питання
What is a simulation exercise?
Відповідь
A more realistic practice in which participants respond to injected events using operational processes.
Картка 513
Питання
What is a data processor?
Відповідь
An entity that processes personal data on behalf of a controller.
Картка 514
Питання
What is risk mitigation?
Відповідь
Reducing likelihood, impact, or both through controls or process changes.
Картка 515
Питання
Why monitor a vendor after onboarding?
Відповідь
Security posture, ownership, services, incidents, and dependencies can change.
Картка 516
Питання
What does a physical penetration test assess?
Відповідь
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
Картка 517
Питання
Why use access badges at a facility?
Відповідь
To associate entry attempts with authorized identities and enforce access rules.
Картка 518
Питання
How does permission restriction protect data?
Відповідь
Only authorized identities receive the actions and scope their roles require.
Картка 519
Питання
What is the usual objective of ransomware extortion?
Відповідь
Force payment by denying access, threatening disclosure, or both.
Картка 520
Питання
What does impossible travel indicate?
Відповідь
One identity appears to authenticate from distant locations too quickly for legitimate travel.
Картка 521
Питання
What is configuration enforcement?
Відповідь
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
Картка 522
Питання
What does a web vulnerability scanner inspect?
Відповідь
Running web behavior for issues such as unsafe input handling and insecure configuration.
Картка 523
Питання
How does cost affect an architecture choice?
Відповідь
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
Картка 524
Питання
What does EAP provide with 802.1X?
Відповідь
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
Картка 525
Питання
What should operational-security training help users protect?
Відповідь
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
Картка 526
Питання
What does a time-of-day access rule do?
Відповідь
Allows or denies a requested action according to an approved schedule.
Картка 527
Питання
What should cloud infrastructure hardening establish?
Відповідь
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
Картка 528
Питання
What should an asset owner ensure during offboarding?
Відповідь
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
Картка 529
Питання
Why encrypt backups?
Відповідь
Backup media and transfers can expose the same sensitive data as production systems.
Картка 530
Питання
What is steganography?
Відповідь
Hiding the existence of data inside another medium rather than merely encrypting its contents.
Картка 531
Питання
Which human vector uses a fabricated authority role to justify a sensitive request?
Відповідь
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
Картка 532
Питання
Why does risk transfer not remove accountability?
Відповідь
The organization can retain legal, reputational, operational, and oversight consequences.
Картка 533
Питання
Why validate a change after deployment?
Відповідь
To confirm the intended result occurred without introducing unacceptable side effects.
Картка 534
Питання
What makes end-of-life hardware a security vulnerability?
Відповідь
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
Картка 535
Питання
What does an audit add to remediation validation?
Відповідь
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
Картка 536
Питання
Why can SPF pass while a message still impersonates a brand?
Відповідь
SPF checks the envelope domain, which may differ from the visible From domain.
Картка 537
Питання
What role can a government entity have in security governance?
Відповідь
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
Картка 538
Питання
How do data inventory and retention support privacy governance?
Відповідь
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
Картка 539
Питання
What can concurrent sessions from distant regions indicate?
Відповідь
A stolen account or shared credential, subject to VPN and proxy context.
Картка 540
Питання
What does supply-chain analysis examine?
Відповідь
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
Картка 541
Питання
What is the purpose of facility lighting as a control?
Відповідь
Deter covert activity and improve observation of people and areas.
Картка 542
Питання
What architecture quality keeps a service usable during component failure?
Відповідь
Availability.
Картка 543
Питання
When is fail-open behavior preferable to fail-closed behavior?
Відповідь
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
Картка 544
Питання
Which control function does a login-failure alert provide?
Відповідь
Detection; it reveals suspicious authentication activity.
Картка 545
Питання
What does a biometric MFA implementation verify?
Відповідь
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
Картка 546
Питання
How can automation enforce a security baseline?
Відповідь
It compares realized settings with the approved state and reports or corrects unauthorized drift.
Картка 547
Питання
How do wireless cryptographic protocols protect network traffic?
Відповідь
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
Картка 548
Питання
Why segment sensitive data stores?
Відповідь
It limits reachable paths and separates them from lower-trust workloads.
Картка 549
Питання
What must remain secret in an asymmetric key pair?
Відповідь
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
Картка 550
Питання
How can a supplier become a supply-chain attack vector?
Відповідь
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
Картка 551
Питання
What is e-discovery?
Відповідь
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
Картка 552
Питання
What characterizes a neutral risk appetite?
Відповідь
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
Картка 553
Питання
What is passive reconnaissance?
Відповідь
Gathering information without directly interacting with the target's systems.
Картка 554
Питання
What does a philosophical motive mean for a threat actor?
Відповідь
The actor acts to advance a belief or moral position rather than primarily for money.
Картка 555
Питання
What does unexpected resource consumption indicate?
Відповідь
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
Картка 556
Питання
What does a host-based intrusion prevention system do?
Відповідь
It monitors activity on one host and can block behavior that matches exploit or attack rules.
Картка 557
Питання
How does agent-based monitoring differ from agentless monitoring?
Відповідь
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
Картка 558
Питання
What can network logs contribute to an investigation?
Відповідь
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
Картка 559
Питання
What is the purpose of a backup restore test?
Відповідь
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
Картка 560
Питання
Why can obsolete hardware become a security risk?
Відповідь
It may lack supported firmware, modern protections, or replacement parts.
Картка 561
Питання
What does rescanning confirm after remediation?
Відповідь
Whether the scanner can still detect the original finding on the affected asset.
Картка 562
Питання
What should a secure transport method provide?
Відповідь
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
Картка 563
Питання
How can law affect security governance?
Відповідь
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
Картка 564
Питання
What does resilience mean for a security architecture?
Відповідь
The ability to withstand disruption, adapt, and recover while preserving essential functions.
Картка 565
Питання
Why minimize an infrastructure's attack surface?
Відповідь
Fewer exposed services and paths leave fewer opportunities for exploitation.
Картка 566
Питання
What does executing a security-awareness program require?
Відповідь
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
Картка 567
Питання
What does an infrared security sensor detect?
Відповідь
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
Картка 568
Питання
What is a knowledge factor?
Відповідь
Something the claimant knows, such as a password.
Картка 569
Питання
Why review allow-list and deny-list impact before a change?
Відповідь
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
Картка 570
Питання
What does partition-level encryption protect?
Відповідь
One selected disk partition, leaving other partitions outside that encryption boundary.
Картка 571
Питання
How can instant messaging deliver a security attack?
Відповідь
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
Картка 572
Питання
What can repeated blocked-content events indicate?
Відповідь
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
Картка 573
Питання
What should a server-hardening baseline reduce?
Відповідь
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
Картка 574
Питання
When is physical media destruction appropriate?
Відповідь
When reuse is unnecessary or sanitization cannot provide adequate assurance.
Картка 575
Питання
What is mean time to repair?
Відповідь
The average time required to restore a failed component or service.
Картка 576
Питання
Why disclose conflicts of interest during vendor selection?
Відповідь
A personal or financial relationship can bias evaluation away from the organization's requirements.
Картка 577
Питання
What is a fine for noncompliance?
Відповідь
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
Картка 578
Питання
What does a public data classification authorize?
Відповідь
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
Картка 579
Питання
What security benefit comes from standard infrastructure configurations?
Відповідь
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
Картка 580
Питання
How does horizontal scaling increase capacity?
Відповідь
It adds more service instances and distributes work among them.
Картка 581
Питання
Why can added connectivity weaken segmentation?
Відповідь
Each allowed path can become a route for lateral movement or data escape.
Картка 582
Питання
What coding practice is central to preventing SQL injection?
Відповідь
Use parameterized queries so untrusted values remain data rather than executable query syntax.
Картка 583
Питання
When is a compensating control appropriate for a vulnerability?
Відповідь
When timely removal or patching is infeasible and another control can reduce the risk.
Картка 584
Питання
How does agent-based web filtering enforce policy?
Відповідь
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
Картка 585
Питання
How can regulation differ from an internal policy?
Відповідь
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
Картка 586
Питання
What is a storage snapshot?
Відповідь
A point-in-time representation of data or system state, whose independence depends on how it is stored.
Картка 587
Питання
What does password age measure?
Відповідь
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
Картка 588
Питання
What does an ethical motive mean in vulnerability research?
Відповідь
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
Картка 589
Питання
What can missing security logs indicate?
Відповідь
Logging failure, tampering, retention misconfiguration, or an inactive source.
Картка 590
Питання
Why disable unused ports and protocols?
Відповідь
They expose unnecessary communication paths and code that attackers can reach.
Картка 591
Питання
What does antivirus contribute to monitoring?
Відповідь
It scans files, memory, or behavior and reports suspected malicious code.
Картка 592
Питання
What is a honeypot?
Відповідь
A decoy system or service designed to attract and observe malicious activity.
Картка 593
Питання
What does file-level encryption protect?
Відповідь
Selected files independently of whether the rest of the disk or volume is encrypted.
Картка 594
Питання
How can SMS deliver a security attack?
Відповідь
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
Картка 595
Питання
What happens during incident analysis?
Відповідь
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
Картка 596
Питання
What is mean time between failures?
Відповідь
The average operating time between repairable failures.
Картка 597
Питання
What is active reconnaissance?
Відповідь
Probing or interacting with target systems to discover services and behavior.
Картка 598
Питання
What constraint should guide ICS or SCADA hardening?
Відповідь
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
Картка 599
Питання
Which control function does restoring a clean system image provide?
Відповідь
Correction; it returns the system to a known-good state.
Картка 600
Питання
What does responsiveness mean in an architecture decision?
Відповідь
How quickly the system and its operators can adapt to demand, failure, or attack.
Картка 601
Питання
How does out-of-band access strengthen remote administration?
Відповідь
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
Картка 602
Питання
What makes user behavior unexpected?
Відповідь
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
Картка 603
Питання
What is a work order?
Відповідь
A document authorizing a defined unit of work under an existing agreement.
Картка 604
Питання
What can out-of-cycle logging indicate?
Відповідь
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
Картка 605
Питання
Why update a standard operating procedure after a change?
Відповідь
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
Картка 606
Питання
What coding practice limits cross-site scripting?
Відповідь
Context-appropriate output encoding, supported by safe templating and input handling.
Картка 607
Питання
What does a restricted data classification indicate?
Відповідь
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
Картка 608
Питання
How does a bug bounty support responsible disclosure?
Відповідь
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
Картка 609
Питання
What does web-filter content categorization provide?
Відповідь
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
Картка 610
Питання
How do hard and soft authentication tokens differ?
Відповідь
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
Картка 611
Питання
How can industry requirements affect security governance?
Відповідь
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
Картка 612
Питання
How can noncompliance cause loss of a license?
Відповідь
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
Картка 613
Питання
What does volume-level encryption protect?
Відповідь
All data within a selected logical storage volume.
Картка 614
Питання
How can impersonation exploit familiarity?
Відповідь
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
Картка 615
Питання
How does RTO guide recovery design?
Відповідь
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
Картка 616
Питання
What is a honeynet?
Відповідь
A network of decoy systems used to study or divert attackers.
Картка 617
Питання
What does backup replication provide?
Відповідь
Additional synchronized or copied recovery data in another system or location.
Картка 618
Питання
What lets automation scale securely?
Відповідь
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
Картка 619
Питання
Why monitor a hardened computing resource continuously?
Відповідь
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
Картка 620
Питання
Why keep a certificate of destruction?
Відповідь
It documents that a disposal provider handled specified media under the agreed process.
Картка 621
Питання
Why consider patch availability before selecting a platform?
Відповідь
Unsupported or difficult-to-update components accumulate known exposure.
Картка 622
Питання
Why should remote administration use an encrypted, authenticated protocol?
Відповідь
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
Картка 623
Питання
How can revenge motivate an insider incident?
Відповідь
A disgruntled person may damage systems or disclose data to punish the organization.
Картка 624
Питання
What is a published or documented indicator of malicious activity?
Відповідь
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
Картка 625
Питання
Why monitor a system more closely when a mitigation exception is accepted?
Відповідь
Monitoring can reveal exploitation or control failure while the documented exception remains open.
Картка 626
Питання
What is an SNMP trap?
Відповідь
An unsolicited device notification sent to a management system when a configured event occurs.
Картка 627
Питання
How can an automated report support an investigation?
Відповідь
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
Картка 628
Питання
What is a security key?
Відповідь
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
Картка 629
Питання
What does database-level encryption protect?
Відповідь
A database or selected database structures through controls managed at the database layer.
Картка 630
Питання
How does brand impersonation exploit trust?
Відповідь
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
Картка 631
Питання
What browser-side impact can a cross-site scripting vulnerability create?
Відповідь
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
Картка 632
Питання
How can a system or process audit identify vulnerabilities?
Відповідь
It compares evidence with required configuration and procedure to reveal control gaps.
Картка 633
Питання
What security role can Group Policy provide?
Відповідь
Centralized Windows configuration of account, application, audit, and system security settings.
Картка 634
Питання
What should incident-response training prepare people to do?
Відповідь
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
Картка 635
Питання
Why must governance track local or regional requirements?
Відповідь
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
Картка 636
Питання
How can a dependency become a useful key risk indicator?
Відповідь
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
Картка 637
Питання
What is a business partners agreement?
Відповідь
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
Картка 638
Питання
What makes an audit regulatory?
Відповідь
It evaluates compliance with requirements established or enforced by a government or delegated authority.
Картка 639
Питання
What is a honeyfile?
Відповідь
A decoy file whose access can reveal unauthorized activity.
Картка 640
Питання
Why does legal information require explicit protection?
Відповідь
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
Картка 641
Питання
Which indicator can mass file renaming and encryption produce?
Відповідь
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
Картка 642
Питання
What remains with an organization after transferring architecture risk?
Відповідь
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
Картка 643
Питання
When does local console placement provide useful administrative access?
Відповідь
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
Картка 644
Питання
What makes a harmful user action unintentional?
Відповідь
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
Картка 645
Питання
How should an organization harden workstations?
Відповідь
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
Картка 646
Питання
What is journaling in recovery?
Відповідь
Recording ordered changes so data can be replayed or restored to a consistent point.
Картка 647
Питання
What downtime must a change plan account for?
Відповідь
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
Картка 648
Питання
Why must a privacy program map local or regional law to data flows?
Відповідь
The applicable duties can change with the location of the person, organization, processing, or stored data.
Картка 649
Питання
Why combine independent preventive controls at different layers?
Відповідь
A failure at one layer does not automatically let the same attack succeed at the next layer.
Картка 650
Питання
What is passwordless authentication?
Відповідь
A flow that does not require the user to enter a memorized password, often using public-key credentials.
Картка 651
Питання
How can automation improve security reaction time?
Відповідь
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
Картка 652
Питання
What does record-level encryption protect?
Відповідь
Individual records or fields, allowing finer protection than encrypting the entire database.
Картка 653
Питання
How can business email compromise misuse urgency?
Відповідь
It pressures an employee to bypass normal verification for a payment, credential, or data request.
Картка 654
Питання
What does impact measure in risk analysis?
Відповідь
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
Картка 655
Питання
What makes cyber activity part of warfare?
Відповідь
It supports military or state conflict objectives such as disruption, intelligence, or influence.
Картка 656
Питання
Which indicator can a newly created privileged account produce outside the normal change window?
Відповідь
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
Картка 657
Питання
How can configuration enforcement validate a deployed mitigation?
Відповідь
It compares the realized settings with the approved state and corrects or reports drift.
Картка 658
Питання
How does validating an alert improve alert tuning?
Відповідь
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
Картка 659
Питання
What data-layer impact can a SQL injection vulnerability create?
Відповідь
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
Картка 660
Питання
What environmental variables can change vulnerability priority?
Відповідь
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
Картка 661
Питання
What security role does SELinux provide?
Відповідь
Mandatory access controls that confine processes according to centrally defined policy.
Картка 662
Питання
Why review governance documents periodically?
Відповідь
Business, technology, threats, and external obligations change.
Картка 663
Питання
Why evaluate power requirements for a system design?
Відповідь
Power capacity and redundancy constrain availability and recovery.
Картка 664
Питання
When is IPsec a better tunnel choice than TLS?
Відповідь
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
Картка 665
Питання
What is a honeytoken?
Відповідь
A fake credential or data element that generates a high-confidence alert when used.
Картка 666
Питання
What should embedded-system hardening prioritize?
Відповідь
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
Картка 667
Питання
Why must sanitization address data remanence?
Відповідь
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
Картка 668
Питання
Why require rules of engagement for vendor testing?
Відповідь
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
Картка 669
Питання
What does a private data classification indicate?
Відповідь
The information concerns an individual or limited internal audience and should not be exposed publicly.
Картка 670
Питання
What does a tabletop recovery exercise test?
Відповідь
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
Картка 671
Питання
Why prevent password reuse?
Відповідь
One compromised password should not unlock other accounts or services.
Картка 672
Питання
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Відповідь
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
Картка 673
Питання
What does transport encryption protect?
Відповідь
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
Картка 674
Питання
How can a voice call become an attack vector?
Відповідь
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
Картка 675
Питання
What should a digital-forensics report document?
Відповідь
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
Картка 676
Питання
What tradeoff comes with an expansionary risk appetite?
Відповідь
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
Картка 677
Питання
What does a known penetration-test environment provide?
Відповідь
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
Картка 678
Питання
Why evaluate compute requirements before deployment?
Відповідь
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
Картка 679
Питання
Why place sensors at network choke points?
Відповідь
They can observe traffic crossing important trust boundaries.
Картка 680
Питання
What should hybrid or remote-work security training emphasize?
Відповідь
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
Картка 681
Питання
Why plan an application restart separately from a service restart?
Відповідь
The application may need its own state handling, user coordination, health checks, and rollback point.
Картка 682
Питання
What is a cryptographic vulnerability?
Відповідь
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
Картка 683
Питання
Why report findings by asset owner?
Відповідь
Owners need clear accountability and a prioritized remediation queue.
Картка 684
Питання
What should guide selection of a secure protocol?
Відповідь
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
Картка 685
Питання
How do centralized and decentralized governance structures differ?
Відповідь
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
Картка 686
Питання
How does privacy-aware design limit data retention?
Відповідь
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
Картка 687
Питання
What does a pressure security sensor detect?
Відповідь
Force or weight applied to a protected surface, such as a floor mat or fence line.
Картка 688
Питання
What automation costs should a security team plan for?
Відповідь
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
Картка 689
Питання
What should RTOS hardening preserve while reducing attack surface?
Відповідь
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
Картка 690
Питання
What is the goal of disruption-for-chaos activity?
Відповідь
Create instability or damage itself rather than pursue a clear financial or intelligence return.
Картка 691
Питання
Which indicator can repeated password guessing produce?
Відповідь
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
Картка 692
Питання
How does removing unnecessary software harden a system?
Відповідь
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
Картка 693
Питання
What does NetFlow provide?
Відповідь
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
Картка 694
Питання
How can a dashboard support an investigation?
Відповідь
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
Картка 695
Питання
When should a password be expired?
Відповідь
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
Картка 696
Питання
Why does cryptographic key length matter?
Відповідь
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
Картка 697
Питання
How can an unsecure Bluetooth connection become an attack vector?
Відповідь
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
Картка 698
Питання
What is a key risk indicator?
Відповідь
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
Картка 699
Питання
What should vendor monitoring verify when a contract ends?
Відповідь
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
Картка 700
Питання
What does a sensitive data classification indicate?
Відповідь
The information needs safeguards because unauthorized access, change, or loss could cause harm.
Картка 701
Питання
What does software-defined networking separate?
Відповідь
The control plane that decides traffic behavior from the data plane that forwards traffic.
Картка 702
Питання
Where should a web application firewall be placed?
Відповідь
In the path of web requests before they reach the protected application.
Картка 703
Питання
What does a simulated recovery exercise test?
Відповідь
Participants perform realistic response actions in a controlled environment without disrupting production.
Картка 704
Питання
How can a team verify that a detective control is effective?
Відповідь
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
Картка 705
Питання
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Відповідь
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
Картка 706
Питання
What makes a vulnerability cloud-specific?
Відповідь
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
Картка 707
Питання
How can insurance respond to vulnerability risk?
Відповідь
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
Картка 708
Питання
How does reputation improve web filtering?
Відповідь
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
Картка 709
Питання
What does an encryption policy establish?
Відповідь
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
Картка 710
Питання
How does a microwave security sensor detect movement?
Відповідь
It emits microwave energy and detects changes in the reflected signal caused by motion.
Картка 711
Питання
What should IoT-device hardening change before deployment?
Відповідь
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
Картка 712
Питання
Why track software licenses as assets?
Відповідь
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
Картка 713
Питання
What does a password manager improve?
Відповідь
It can generate and store unique long passwords so users do not memorize or reuse them.
Картка 714
Питання
What makes a ledger open and public?
Відповідь
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
Картка 715
Питання
What should a payment-change request trigger?
Відповідь
Independent verification through a known channel before any account or payment detail is changed.
Картка 716
Питання
What does preserving digital evidence require?
Відповідь
Protecting its integrity, context, access history, and availability from collection through final disposition.
Картка 717
Питання
What should a risk report tell decision-makers?
Відповідь
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
Картка 718
Питання
What should an external assessment report provide?
Відповідь
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
Картка 719
Питання
What is a centralized design's main resilience risk?
Відповідь
A central dependency can become a bottleneck or single point of failure.
Картка 720
Питання
What does mutual TLS add to a TLS-protected service connection?
Відповідь
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
Картка 721
Питання
What should recurring security-awareness reporting show?
Відповідь
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
Картка 722
Питання
Why do legacy applications require extra change planning?
Відповідь
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
Картка 723
Питання
How do a data controller and a data processor differ?
Відповідь
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
Картка 724
Питання
How can orchestration become a single point of failure?
Відповідь
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
Картка 725
Питання
Why should defenses account for a threat actor's sophistication and capability?
Відповідь
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
Картка 726
Питання
How does an injection attack make an application execute unintended instructions?
Відповідь
It sends crafted input that an interpreter treats as code or commands instead of data.
Картка 727
Питання
What does a host-based firewall control?
Відповідь
Inbound and outbound network traffic for one endpoint according to local rules.
Картка 728
Питання
Why revise alerting after an incident?
Відповідь
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
Картка 729
Питання
Why include security duties in procurement criteria?
Відповідь
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
Картка 730
Питання
What does a critical data classification indicate?
Відповідь
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
Картка 731
Питання
What infrastructure capacity must support failover?
Відповідь
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
Картка 732
Питання
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Відповідь
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
Картка 733
Питання
How does a remediation exemption differ from an exception?
Відповідь
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
Картка 734
Питання
Why should automated EDR or XDR blocking have an exception and rollback path?
Відповідь
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
Картка 735
Питання
What does a security playbook provide?
Відповідь
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
Картка 736
Питання
How does an ultrasonic security sensor detect movement?
Відповідь
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
Картка 737
Питання
What should a managed mobile device require for Bluetooth connections?
Відповідь
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
Картка 738
Питання
How do password complexity rules differ from password length?
Відповідь
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
Картка 739
Питання
What makes a certificate third-party trusted?
Відповідь
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
Картка 740
Питання
Why is an out-of-band check effective against impersonation?
Відповідь
It verifies the request through a separate, previously trusted communication path.
Картка 741
Питання
What does a risk exception authorize?
Відповідь
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
Картка 742
Питання
What security challenge grows in a decentralized design?
Відповідь
Consistent policy, inventory, monitoring, and patching become harder.
Картка 743
Питання
How should controls be selected for an unused network path?
Відповідь
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
Картка 744
Питання
How can a buffer-overflow attack affect an application?
Відповідь
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 картки
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Відкриється Nibomo, і ви зможете почати навчання.