CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
اس ڈیک کے بارے میں
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
اس ڈیک کے کارڈز
کارڈ 1
سوال
What does an information security policy establish?
جواب
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
کارڈ 2
سوال
What is phishing?
جواب
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
کارڈ 3
سوال
What does a public-key certificate bind to an identity?
جواب
A public key, together with identifying information and the issuer's signature.
کارڈ 4
سوال
What is data at rest?
جواب
Data stored on media such as disks, databases, backups, or mobile devices.
کارڈ 5
سوال
How does policy-driven access control decide a zero-trust access request?
جواب
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
کارڈ 6
سوال
What does establishing a secure baseline produce?
جواب
An approved, documented configuration that defines the required secure state for a class of computing resource.
کارڈ 7
سوال
What is hashing used to verify?
جواب
Whether data has changed by comparing fixed-length digest values.
کارڈ 8
سوال
What is impersonation in social engineering?
جواب
Pretending to be a trusted person or organization to obtain access, data, or action.
کارڈ 9
سوال
What is virtualization?
جواب
Abstracting physical compute so multiple isolated guest systems can share a host.
کارڈ 10
سوال
What is chain of custody?
جواب
A documented history of who collected, handled, transferred, stored, and examined evidence.
کارڈ 11
سوال
What is quantitative risk analysis?
جواب
Estimating risk with numerical values such as money, frequency, or probability.
کارڈ 12
سوال
What is a phishing awareness campaign?
جواب
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
کارڈ 13
سوال
What is high availability?
جواب
Designing a service to remain accessible despite expected component failures.
کارڈ 14
سوال
What is a network security zone?
جواب
A group of systems with similar trust, function, or control requirements.
کارڈ 15
سوال
What is risk transfer?
جواب
Shifting some financial or operational consequence to another party, such as through insurance or contract.
کارڈ 16
سوال
What is media sanitization?
جواب
Making stored data infeasible to recover for the intended level of protection.
کارڈ 17
سوال
What does CVSS provide?
جواب
A standardized way to describe a vulnerability's technical severity characteristics.
کارڈ 18
سوال
What does security alerting do?
جواب
It turns matched events or behavior into a notification that the right responder can review.
کارڈ 19
سوال
What does a firewall rule enforce?
جواب
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
کارڈ 20
سوال
What is deprovisioning?
جواب
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
کارڈ 21
سوال
How does inline placement differ from a tap or monitor port?
جواب
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
کارڈ 22
سوال
What is asymmetric encryption?
جواب
Encryption that uses a mathematically related public and private key pair.
کارڈ 23
سوال
What does SPF authorize?
جواب
Which mail servers may send mail for a domain in the SMTP envelope.
کارڈ 24
سوال
What is a possession factor?
جواب
Something the claimant has, such as a cryptographic authenticator.
کارڈ 25
سوال
What does ordinary TLS usually protect and authenticate?
جواب
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
کارڈ 26
سوال
What is single loss expectancy?
جواب
The estimated loss from one occurrence of a risk event.
کارڈ 27
سوال
What does a certificate authority do?
جواب
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
کارڈ 28
سوال
What is a detective control meant to do?
جواب
Identify that an unwanted event has happened or is happening.
کارڈ 29
سوال
What is the security purpose of change-control approval?
جواب
Ensure authorized reviewers assess risk before the production change occurs.
کارڈ 30
سوال
What is shadow IT?
جواب
Technology used for organizational work without required approval or oversight.
کارڈ 31
سوال
What is a buffer overflow vulnerability?
جواب
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
کارڈ 32
سوال
What is ransomware?
جواب
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
کارڈ 33
سوال
How does network segmentation limit an incident?
جواب
It restricts communication paths and reduces lateral movement between zones.
کارڈ 34
سوال
How do load balancing and clustering support availability differently?
جواب
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
کارڈ 35
سوال
What is vendor due diligence?
جواب
Evaluating a provider's security, capability, stability, and fit before commitment.
کارڈ 36
سوال
Who is a data subject?
جواب
The person whose personal data is collected or processed.
کارڈ 37
سوال
What is attestation?
جواب
A formal assertion or report about a subject matter, often supported by an independent examination.
کارڈ 38
سوال
What is a replay attack?
جواب
Valid captured data is retransmitted to repeat an authenticated or authorized action.
کارڈ 39
سوال
What does a wireless site survey establish?
جواب
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
کارڈ 40
سوال
What is the time-of-check stage of a race-condition vulnerability?
جواب
The application verifies a condition or resource state before acting on it.
کارڈ 41
سوال
What is a penetration test?
جواب
An authorized attempt to exploit weaknesses and demonstrate practical impact.
کارڈ 42
سوال
What is a cold recovery site?
جواب
A facility with basic space and utilities but little preinstalled technology or current data.
کارڈ 43
سوال
What is data in transit?
جواب
Data moving between systems or across a network.
کارڈ 44
سوال
What is a vendor security questionnaire?
جواب
A structured request for information about a provider's controls and practices.
کارڈ 45
سوال
How does an internal actor's starting position differ from an external actor's?
جواب
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
کارڈ 46
سوال
What can unexpected account lockouts indicate?
جواب
Password guessing, credential stuffing, user error, or a broken client.
کارڈ 47
سوال
How do permissions enforce access control?
جواب
They specify which actions a subject may perform on a particular resource.
کارڈ 48
سوال
What is log aggregation?
جواب
Central collection of logs from multiple sources for search, correlation, and retention.
کارڈ 49
سوال
Why plan a service restart as part of a change?
جواب
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
کارڈ 50
سوال
What is infrastructure as code?
جواب
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
کارڈ 51
سوال
What should security-awareness program development start with?
جواب
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
کارڈ 52
سوال
What is a voice-based social-engineering attack called?
جواب
Vishing.
کارڈ 53
سوال
What happens during incident-response preparation?
جواب
Teams establish people, tools, access, communications, training, and procedures before an incident.
کارڈ 54
سوال
What does an offensive penetration-testing team do?
جواب
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
کارڈ 55
سوال
What is federation?
جواب
One security domain relies on identity assertions from another trusted domain.
کارڈ 56
سوال
What is asset classification?
جواب
Grouping an asset by sensitivity, criticality, or required handling.
کارڈ 57
سوال
What is cross-site scripting?
جواب
Injection of script-capable content that a browser executes in another site's security context.
کارڈ 58
سوال
What can IDS or IPS trends reveal?
جواب
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
کارڈ 59
سوال
What can unexpected resource inaccessibility indicate?
جواب
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
کارڈ 60
سوال
What is a corrective control meant to do?
جواب
Limit damage and restore a secure state after an event.
کارڈ 61
سوال
How do containers differ from virtual machines?
جواب
Containers share the host kernel; virtual machines normally run separate guest operating systems.
کارڈ 62
سوال
How does an active security device differ from a passive one?
جواب
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
کارڈ 63
سوال
Why is unsupported software a persistent attack surface?
جواب
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
کارڈ 64
سوال
What is annualized rate of occurrence?
جواب
The estimated number of times a risk event occurs per year.
کارڈ 65
سوال
What is an inherence factor?
جواب
A biometric characteristic of the claimant.
کارڈ 66
سوال
What do a threat actor's sophistication and capability describe?
جواب
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
کارڈ 67
سوال
What is a SIEM?
جواب
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
کارڈ 68
سوال
What is sideloading?
جواب
Installing software from outside the platform's approved distribution path.
کارڈ 69
سوال
What does an IDS or IPS signature match?
جواب
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
کارڈ 70
سوال
Why are embedded systems often difficult to patch?
جواب
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
کارڈ 71
سوال
What is a virtual private network?
جواب
An encrypted logical connection that carries private traffic across an untrusted or shared network.
کارڈ 72
سوال
What should an initial security-awareness report establish?
جواب
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
کارڈ 73
سوال
What is symmetric encryption?
جواب
Encryption that uses the same secret key to encrypt and decrypt data.
کارڈ 74
سوال
What happens during incident detection?
جواب
Monitoring or a report identifies activity that may meet the organization's incident criteria.
کارڈ 75
سوال
What is recovery time objective?
جواب
The target maximum time to restore a function after disruption.
کارڈ 76
سوال
Why prioritize password length?
جواب
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
کارڈ 77
سوال
What must sanitization accomplish before an asset leaves organizational control?
جواب
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
کارڈ 78
سوال
What is a real-time operating system designed to provide?
جواب
Predictable response timing for tasks with strict deadlines.
کارڈ 79
سوال
What does fail-open behavior do when a control fails?
جواب
It permits traffic or access to preserve availability.
کارڈ 80
سوال
What is jailbreaking or rooting a mobile device?
جواب
Removing platform restrictions to gain privileged control over the operating system.
کارڈ 81
سوال
What does network access control enforce?
جواب
Identity, device posture, and access policy at network connection time and during a session.
کارڈ 82
سوال
What does data loss prevention do?
جواب
Detects and may block sensitive data use or transfer that violates policy.
کارڈ 83
سوال
What security property does a blockchain provide?
جواب
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
کارڈ 84
سوال
What is recovery point objective?
جواب
The target maximum acceptable data loss measured backward in time.
کارڈ 85
سوال
How do ICS and SCADA relate?
جواب
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
کارڈ 86
سوال
What does fail-closed behavior do when a control fails?
جواب
It denies traffic or access to preserve security.
کارڈ 87
سوال
Which keys create and verify a typical digital signature?
جواب
The signer creates it with a private key, and others verify it with the corresponding public key.
کارڈ 88
سوال
What is SQL injection?
جواب
Input that alters the structure or meaning of a database query because code and data were not safely separated.
کارڈ 89
سوال
What does DKIM verify?
جواب
That selected message content was signed by a domain and was not altered after signing.
کارڈ 90
سوال
What is post-incident activity?
جواب
Learning from the event and improving controls, plans, and recovery based on evidence.
کارڈ 91
سوال
What characterizes an expansionary risk appetite?
جواب
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
کارڈ 92
سوال
How do centralized and decentralized architectures differ?
جواب
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
کارڈ 93
سوال
What does a certificate revocation list publish?
جواب
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
کارڈ 94
سوال
What is a legal hold?
جواب
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
کارڈ 95
سوال
What is exposure factor in quantitative risk analysis?
جواب
The estimated percentage of an asset's value lost in one event.
کارڈ 96
سوال
What is decentralized architecture?
جواب
Control or service responsibility is distributed across multiple independent components or locations.
کارڈ 97
سوال
What is tokenization?
جواب
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
کارڈ 98
سوال
How can automation act as a workforce multiplier?
جواب
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
کارڈ 99
سوال
What can endpoint process logs reveal?
جواب
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
کارڈ 100
سوال
What does the CIA triad protect?
جواب
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
کارڈ 101
سوال
How does data masking protect information?
جواب
It hides selected values or characters while preserving a usable representation.
کارڈ 102
سوال
How can a national requirement affect security governance?
جواب
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
کارڈ 103
سوال
What do integrations and APIs provide to security orchestration?
جواب
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
کارڈ 104
سوال
What makes a compliance report external?
جواب
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
کارڈ 105
سوال
What does a cryptographic algorithm define?
جواب
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
کارڈ 106
سوال
Why compare systems with a secure baseline regularly?
جواب
To detect drift, unauthorized changes, and missing hardening.
کارڈ 107
سوال
What does integrity protect?
جواب
The accuracy and completeness of data and systems against unauthorized change.
کارڈ 108
سوال
What does vulnerability classification organize?
جواب
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
کارڈ 109
سوال
What does a password standard define?
جواب
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
کارڈ 110
سوال
What technology capacity must a recovery design plan for?
جواب
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
کارڈ 111
سوال
What does a confidential data classification indicate?
جواب
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
کارڈ 112
سوال
What makes a vendor assessment independent?
جواب
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
کارڈ 113
سوال
What lets a worm spread without attaching itself to another file?
جواب
It is a standalone program that replicates across reachable systems or services.
کارڈ 114
سوال
What is microsegmentation?
جواب
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
کارڈ 115
سوال
What can application logs reveal?
جواب
Transactions, errors, user actions, and application-specific security events.
کارڈ 116
سوال
What does deploying a secure baseline require?
جواب
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
کارڈ 117
سوال
How can resource-provisioning automation improve security?
جواب
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
کارڈ 118
سوال
What does availability protect?
جواب
Reliable, timely access to systems and data when authorized users need them.
کارڈ 119
سوال
Why must a change request describe business impact?
جواب
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
کارڈ 120
سوال
What does an authenticated vulnerability scan add?
جواب
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
کارڈ 121
سوال
What does a change-management procedure specify?
جواب
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
کارڈ 122
سوال
What is a sanction for noncompliance?
جواب
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
کارڈ 123
سوال
How can email deliver a security attack?
جواب
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
کارڈ 124
سوال
What is an internal compliance audit?
جواب
An organization-led examination of whether selected operations and controls meet defined requirements.
کارڈ 125
سوال
What is a Trojan?
جواب
Malware disguised as legitimate or desirable software.
کارڈ 126
سوال
What is clustering?
جواب
Multiple systems work together to provide a service and tolerate member failure.
کارڈ 127
سوال
What makes data regulated?
جواب
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
کارڈ 128
سوال
What does a wireless heat map show?
جواب
Measured or modeled signal strength and coverage across a physical area.
کارڈ 129
سوال
How should vendor criticality affect due diligence?
جواب
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
کارڈ 130
سوال
How can a digital signature support non-repudiation?
جواب
It provides evidence that the holder of a private key signed specific data.
کارڈ 131
سوال
What should vulnerability prioritization consider beyond severity?
جواب
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
کارڈ 132
سوال
What is a security guideline?
جواب
Recommended practice that allows judgment unless adopted as a requirement.
کارڈ 133
سوال
What usually distinguishes a nation-state threat actor?
جواب
Strategic objectives, substantial resources, patience, and advanced operational capability.
کارڈ 134
سوال
What is spyware?
جواب
Software that secretly collects information about a user or system.
کارڈ 135
سوال
Why maintain an allow list for applications?
جواب
Only explicitly approved software is permitted to execute.
کارڈ 136
سوال
How can an image become an attack vector?
جواب
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
کارڈ 137
سوال
What makes a security control technical?
جواب
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
کارڈ 138
سوال
What is identity proofing?
جواب
Establishing that a person is who they claim to be before issuing an account or credential.
کارڈ 139
سوال
What is an automated security guardrail?
جواب
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
کارڈ 140
سوال
Why assign an owner to a planned change?
جواب
To make one party accountable for coordination, execution, and follow-through.
کارڈ 141
سوال
How can national privacy law affect data handling?
جواب
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
کارڈ 142
سوال
What is continuity of operations?
جواب
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
کارڈ 143
سوال
What security tradeoff comes with BYOD?
جواب
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
کارڈ 144
سوال
How should policies and handbooks support security training?
جواب
They provide accessible, current rules and reporting steps that training can apply to real situations.
کارڈ 145
سوال
What is a keylogger?
جواب
A tool that records keystrokes to capture data such as credentials.
کارڈ 146
سوال
What makes information a trade secret?
جواب
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
کارڈ 147
سوال
What does authentication establish?
جواب
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
کارڈ 148
سوال
What risk comes from an untrusted file attachment?
جواب
Opening or parsing it can execute malicious code or expose data.
کارڈ 149
سوال
How does risk tolerance affect vulnerability remediation?
جواب
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
کارڈ 150
سوال
How can a global requirement affect security governance?
جواب
It can require a common control and oversight approach across multiple countries while local obligations still apply.
کارڈ 151
سوال
Why should questionnaire answers be supported by evidence?
جواب
Self-assertions alone may not prove that controls are designed or operating effectively.
کارڈ 152
سوال
What is an independent third-party audit?
جواب
An external party with suitable independence examines evidence against defined criteria.
کارڈ 153
سوال
What do account provisioning and deprovisioning do?
جواب
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
کارڈ 154
سوال
What is an unskilled attacker commonly called?
جواب
A script kiddie: someone who relies on tools or instructions created by others.
کارڈ 155
سوال
What is a rootkit?
جواب
Software designed to maintain privileged, concealed access by altering or subverting the system.
کارڈ 156
سوال
What does an access control list enforce?
جواب
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
کارڈ 157
سوال
What should system security monitoring observe?
جواب
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
کارڈ 158
سوال
What can operating-system security logs reveal?
جواب
Authentication, privilege use, policy changes, services, and other host security events.
کارڈ 159
سوال
Why isolate operational technology from general business networks?
جواب
To limit attack paths into safety- and availability-critical processes.
کارڈ 160
سوال
What is the COPE mobile deployment model?
جواب
The organization owns the device but permits defined personal use while retaining management control.
کارڈ 161
سوال
What security work belongs in asset acquisition and procurement?
جواب
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
کارڈ 162
سوال
How can user-provisioning automation improve security?
جواب
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
کارڈ 163
سوال
What people capacity must a continuity plan account for?
جواب
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
کارڈ 164
سوال
What do authorization models define?
جواب
How permissions are assigned to authenticated subjects and evaluated for requested actions.
کارڈ 165
سوال
Why are removable devices an attack vector?
جواب
They can introduce malware or remove data while bypassing network controls.
کارڈ 166
سوال
What should predeployment change-test results show?
جواب
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
کارڈ 167
سوال
What is the time-of-use stage of a race-condition vulnerability?
جواب
The application acts on a resource after the check, creating a gap in which another process may change the resource.
کارڈ 168
سوال
What is data in use?
جواب
Data actively processed in memory or by an application.
کارڈ 169
سوال
What does open-source vulnerability intelligence contribute?
جواب
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
کارڈ 170
سوال
What can file-integrity monitoring detect?
جواب
Unexpected changes to protected files, directories, or configuration.
کارڈ 171
سوال
Why should deprovisioning be prompt?
جواب
Former users or roles should not retain usable access.
کارڈ 172
سوال
What is an acceptable use policy?
جواب
Rules for permitted and prohibited use of organizational systems, accounts, and data.
کارڈ 173
سوال
What makes a compliance report internal?
جواب
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
کارڈ 174
سوال
What is a logic bomb?
جواب
Malicious code that activates when a specified condition or time is reached.
کارڈ 175
سوال
What does a right-to-audit clause provide?
جواب
Contractual authority to inspect or obtain evidence about agreed controls.
کارڈ 176
سوال
Where should a forward proxy sit in an enterprise traffic path?
جواب
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
کارڈ 177
سوال
Which cues should make a message look suspicious?
جواب
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
کارڈ 178
سوال
What makes a security control managerial?
جواب
It directs risk and governance through decisions such as policies, assessments, and oversight.
کارڈ 179
سوال
What is the CYOD mobile deployment model?
جواب
The user selects from organization-approved device options that remain subject to corporate security requirements.
کارڈ 180
سوال
How does client-based vulnerable software differ from an agentless exposure?
جواب
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
کارڈ 181
سوال
What makes a risk assessment recurring?
جواب
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
کارڈ 182
سوال
What does a defensive penetration-testing team practice?
جواب
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
کارڈ 183
سوال
In a zero-trust data plane, what can the subject or system represent?
جواب
The user, device, workload, or service requesting access to a protected resource.
کارڈ 184
سوال
What primarily motivates a hacktivist?
جواب
A political, social, or ideological cause.
کارڈ 185
سوال
What is bloatware?
جواب
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
کارڈ 186
سوال
Why keep endpoint-protection signatures and engines current?
جواب
They need current detection logic to recognize newly identified malware and exploit behavior.
کارڈ 187
سوال
What should application security monitoring observe?
جواب
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
کارڈ 188
سوال
What is role-based access control?
جواب
Permissions are assigned to roles, and identities receive access through their roles.
کارڈ 189
سوال
What is geographic dispersal?
جواب
Placing redundant resources in separate locations so one regional event does not affect all copies.
کارڈ 190
سوال
What is a malicious update?
جواب
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
کارڈ 191
سوال
What does static application analysis inspect?
جواب
Source code, bytecode, or compiled code without executing the application.
کارڈ 192
سوال
What does a firewall access list define?
جواب
An ordered set of traffic-matching conditions and the action applied when a condition matches.
کارڈ 193
سوال
What does a disaster recovery policy establish?
جواب
Management expectations for restoring technology and data after a disruptive event.
کارڈ 194
سوال
How does logical segmentation separate workloads that share physical infrastructure?
جواب
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
کارڈ 195
سوال
How should IDS and IPS placement differ?
جواب
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
کارڈ 196
سوال
What should automated ticket creation capture?
جواب
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
کارڈ 197
سوال
What makes information intellectual property?
جواب
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
کارڈ 198
سوال
What is a backout plan?
جواب
Predefined steps for safely reversing a failed or harmful change.
کارڈ 199
سوال
Why is an unsecure wireless network an attack vector?
جواب
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
کارڈ 200
سوال
What is physical brute force?
جواب
Using force to defeat a lock, barrier, enclosure, or other physical control.
کارڈ 201
سوال
What is application sandboxing?
جواب
Running code in a constrained environment with limited access to the host and data.
کارڈ 202
سوال
Why assign an asset owner?
جواب
One accountable party must decide its use, protection, and lifecycle.
کارڈ 203
سوال
What happens during risk identification?
جواب
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
کارڈ 204
سوال
What should an SLA state about breach notification?
جواب
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
کارڈ 205
سوال
How do due diligence and due care differ in compliance?
جواب
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
کارڈ 206
سوال
What is attribute-based access control?
جواب
Policy evaluates attributes of the subject, resource, action, and environment.
کارڈ 207
سوال
What does a zero-trust policy engine do?
جواب
It evaluates policy and signals to decide whether access should be allowed.
کارڈ 208
سوال
How does a cloud responsibility matrix allocate security duties?
جواب
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
کارڈ 209
سوال
Where should a load balancer sit in a service path?
جواب
In front of service instances so it can route requests to healthy backends.
کارڈ 210
سوال
What should the security team do with a reported suspicious message?
جواب
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
کارڈ 211
سوال
What makes an operating-system vulnerability high impact?
جواب
It can affect every application and security control that relies on the compromised OS.
کارڈ 212
سوال
What does dynamic application analysis inspect?
جواب
The behavior and externally visible weaknesses of a running application.
کارڈ 213
سوال
How can false-positive trends affect IDS or IPS tuning?
جواب
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
کارڈ 214
سوال
What does a business continuity policy establish?
جواب
Management expectations for sustaining and restoring critical business functions.
کارڈ 215
سوال
What is a hot recovery site?
جواب
A ready, synchronized environment intended to take over quickly.
کارڈ 216
سوال
What makes an insider threat distinct?
جواب
The actor has legitimate access or organizational knowledge that can be misused.
کارڈ 217
سوال
What is RFID cloning?
جواب
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
کارڈ 218
سوال
Why apply vendor security updates promptly?
جواب
They remove known weaknesses before attackers can exploit the unpatched exposure.
کارڈ 219
سوال
What should infrastructure security monitoring observe?
جواب
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
کارڈ 220
سوال
What can firewall logs reveal?
جواب
Allowed or denied network connections across controlled boundaries.
کارڈ 221
سوال
Why minimize open service ports?
جواب
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
کارڈ 222
سوال
What is threat hunting?
جواب
A proactive search for evidence of malicious activity that existing detections have not confirmed.
کارڈ 223
سوال
What triggers an ad hoc risk assessment?
جواب
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
کارڈ 224
سوال
What makes an assessment external?
جواب
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
کارڈ 225
سوال
What is data sovereignty?
جواب
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
کارڈ 226
سوال
What security boundary does a cellular connection create for a mobile device?
جواب
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
کارڈ 227
سوال
What makes a security control operational?
جواب
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
کارڈ 228
سوال
What is discretionary access control?
جواب
A resource owner can decide who receives access, within system policy.
کارڈ 229
سوال
How can careful automation support employee retention?
جواب
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
کارڈ 230
سوال
Why does ease of deployment matter in an architecture decision?
جواب
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
کارڈ 231
سوال
What tradeoff comes with placing an NGFW inline?
جواب
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
کارڈ 232
سوال
What does a zero-trust policy administrator do?
جواب
It carries out the policy engine's decision, such as creating or ending a session.
کارڈ 233
سوال
What should a master service agreement define for data return and deletion?
جواب
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
کارڈ 234
سوال
What is an environmental physical attack?
جواب
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
کارڈ 235
سوال
When should a maintenance window be chosen?
جواب
When disruption and rollback can be managed with the least business impact.
کارڈ 236
سوال
What is memory injection?
جواب
Placing malicious code or data into another process's memory so it executes in that process's context.
کارڈ 237
سوال
What does software composition analysis find?
جواب
Known risks and license information in third-party dependencies.
کارڈ 238
سوال
What is DNS filtering?
جواب
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
کارڈ 239
سوال
What should an incident response policy establish?
جواب
Authority, scope, reporting duties, and organizational commitment for incident handling.
کارڈ 240
سوال
How can noncompliance cause reputational damage?
جواب
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
کارڈ 241
سوال
What does full-disk encryption protect?
جواب
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
کارڈ 242
سوال
Why are default credentials dangerous?
جواب
They are widely known or easily discovered and often remain unchanged.
کارڈ 243
سوال
What makes a risk assessment one-time?
جواب
It evaluates a defined decision or scope once without an established repeating cadence.
کارڈ 244
سوال
What is a warm recovery site?
جواب
A partially equipped environment that needs some data restoration or configuration before use.
کارڈ 245
سوال
What does application input validation do?
جواب
It checks that input matches the expected type, length, range, and format before use.
کارڈ 246
سوال
What should an asset inventory record besides a device name?
جواب
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
کارڈ 247
سوال
What is mandatory access control?
جواب
A central authority enforces access through labels and rules that ordinary owners cannot override.
کارڈ 248
سوال
What security benefit does infrastructure as code provide?
جواب
Repeatable, reviewable deployments that reduce undocumented configuration drift.
کارڈ 249
سوال
When should a public service control fail closed?
جواب
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
کارڈ 250
سوال
What should users do with a suspicious message?
جواب
Report it through the approved channel without interacting with its links or attachments.
کارڈ 251
سوال
What usually motivates organized cybercrime?
جواب
Financial gain through scalable or repeatable criminal activity.
کارڈ 252
سوال
How can malicious code support a network attack?
جواب
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
کارڈ 253
سوال
When is virtual patching useful?
جواب
When a network or application control can block exploit traffic before the underlying system can be patched.
کارڈ 254
سوال
What does security-monitoring reporting provide?
جواب
A summarized, audience-appropriate view of findings, trends, risk, and response status.
کارڈ 255
سوال
What does data geolocation identify?
جواب
The physical or legal location where data is stored, processed, or transmitted.
کارڈ 256
سوال
What does a zero-trust policy enforcement point do?
جواب
It enables, monitors, and terminates the connection between a subject and a resource.
کارڈ 257
سوال
What is cryptographic key exchange?
جواب
A method for parties to establish shared key material over an untrusted channel.
کارڈ 258
سوال
How can a vendor become a supply-chain attack vector?
جواب
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
کارڈ 259
سوال
Why can legacy hardware remain vulnerable?
جواب
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
کارڈ 260
سوال
What can proprietary vulnerability intelligence add beyond open sources?
جواب
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
کارڈ 261
سوال
How does a centralized proxy apply web filtering?
جواب
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
کارڈ 262
سوال
How can continuous integration and testing improve security automation?
جواب
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
کارڈ 263
سوال
What is containment?
جواب
Limiting an incident's spread or damage while preserving necessary operations and evidence.
کارڈ 264
سوال
What is a software development lifecycle policy meant to ensure?
جواب
Security requirements and checks are integrated throughout design, development, release, and maintenance.
کارڈ 265
سوال
What makes risk assessment continuous?
جواب
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
کارڈ 266
سوال
What is a memorandum of agreement?
جواب
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
کارڈ 267
سوال
What makes a penetration test integrated?
جواب
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
کارڈ 268
سوال
How does a DNS amplification attack magnify traffic?
جواب
It sends small spoofed queries that trigger larger replies toward the victim.
کارڈ 269
سوال
Why does ease of recovery matter in an architecture decision?
جواب
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
کارڈ 270
سوال
What does 802.1X control before a device receives normal network access?
جواب
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
کارڈ 271
سوال
What is rule-based access control?
جواب
System-wide rules grant or deny access based on conditions such as network, time, or action.
کارڈ 272
سوال
What is mobile device management?
جواب
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
کارڈ 273
سوال
What tradeoff comes with a cold recovery site?
جواب
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
کارڈ 274
سوال
Why identify stakeholders before approving a security-sensitive change?
جواب
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
کارڈ 275
سوال
How do attestation and acknowledgement differ?
جواب
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
کارڈ 276
سوال
What does zero-trust adaptive identity mean?
جواب
Access decisions adjust to current risk signals rather than relying only on a static login.
کارڈ 277
سوال
What makes a security control physical?
جواب
It protects facilities or equipment through a tangible barrier or mechanism.
کارڈ 278
سوال
What is geo-fencing for data?
جواب
Enforcing location-based boundaries on where data or services may be accessed or operated.
کارڈ 279
سوال
What does a Trusted Platform Module protect?
جواب
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
کارڈ 280
سوال
Why can a managed service provider amplify risk?
جواب
Its privileged access and shared tooling can provide a path into many customers.
کارڈ 281
سوال
What does probability express in risk analysis?
جواب
A quantified chance that a defined event will occur within stated conditions or time.
کارڈ 282
سوال
Why can shadow IT create a threat?
جواب
It bypasses security review, inventory, monitoring, and supported configuration.
کارڈ 283
سوال
What is on-path interception?
جواب
An attacker positions between communicating parties to observe or alter traffic.
کارڈ 284
سوال
Why include encryption in a system-hardening baseline?
جواب
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
کارڈ 285
سوال
Why tune security alerts?
جواب
To keep useful detections while reducing noise that wastes analyst attention.
کارڈ 286
سوال
What can IPS or IDS logs contribute to an investigation?
جواب
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
کارڈ 287
سوال
What is VM escape?
جواب
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
کارڈ 288
سوال
How can segmentation reduce vulnerability exposure before a patch is available?
جواب
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
کارڈ 289
سوال
Why should firewall policy name the required ports and protocols explicitly?
جواب
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
کارڈ 290
سوال
What is a change management policy meant to control?
جواب
How changes are requested, assessed, approved, tested, implemented, and reviewed.
کارڈ 291
سوال
What is a hybrid-cloud architecture?
جواب
An environment that integrates private or on-premises resources with public cloud services.
کارڈ 292
سوال
How do AH and ESP differ in the security services they can provide?
جواب
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
کارڈ 293
سوال
What makes user behavior risky?
جواب
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
کارڈ 294
سوال
What is least privilege?
جواب
Granting only the access needed for the required task and no more.
کارڈ 295
سوال
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
جواب
Transmission to HTTPS, script access, and cross-site sending, respectively.
کارڈ 296
سوال
Why discover unmanaged assets?
جواب
Unknown systems cannot be patched, monitored, or governed reliably.
کارڈ 297
سوال
What is a service-level agreement?
جواب
Measurable service commitments and remedies, such as availability or response targets.
کارڈ 298
سوال
What should govern automated security escalation?
جواب
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
کارڈ 299
سوال
What is platform diversity as a resilience strategy?
جواب
Using different implementations so one common flaw or failure is less likely to affect every copy.
کارڈ 300
سوال
How can replayed session material affect an application?
جواب
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
کارڈ 301
سوال
What is an implicit trust zone in zero trust?
جواب
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
کارڈ 302
سوال
What does salting a password hash accomplish?
جواب
It makes identical passwords hash differently and defeats precomputed hash tables.
کارڈ 303
سوال
What is spear phishing?
جواب
Phishing tailored to a specific person, role, or organization.
کارڈ 304
سوال
What is eradication?
جواب
Removing the attacker's access, malicious artifacts, and exploited conditions.
کارڈ 305
سوال
Who is a risk owner?
جواب
The person accountable for deciding and monitoring how a specific risk is handled.
کارڈ 306
سوال
What does a partially known penetration-test environment provide?
جواب
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
کارڈ 307
سوال
What is a microservices architecture?
جواب
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
کارڈ 308
سوال
What is a jump server?
جواب
A hardened intermediary used to reach systems in a restricted management network.
کارڈ 309
سوال
What can happen when a configuration change is made without dependency analysis?
جواب
A downstream service can fail even when the changed component works.
کارڈ 310
سوال
What is resource reuse exposure?
جواب
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
کارڈ 311
سوال
Why does financial information require explicit protection?
جواب
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
کارڈ 312
سوال
What does CVE provide?
جواب
A common identifier for a publicly disclosed vulnerability.
کارڈ 313
سوال
Where can DLP controls operate?
جواب
On endpoints, networks, email, and cloud services, depending on the product and visibility.
کارڈ 314
سوال
What does privileged password vaulting protect?
جواب
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
کارڈ 315
سوال
What does an access-control standard define?
جواب
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
کارڈ 316
سوال
How can automation support compliance monitoring?
جواب
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
کارڈ 317
سوال
What does static code analysis examine?
جواب
Source or compiled code for weakness patterns without executing the application.
کارڈ 318
سوال
What actor attribute describes funding, time, and personnel?
جواب
Resources.
کارڈ 319
سوال
What is DNS poisoning?
جواب
Introducing false DNS data so names resolve to attacker-chosen destinations.
کارڈ 320
سوال
Why change default credentials during hardening?
جواب
Default secrets are predictable and commonly targeted.
کارڈ 321
سوال
What does quarantine do after a security alert?
جواب
It restricts a suspected asset or object while analysts validate and remediate the risk.
کارڈ 322
سوال
What does key stretching do for stored passwords?
جواب
It deliberately makes each password guess more computationally expensive.
کارڈ 323
سوال
What is smishing?
جواب
Phishing delivered through SMS or another text-messaging service.
کارڈ 324
سوال
What is qualitative risk analysis?
جواب
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
کارڈ 325
سوال
What is a master service agreement?
جواب
An umbrella contract establishing general legal and commercial terms for ongoing work.
کارڈ 326
سوال
What is threat scope reduction?
جواب
Narrowing the systems, privileges, or paths an attacker can reach.
کارڈ 327
سوال
Why use a third-party cloud service instead of building locally?
جواب
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
کارڈ 328
سوال
What should determine security-device placement?
جواب
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
کارڈ 329
سوال
What does situational awareness mean for a user?
جواب
Notice the people, devices, requests, location, and context around a task before acting.
کارڈ 330
سوال
What does a failover test validate?
جواب
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
کارڈ 331
سوال
What is a preventive control meant to do?
جواب
Stop an unwanted event before it succeeds.
کارڈ 332
سوال
What is just-in-time privileged access?
جواب
Elevated access is granted only when needed and expires after a short approved period.
کارڈ 333
سوال
What safeguard should security-group automation enforce?
جواب
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
کارڈ 334
سوال
How does a reflected DDoS attack hide and multiply sources?
جواب
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
کارڈ 335
سوال
What is a security misconfiguration?
جواب
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
کارڈ 336
سوال
Why can the same vulnerability have different organizational impact?
جواب
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
کارڈ 337
سوال
What does URL scanning evaluate before a user opens a web destination?
جواب
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
کارڈ 338
سوال
What is the board's security governance role?
جواب
Provide oversight, set risk direction, and hold executives accountable.
کارڈ 339
سوال
What does code signing establish?
جواب
That code came from the holder of the signing key and has not changed since signing.
کارڈ 340
سوال
How should an asset's classification affect security operations?
جواب
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
کارڈ 341
سوال
How does encryption protect data?
جواب
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
کارڈ 342
سوال
What is a secure enclave?
جواب
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
کارڈ 343
سوال
What is business email compromise?
جواب
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
کارڈ 344
سوال
What is recovery in incident response?
جواب
Restoring services safely, monitoring them, and returning to normal operations.
کارڈ 345
سوال
How is single loss expectancy commonly estimated?
جواب
Asset value multiplied by the exposure factor.
کارڈ 346
سوال
What does an unknown penetration-test environment provide?
جواب
The tester begins with little or no internal information, modeling an external attacker's discovery process.
کارڈ 347
سوال
What security boundary does a hypervisor provide?
جواب
It isolates virtual machines while controlling their access to shared hardware.
کارڈ 348
سوال
Why does a TLS tunnel not protect a compromised endpoint?
جواب
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
کارڈ 349
سوال
Why update diagrams after an infrastructure change?
جواب
Operations and incident responders need the documentation to match the deployed environment.
کارڈ 350
سوال
What does privacy ownership assign?
جواب
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
کارڈ 351
سوال
What does a security control gap analysis compare?
جواب
The controls required for the target state with the controls currently in place.
کارڈ 352
سوال
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
جواب
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
کارڈ 353
سوال
What is application privilege escalation?
جواب
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
کارڈ 354
سوال
What risk remains when unnecessary software is left installed?
جواب
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
کارڈ 355
سوال
What does SCAP standardize?
جواب
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
کارڈ 356
سوال
What can packet capture reveal?
جواب
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
کارڈ 357
سوال
What makes a privileged credential ephemeral?
جواب
It is created for a limited task or session and expires or is destroyed automatically after that use.
کارڈ 358
سوال
How do a statement of work and a work order differ?
جواب
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
کارڈ 359
سوال
Why might multi-cloud improve resilience?
جواب
A provider-wide failure need not stop workloads that can run independently elsewhere.
کارڈ 360
سوال
How can a service provider introduce a supply-chain vulnerability?
جواب
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
کارڈ 361
سوال
What is a false positive in vulnerability scanning?
جواب
A reported weakness that is not actually present or exploitable in the assessed context.
کارڈ 362
سوال
How do EDR and XDR differ?
جواب
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
کارڈ 363
سوال
What should onboarding and offboarding procedures coordinate?
جواب
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
کارڈ 364
سوال
How should an organization harden managed mobile devices?
جواب
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
کارڈ 365
سوال
What is a certificate signing request?
جواب
A request containing a public key and subject information for a certificate authority to sign.
کارڈ 366
سوال
What is pretexting?
جواب
Using a fabricated role or situation to make a request seem legitimate.
کارڈ 367
سوال
How is annualized loss expectancy commonly estimated?
جواب
Single loss expectancy multiplied by annualized rate of occurrence.
کارڈ 368
سوال
What security consequence follows from containers sharing a kernel?
جواب
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
کارڈ 369
سوال
Where does 802.1X enforce a network admission decision?
جواب
At the controlled switch port or wireless access point before normal network access is granted.
کارڈ 370
سوال
What should insider-threat awareness teach?
جواب
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
کارڈ 371
سوال
What access action is suitable for careful automation?
جواب
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
کارڈ 372
سوال
What is an evil twin?
جواب
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 کارڈز
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
یہ ڈیک مفت پڑھیںمطالعہ شروع کرنے کے لیے Nibomo کھلے گا۔
کارڈ 373
سوال
Does non-human-readable data need less protection?
جواب
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
کارڈ 374
سوال
What does authenticating a system establish?
جواب
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
کارڈ 375
سوال
What does LDAP provide in identity systems?
جواب
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
کارڈ 376
سوال
What is a deterrent control meant to do?
جواب
Discourage an attacker from attempting an unwanted action.
کارڈ 377
سوال
Why update procedures after changing a security control?
جواب
Staff need accurate steps for operating, monitoring, and recovering the new control.
کارڈ 378
سوال
How does OCSP differ from a certificate revocation list?
جواب
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
کارڈ 379
سوال
What is the goal of data exfiltration?
جواب
Remove data from its authorized environment without permission.
کارڈ 380
سوال
What is a watering-hole attack?
جواب
Compromising a site frequented by the intended targets so their visits expose them.
کارڈ 381
سوال
How can a hardware provider introduce a supply-chain vulnerability?
جواب
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
کارڈ 382
سوال
What is application forgery?
جواب
Creating or altering a request, token, or object so the application treats it as authentic.
کارڈ 383
سوال
How does least privilege mitigate compromise?
جواب
It limits the actions and resources available to a compromised account or process.
کارڈ 384
سوال
What is serverless computing?
جواب
A model where the provider manages servers and the customer deploys event-driven code or functions.
کارڈ 385
سوال
What makes an infrastructure control effective for a specific risk?
جواب
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
کارڈ 386
سوال
What does parallel recovery processing test?
جواب
Whether primary and alternate environments can run together consistently before a controlled cutover.
کارڈ 387
سوال
Which password-authentication method does WPA3-Personal use?
جواب
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
کارڈ 388
سوال
How does data retention affect asset disposal?
جواب
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
کارڈ 389
سوال
What is a false negative in vulnerability scanning?
جواب
A real weakness that the assessment fails to report.
کارڈ 390
سوال
What does recurring security scanning add to monitoring?
جواب
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
کارڈ 391
سوال
What should guide port selection for a secure protocol?
جواب
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
کارڈ 392
سوال
What does forensic acquisition create?
جواب
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
کارڈ 393
سوال
How do system owners and data owners divide security accountability?
جواب
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
کارڈ 394
سوال
What does likelihood express in risk analysis?
جواب
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
کارڈ 395
سوال
What is a memorandum of understanding?
جواب
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
کارڈ 396
سوال
What does the right to be forgotten generally require?
جواب
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
کارڈ 397
سوال
What does an audit committee oversee?
جواب
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
کارڈ 398
سوال
What does identity interoperability require?
جواب
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
کارڈ 399
سوال
How does a bollard protect a facility?
جواب
It blocks or redirects vehicles before they can reach a protected area.
کارڈ 400
سوال
How can hashing protect a downloaded file?
جواب
A trusted digest lets the recipient detect whether the file changed.
کارڈ 401
سوال
What is a credential replay attack?
جواب
Using captured valid credentials or tokens again without needing to discover the secret.
کارڈ 402
سوال
How can automation complexity create security risk?
جواب
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
کارڈ 403
سوال
What must an architecture provide when a component cannot be patched?
جواب
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
کارڈ 404
سوال
What makes remote access secure?
جواب
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
کارڈ 405
سوال
What should users verify before connecting removable media or a cable?
جواب
That the device and connection are approved, expected, and handled under organizational policy.
کارڈ 406
سوال
What is a self-signed certificate?
جواب
A certificate signed by its own private key rather than by a separate trusted issuer.
کارڈ 407
سوال
What is brand impersonation?
جواب
Using a trusted organization's identity or look to deceive people.
کارڈ 408
سوال
What characterizes a conservative risk appetite?
جواب
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
کارڈ 409
سوال
What should a managed mobile device verify before using Wi-Fi?
جواب
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
کارڈ 410
سوال
What is a zero-day vulnerability?
جواب
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
کارڈ 411
سوال
What does verification confirm after vulnerability remediation?
جواب
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
کارڈ 412
سوال
What is user and entity behavior analytics?
جواب
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
کارڈ 413
سوال
What does a physical security policy establish?
جواب
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
کارڈ 414
سوال
What does a UPS provide?
جواب
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
کارڈ 415
سوال
What is a nondisclosure agreement?
جواب
A contract restricting use and disclosure of defined confidential information.
کارڈ 416
سوال
What should be checked before assigning a user permission?
جواب
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
کارڈ 417
سوال
How does espionage differ from ordinary theft?
جواب
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
کارڈ 418
سوال
What is password spraying?
جواب
Trying a small set of common passwords across many accounts to avoid lockouts.
کارڈ 419
سوال
What is the purpose of system isolation during an incident?
جواب
Stop harmful communication while preserving the system for response and investigation.
کارڈ 420
سوال
What is a security benchmark?
جواب
A documented set of recommended configuration checks for a platform or product.
کارڈ 421
سوال
Which metadata fields give a log record investigative context?
جواب
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
کارڈ 422
سوال
What does an access-control vestibule prevent?
جواب
It limits tailgating by allowing controlled passage through one door at a time.
کارڈ 423
سوال
What is version control's security value for configuration?
جواب
It preserves attributable history and enables review or rollback of changes.
کارڈ 424
سوال
Why use both internal and external compliance monitoring?
جواب
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
کارڈ 425
سوال
What distinguishes on-premises architecture?
جواب
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
کارڈ 426
سوال
What risk can split tunneling add to a VPN?
جواب
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
کارڈ 427
سوال
What is a certificate root of trust?
جواب
A trusted root certificate or key from which a client validates a certificate chain.
کارڈ 428
سوال
What is typosquatting?
جواب
Registering a look-alike domain based on common typing errors or visual similarity.
کارڈ 429
سوال
What is root-cause analysis?
جواب
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
کارڈ 430
سوال
What is risk tolerance?
جواب
The acceptable variation or boundary around a specific objective or risk area.
کارڈ 431
سوال
What is a security self-assessment?
جواب
A structured internal evaluation in which the organization measures its own controls against selected criteria.
کارڈ 432
سوال
What does data masking change?
جواب
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
کارڈ 433
سوال
How do wireless authentication protocols let clients prove identity securely?
جواب
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
کارڈ 434
سوال
Why reconcile inventory with network discovery?
جواب
Differences expose missing records, retired systems, or unauthorized devices.
کارڈ 435
سوال
Why does sideloading raise mobile risk?
جواب
It can bypass store review, signing policy, and managed application controls.
کارڈ 436
سوال
What does an information-sharing organization add to vulnerability management?
جواب
Sector or community intelligence about relevant threats, incidents, and defensive action.
کارڈ 437
سوال
What does a web-filter block rule specify?
جواب
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
کارڈ 438
سوال
How do data custodians and data stewards differ?
جواب
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
کارڈ 439
سوال
What is a brute-force password attack?
جواب
Systematically trying many candidate secrets against an account or protected value.
کارڈ 440
سوال
What is a compensating control?
جواب
An alternative safeguard used when the preferred control is impractical or unavailable.
کارڈ 441
سوال
How can location act as an authentication factor?
جواب
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
کارڈ 442
سوال
Why must security automation remain supportable?
جواب
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
کارڈ 443
سوال
What does a standby generator provide?
جواب
Longer-duration power during a utility outage, after a startup delay.
کارڈ 444
سوال
What makes an architecture air-gapped?
جواب
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
کارڈ 445
سوال
What is a software-defined WAN?
جواب
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
کارڈ 446
سوال
What password-management behavior should awareness training reinforce?
جواب
Use unique long passwords through an approved manager and report suspected compromise promptly.
کارڈ 447
سوال
What security value does fencing provide?
جواب
It defines and delays entry across a physical perimeter.
کارڈ 448
سوال
What is a wildcard certificate?
جواب
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
کارڈ 449
سوال
How does misinformation differ from disinformation?
جواب
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
کارڈ 450
سوال
What is a risk threshold?
جواب
A defined level that triggers escalation, treatment, or another required response.
کارڈ 451
سوال
What does a vendor penetration test contribute to assessment?
جواب
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
کارڈ 452
سوال
What is the objective of a service-disruption attack?
جواب
Make a system or business function unavailable or unreliable.
کارڈ 453
سوال
What is directory traversal?
جواب
Manipulating a file path to reach files outside the directory the application intended to expose.
کارڈ 454
سوال
Why decommission an unsupported system?
جواب
Removing it eliminates an exposure that can no longer be patched or securely maintained.
کارڈ 455
سوال
Why archive security-monitoring data?
جواب
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
کارڈ 456
سوال
What role does RADIUS commonly play in enterprise Wi-Fi?
جواب
It centralizes authentication, authorization information, and accounting for network access.
کارڈ 457
سوال
Why separate the requester and approver of a high-risk change?
جواب
To reduce error, fraud, and unilateral unauthorized modification.
کارڈ 458
سوال
Why can a jailbroken device violate a security baseline?
جواب
It weakens platform isolation and allows unapproved privileged changes.
کارڈ 459
سوال
When is tokenization especially useful?
جواب
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
کارڈ 460
سوال
Why can dark-web intelligence affect vulnerability priority?
جواب
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
کارڈ 461
سوال
What firewall policy should govern traffic from a screened subnet to internal systems?
جواب
Deny it by default and allow only explicitly required flows.
کارڈ 462
سوال
What does SAML commonly carry?
جواب
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
کارڈ 463
سوال
What does a security governance committee do?
جواب
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
کارڈ 464
سوال
How can global privacy requirements affect one data process?
جواب
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
کارڈ 465
سوال
What characterizes an IoT device?
جواب
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
کارڈ 466
سوال
What is a unified threat management appliance?
جواب
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
کارڈ 467
سوال
What does a hardware security module provide?
جواب
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
کارڈ 468
سوال
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
جواب
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
کارڈ 469
سوال
What is a tabletop exercise?
جواب
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
کارڈ 470
سوال
What does a risk exemption authorize?
جواب
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
کارڈ 471
سوال
What is a regulatory examination?
جواب
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
کارڈ 472
سوال
What does physical video surveillance primarily provide?
جواب
Detection and evidence of activity in monitored areas.
کارڈ 473
سوال
What is a birthday attack against a hash?
جواب
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
کارڈ 474
سوال
Why keep backups both onsite and offsite?
جواب
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
کارڈ 475
سوال
How does technical debt affect security automation?
جواب
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
کارڈ 476
سوال
What should switch hardening restrict first?
جواب
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
کارڈ 477
سوال
What should happen when an asset changes owners?
جواب
Inventory, access, support responsibility, and data handling should be updated.
کارڈ 478
سوال
What does evidence of a vendor's internal audits contribute?
جواب
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
کارڈ 479
سوال
What is identity attestation?
جواب
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
کارڈ 480
سوال
Why can standard enterprise patching be unsafe for an RTOS device?
جواب
A change can disrupt timing guarantees or certified operational behavior.
کارڈ 481
سوال
What is secure access service edge?
جواب
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
کارڈ 482
سوال
What social-engineering habit should awareness training reinforce?
جواب
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
کارڈ 483
سوال
How can a software provider introduce a supply-chain vulnerability?
جواب
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
کارڈ 484
سوال
Why include internet exposure in remediation priority?
جواب
A reachable vulnerable service usually has more attack opportunity than an isolated one.
کارڈ 485
سوال
What does a mail gateway inspect?
جواب
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
کارڈ 486
سوال
What is a data controller?
جواب
The entity that determines why and how personal data is processed.
کارڈ 487
سوال
How does blackmail motivate a cyberattack?
جواب
The attacker threatens disclosure or harm unless the victim complies.
کارڈ 488
سوال
What is a downgrade attack?
جواب
Forcing parties to use an older or weaker protocol or security mode.
کارڈ 489
سوال
How does encryption mitigate data exposure?
جواب
It makes captured data unreadable without the required key.
کارڈ 490
سوال
How do network and web vulnerability scanners differ?
جواب
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
کارڈ 491
سوال
How can vulnerability-scan data support an investigation?
جواب
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
کارڈ 492
سوال
What is key escrow?
جواب
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
کارڈ 493
سوال
Which human vector commonly uses a fake sign-in page to harvest credentials?
جواب
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
کارڈ 494
سوال
What is risk avoidance?
جواب
Stopping or not starting the activity that creates the risk.
کارڈ 495
سوال
What is data obfuscation?
جواب
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
کارڈ 496
سوال
What is a directive control?
جواب
A safeguard that tells people what behavior or action is required.
کارڈ 497
سوال
What does a security guard add that a camera cannot?
جواب
Human judgment and an immediate physical response.
کارڈ 498
سوال
Why define restricted activities in change management?
جواب
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
کارڈ 499
سوال
What contractual impact can noncompliance create?
جواب
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
کارڈ 500
سوال
What should determine backup frequency?
جواب
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
کارڈ 501
سوال
What should router hardening protect?
جواب
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
کارڈ 502
سوال
What problem does OAuth 2.0 address?
جواب
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
کارڈ 503
سوال
What does SCADA do?
جواب
It provides supervisory monitoring and control across distributed industrial equipment.
کارڈ 504
سوال
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
جواب
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
کارڈ 505
سوال
What distinguishes a computer virus?
جواب
It attaches to a host file or program and spreads when that infected host executes or is shared.
کارڈ 506
سوال
What does a key management system coordinate?
جواب
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
کارڈ 507
سوال
How can an unsecure wired network expose traffic?
جواب
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
کارڈ 508
سوال
Why is vulnerable device firmware hard to remediate?
جواب
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
کارڈ 509
سوال
What does patching change in vulnerability remediation?
جواب
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
کارڈ 510
سوال
What does DMARC add to SPF and DKIM?
جواب
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
کارڈ 511
سوال
How does automation improve security efficiency?
جواب
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
کارڈ 512
سوال
What is a simulation exercise?
جواب
A more realistic practice in which participants respond to injected events using operational processes.
کارڈ 513
سوال
What is a data processor?
جواب
An entity that processes personal data on behalf of a controller.
کارڈ 514
سوال
What is risk mitigation?
جواب
Reducing likelihood, impact, or both through controls or process changes.
کارڈ 515
سوال
Why monitor a vendor after onboarding?
جواب
Security posture, ownership, services, incidents, and dependencies can change.
کارڈ 516
سوال
What does a physical penetration test assess?
جواب
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
کارڈ 517
سوال
Why use access badges at a facility?
جواب
To associate entry attempts with authorized identities and enforce access rules.
کارڈ 518
سوال
How does permission restriction protect data?
جواب
Only authorized identities receive the actions and scope their roles require.
کارڈ 519
سوال
What is the usual objective of ransomware extortion?
جواب
Force payment by denying access, threatening disclosure, or both.
کارڈ 520
سوال
What does impossible travel indicate?
جواب
One identity appears to authenticate from distant locations too quickly for legitimate travel.
کارڈ 521
سوال
What is configuration enforcement?
جواب
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
کارڈ 522
سوال
What does a web vulnerability scanner inspect?
جواب
Running web behavior for issues such as unsafe input handling and insecure configuration.
کارڈ 523
سوال
How does cost affect an architecture choice?
جواب
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
کارڈ 524
سوال
What does EAP provide with 802.1X?
جواب
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
کارڈ 525
سوال
What should operational-security training help users protect?
جواب
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
کارڈ 526
سوال
What does a time-of-day access rule do?
جواب
Allows or denies a requested action according to an approved schedule.
کارڈ 527
سوال
What should cloud infrastructure hardening establish?
جواب
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
کارڈ 528
سوال
What should an asset owner ensure during offboarding?
جواب
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
کارڈ 529
سوال
Why encrypt backups?
جواب
Backup media and transfers can expose the same sensitive data as production systems.
کارڈ 530
سوال
What is steganography?
جواب
Hiding the existence of data inside another medium rather than merely encrypting its contents.
کارڈ 531
سوال
Which human vector uses a fabricated authority role to justify a sensitive request?
جواب
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
کارڈ 532
سوال
Why does risk transfer not remove accountability?
جواب
The organization can retain legal, reputational, operational, and oversight consequences.
کارڈ 533
سوال
Why validate a change after deployment?
جواب
To confirm the intended result occurred without introducing unacceptable side effects.
کارڈ 534
سوال
What makes end-of-life hardware a security vulnerability?
جواب
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
کارڈ 535
سوال
What does an audit add to remediation validation?
جواب
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
کارڈ 536
سوال
Why can SPF pass while a message still impersonates a brand?
جواب
SPF checks the envelope domain, which may differ from the visible From domain.
کارڈ 537
سوال
What role can a government entity have in security governance?
جواب
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
کارڈ 538
سوال
How do data inventory and retention support privacy governance?
جواب
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
کارڈ 539
سوال
What can concurrent sessions from distant regions indicate?
جواب
A stolen account or shared credential, subject to VPN and proxy context.
کارڈ 540
سوال
What does supply-chain analysis examine?
جواب
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
کارڈ 541
سوال
What is the purpose of facility lighting as a control?
جواب
Deter covert activity and improve observation of people and areas.
کارڈ 542
سوال
What architecture quality keeps a service usable during component failure?
جواب
Availability.
کارڈ 543
سوال
When is fail-open behavior preferable to fail-closed behavior?
جواب
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
کارڈ 544
سوال
Which control function does a login-failure alert provide?
جواب
Detection; it reveals suspicious authentication activity.
کارڈ 545
سوال
What does a biometric MFA implementation verify?
جواب
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
کارڈ 546
سوال
How can automation enforce a security baseline?
جواب
It compares realized settings with the approved state and reports or corrects unauthorized drift.
کارڈ 547
سوال
How do wireless cryptographic protocols protect network traffic?
جواب
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
کارڈ 548
سوال
Why segment sensitive data stores?
جواب
It limits reachable paths and separates them from lower-trust workloads.
کارڈ 549
سوال
What must remain secret in an asymmetric key pair?
جواب
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
کارڈ 550
سوال
How can a supplier become a supply-chain attack vector?
جواب
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
کارڈ 551
سوال
What is e-discovery?
جواب
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
کارڈ 552
سوال
What characterizes a neutral risk appetite?
جواب
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
کارڈ 553
سوال
What is passive reconnaissance?
جواب
Gathering information without directly interacting with the target's systems.
کارڈ 554
سوال
What does a philosophical motive mean for a threat actor?
جواب
The actor acts to advance a belief or moral position rather than primarily for money.
کارڈ 555
سوال
What does unexpected resource consumption indicate?
جواب
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
کارڈ 556
سوال
What does a host-based intrusion prevention system do?
جواب
It monitors activity on one host and can block behavior that matches exploit or attack rules.
کارڈ 557
سوال
How does agent-based monitoring differ from agentless monitoring?
جواب
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
کارڈ 558
سوال
What can network logs contribute to an investigation?
جواب
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
کارڈ 559
سوال
What is the purpose of a backup restore test?
جواب
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
کارڈ 560
سوال
Why can obsolete hardware become a security risk?
جواب
It may lack supported firmware, modern protections, or replacement parts.
کارڈ 561
سوال
What does rescanning confirm after remediation?
جواب
Whether the scanner can still detect the original finding on the affected asset.
کارڈ 562
سوال
What should a secure transport method provide?
جواب
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
کارڈ 563
سوال
How can law affect security governance?
جواب
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
کارڈ 564
سوال
What does resilience mean for a security architecture?
جواب
The ability to withstand disruption, adapt, and recover while preserving essential functions.
کارڈ 565
سوال
Why minimize an infrastructure's attack surface?
جواب
Fewer exposed services and paths leave fewer opportunities for exploitation.
کارڈ 566
سوال
What does executing a security-awareness program require?
جواب
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
کارڈ 567
سوال
What does an infrared security sensor detect?
جواب
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
کارڈ 568
سوال
What is a knowledge factor?
جواب
Something the claimant knows, such as a password.
کارڈ 569
سوال
Why review allow-list and deny-list impact before a change?
جواب
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
کارڈ 570
سوال
What does partition-level encryption protect?
جواب
One selected disk partition, leaving other partitions outside that encryption boundary.
کارڈ 571
سوال
How can instant messaging deliver a security attack?
جواب
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
کارڈ 572
سوال
What can repeated blocked-content events indicate?
جواب
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
کارڈ 573
سوال
What should a server-hardening baseline reduce?
جواب
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
کارڈ 574
سوال
When is physical media destruction appropriate?
جواب
When reuse is unnecessary or sanitization cannot provide adequate assurance.
کارڈ 575
سوال
What is mean time to repair?
جواب
The average time required to restore a failed component or service.
کارڈ 576
سوال
Why disclose conflicts of interest during vendor selection?
جواب
A personal or financial relationship can bias evaluation away from the organization's requirements.
کارڈ 577
سوال
What is a fine for noncompliance?
جواب
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
کارڈ 578
سوال
What does a public data classification authorize?
جواب
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
کارڈ 579
سوال
What security benefit comes from standard infrastructure configurations?
جواب
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
کارڈ 580
سوال
How does horizontal scaling increase capacity?
جواب
It adds more service instances and distributes work among them.
کارڈ 581
سوال
Why can added connectivity weaken segmentation?
جواب
Each allowed path can become a route for lateral movement or data escape.
کارڈ 582
سوال
What coding practice is central to preventing SQL injection?
جواب
Use parameterized queries so untrusted values remain data rather than executable query syntax.
کارڈ 583
سوال
When is a compensating control appropriate for a vulnerability?
جواب
When timely removal or patching is infeasible and another control can reduce the risk.
کارڈ 584
سوال
How does agent-based web filtering enforce policy?
جواب
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
کارڈ 585
سوال
How can regulation differ from an internal policy?
جواب
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
کارڈ 586
سوال
What is a storage snapshot?
جواب
A point-in-time representation of data or system state, whose independence depends on how it is stored.
کارڈ 587
سوال
What does password age measure?
جواب
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
کارڈ 588
سوال
What does an ethical motive mean in vulnerability research?
جواب
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
کارڈ 589
سوال
What can missing security logs indicate?
جواب
Logging failure, tampering, retention misconfiguration, or an inactive source.
کارڈ 590
سوال
Why disable unused ports and protocols?
جواب
They expose unnecessary communication paths and code that attackers can reach.
کارڈ 591
سوال
What does antivirus contribute to monitoring?
جواب
It scans files, memory, or behavior and reports suspected malicious code.
کارڈ 592
سوال
What is a honeypot?
جواب
A decoy system or service designed to attract and observe malicious activity.
کارڈ 593
سوال
What does file-level encryption protect?
جواب
Selected files independently of whether the rest of the disk or volume is encrypted.
کارڈ 594
سوال
How can SMS deliver a security attack?
جواب
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
کارڈ 595
سوال
What happens during incident analysis?
جواب
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
کارڈ 596
سوال
What is mean time between failures?
جواب
The average operating time between repairable failures.
کارڈ 597
سوال
What is active reconnaissance?
جواب
Probing or interacting with target systems to discover services and behavior.
کارڈ 598
سوال
What constraint should guide ICS or SCADA hardening?
جواب
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
کارڈ 599
سوال
Which control function does restoring a clean system image provide?
جواب
Correction; it returns the system to a known-good state.
کارڈ 600
سوال
What does responsiveness mean in an architecture decision?
جواب
How quickly the system and its operators can adapt to demand, failure, or attack.
کارڈ 601
سوال
How does out-of-band access strengthen remote administration?
جواب
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
کارڈ 602
سوال
What makes user behavior unexpected?
جواب
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
کارڈ 603
سوال
What is a work order?
جواب
A document authorizing a defined unit of work under an existing agreement.
کارڈ 604
سوال
What can out-of-cycle logging indicate?
جواب
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
کارڈ 605
سوال
Why update a standard operating procedure after a change?
جواب
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
کارڈ 606
سوال
What coding practice limits cross-site scripting?
جواب
Context-appropriate output encoding, supported by safe templating and input handling.
کارڈ 607
سوال
What does a restricted data classification indicate?
جواب
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
کارڈ 608
سوال
How does a bug bounty support responsible disclosure?
جواب
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
کارڈ 609
سوال
What does web-filter content categorization provide?
جواب
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
کارڈ 610
سوال
How do hard and soft authentication tokens differ?
جواب
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
کارڈ 611
سوال
How can industry requirements affect security governance?
جواب
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
کارڈ 612
سوال
How can noncompliance cause loss of a license?
جواب
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
کارڈ 613
سوال
What does volume-level encryption protect?
جواب
All data within a selected logical storage volume.
کارڈ 614
سوال
How can impersonation exploit familiarity?
جواب
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
کارڈ 615
سوال
How does RTO guide recovery design?
جواب
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
کارڈ 616
سوال
What is a honeynet?
جواب
A network of decoy systems used to study or divert attackers.
کارڈ 617
سوال
What does backup replication provide?
جواب
Additional synchronized or copied recovery data in another system or location.
کارڈ 618
سوال
What lets automation scale securely?
جواب
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
کارڈ 619
سوال
Why monitor a hardened computing resource continuously?
جواب
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
کارڈ 620
سوال
Why keep a certificate of destruction?
جواب
It documents that a disposal provider handled specified media under the agreed process.
کارڈ 621
سوال
Why consider patch availability before selecting a platform?
جواب
Unsupported or difficult-to-update components accumulate known exposure.
کارڈ 622
سوال
Why should remote administration use an encrypted, authenticated protocol?
جواب
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
کارڈ 623
سوال
How can revenge motivate an insider incident?
جواب
A disgruntled person may damage systems or disclose data to punish the organization.
کارڈ 624
سوال
What is a published or documented indicator of malicious activity?
جواب
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
کارڈ 625
سوال
Why monitor a system more closely when a mitigation exception is accepted?
جواب
Monitoring can reveal exploitation or control failure while the documented exception remains open.
کارڈ 626
سوال
What is an SNMP trap?
جواب
An unsolicited device notification sent to a management system when a configured event occurs.
کارڈ 627
سوال
How can an automated report support an investigation?
جواب
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
کارڈ 628
سوال
What is a security key?
جواب
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
کارڈ 629
سوال
What does database-level encryption protect?
جواب
A database or selected database structures through controls managed at the database layer.
کارڈ 630
سوال
How does brand impersonation exploit trust?
جواب
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
کارڈ 631
سوال
What browser-side impact can a cross-site scripting vulnerability create?
جواب
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
کارڈ 632
سوال
How can a system or process audit identify vulnerabilities?
جواب
It compares evidence with required configuration and procedure to reveal control gaps.
کارڈ 633
سوال
What security role can Group Policy provide?
جواب
Centralized Windows configuration of account, application, audit, and system security settings.
کارڈ 634
سوال
What should incident-response training prepare people to do?
جواب
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
کارڈ 635
سوال
Why must governance track local or regional requirements?
جواب
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
کارڈ 636
سوال
How can a dependency become a useful key risk indicator?
جواب
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
کارڈ 637
سوال
What is a business partners agreement?
جواب
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
کارڈ 638
سوال
What makes an audit regulatory?
جواب
It evaluates compliance with requirements established or enforced by a government or delegated authority.
کارڈ 639
سوال
What is a honeyfile?
جواب
A decoy file whose access can reveal unauthorized activity.
کارڈ 640
سوال
Why does legal information require explicit protection?
جواب
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
کارڈ 641
سوال
Which indicator can mass file renaming and encryption produce?
جواب
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
کارڈ 642
سوال
What remains with an organization after transferring architecture risk?
جواب
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
کارڈ 643
سوال
When does local console placement provide useful administrative access?
جواب
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
کارڈ 644
سوال
What makes a harmful user action unintentional?
جواب
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
کارڈ 645
سوال
How should an organization harden workstations?
جواب
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
کارڈ 646
سوال
What is journaling in recovery?
جواب
Recording ordered changes so data can be replayed or restored to a consistent point.
کارڈ 647
سوال
What downtime must a change plan account for?
جواب
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
کارڈ 648
سوال
Why must a privacy program map local or regional law to data flows?
جواب
The applicable duties can change with the location of the person, organization, processing, or stored data.
کارڈ 649
سوال
Why combine independent preventive controls at different layers?
جواب
A failure at one layer does not automatically let the same attack succeed at the next layer.
کارڈ 650
سوال
What is passwordless authentication?
جواب
A flow that does not require the user to enter a memorized password, often using public-key credentials.
کارڈ 651
سوال
How can automation improve security reaction time?
جواب
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
کارڈ 652
سوال
What does record-level encryption protect?
جواب
Individual records or fields, allowing finer protection than encrypting the entire database.
کارڈ 653
سوال
How can business email compromise misuse urgency?
جواب
It pressures an employee to bypass normal verification for a payment, credential, or data request.
کارڈ 654
سوال
What does impact measure in risk analysis?
جواب
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
کارڈ 655
سوال
What makes cyber activity part of warfare?
جواب
It supports military or state conflict objectives such as disruption, intelligence, or influence.
کارڈ 656
سوال
Which indicator can a newly created privileged account produce outside the normal change window?
جواب
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
کارڈ 657
سوال
How can configuration enforcement validate a deployed mitigation?
جواب
It compares the realized settings with the approved state and corrects or reports drift.
کارڈ 658
سوال
How does validating an alert improve alert tuning?
جواب
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
کارڈ 659
سوال
What data-layer impact can a SQL injection vulnerability create?
جواب
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
کارڈ 660
سوال
What environmental variables can change vulnerability priority?
جواب
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
کارڈ 661
سوال
What security role does SELinux provide?
جواب
Mandatory access controls that confine processes according to centrally defined policy.
کارڈ 662
سوال
Why review governance documents periodically?
جواب
Business, technology, threats, and external obligations change.
کارڈ 663
سوال
Why evaluate power requirements for a system design?
جواب
Power capacity and redundancy constrain availability and recovery.
کارڈ 664
سوال
When is IPsec a better tunnel choice than TLS?
جواب
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
کارڈ 665
سوال
What is a honeytoken?
جواب
A fake credential or data element that generates a high-confidence alert when used.
کارڈ 666
سوال
What should embedded-system hardening prioritize?
جواب
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
کارڈ 667
سوال
Why must sanitization address data remanence?
جواب
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
کارڈ 668
سوال
Why require rules of engagement for vendor testing?
جواب
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
کارڈ 669
سوال
What does a private data classification indicate?
جواب
The information concerns an individual or limited internal audience and should not be exposed publicly.
کارڈ 670
سوال
What does a tabletop recovery exercise test?
جواب
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
کارڈ 671
سوال
Why prevent password reuse?
جواب
One compromised password should not unlock other accounts or services.
کارڈ 672
سوال
Which malicious-activity indicator is unexplained sustained CPU or memory use?
جواب
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
کارڈ 673
سوال
What does transport encryption protect?
جواب
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
کارڈ 674
سوال
How can a voice call become an attack vector?
جواب
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
کارڈ 675
سوال
What should a digital-forensics report document?
جواب
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
کارڈ 676
سوال
What tradeoff comes with an expansionary risk appetite?
جواب
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
کارڈ 677
سوال
What does a known penetration-test environment provide?
جواب
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
کارڈ 678
سوال
Why evaluate compute requirements before deployment?
جواب
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
کارڈ 679
سوال
Why place sensors at network choke points?
جواب
They can observe traffic crossing important trust boundaries.
کارڈ 680
سوال
What should hybrid or remote-work security training emphasize?
جواب
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
کارڈ 681
سوال
Why plan an application restart separately from a service restart?
جواب
The application may need its own state handling, user coordination, health checks, and rollback point.
کارڈ 682
سوال
What is a cryptographic vulnerability?
جواب
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
کارڈ 683
سوال
Why report findings by asset owner?
جواب
Owners need clear accountability and a prioritized remediation queue.
کارڈ 684
سوال
What should guide selection of a secure protocol?
جواب
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
کارڈ 685
سوال
How do centralized and decentralized governance structures differ?
جواب
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
کارڈ 686
سوال
How does privacy-aware design limit data retention?
جواب
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
کارڈ 687
سوال
What does a pressure security sensor detect?
جواب
Force or weight applied to a protected surface, such as a floor mat or fence line.
کارڈ 688
سوال
What automation costs should a security team plan for?
جواب
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
کارڈ 689
سوال
What should RTOS hardening preserve while reducing attack surface?
جواب
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
کارڈ 690
سوال
What is the goal of disruption-for-chaos activity?
جواب
Create instability or damage itself rather than pursue a clear financial or intelligence return.
کارڈ 691
سوال
Which indicator can repeated password guessing produce?
جواب
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
کارڈ 692
سوال
How does removing unnecessary software harden a system?
جواب
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
کارڈ 693
سوال
What does NetFlow provide?
جواب
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
کارڈ 694
سوال
How can a dashboard support an investigation?
جواب
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
کارڈ 695
سوال
When should a password be expired?
جواب
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
کارڈ 696
سوال
Why does cryptographic key length matter?
جواب
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
کارڈ 697
سوال
How can an unsecure Bluetooth connection become an attack vector?
جواب
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
کارڈ 698
سوال
What is a key risk indicator?
جواب
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
کارڈ 699
سوال
What should vendor monitoring verify when a contract ends?
جواب
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
کارڈ 700
سوال
What does a sensitive data classification indicate?
جواب
The information needs safeguards because unauthorized access, change, or loss could cause harm.
کارڈ 701
سوال
What does software-defined networking separate?
جواب
The control plane that decides traffic behavior from the data plane that forwards traffic.
کارڈ 702
سوال
Where should a web application firewall be placed?
جواب
In the path of web requests before they reach the protected application.
کارڈ 703
سوال
What does a simulated recovery exercise test?
جواب
Participants perform realistic response actions in a controlled environment without disrupting production.
کارڈ 704
سوال
How can a team verify that a detective control is effective?
جواب
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
کارڈ 705
سوال
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
جواب
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
کارڈ 706
سوال
What makes a vulnerability cloud-specific?
جواب
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
کارڈ 707
سوال
How can insurance respond to vulnerability risk?
جواب
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
کارڈ 708
سوال
How does reputation improve web filtering?
جواب
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
کارڈ 709
سوال
What does an encryption policy establish?
جواب
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
کارڈ 710
سوال
How does a microwave security sensor detect movement?
جواب
It emits microwave energy and detects changes in the reflected signal caused by motion.
کارڈ 711
سوال
What should IoT-device hardening change before deployment?
جواب
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
کارڈ 712
سوال
Why track software licenses as assets?
جواب
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
کارڈ 713
سوال
What does a password manager improve?
جواب
It can generate and store unique long passwords so users do not memorize or reuse them.
کارڈ 714
سوال
What makes a ledger open and public?
جواب
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
کارڈ 715
سوال
What should a payment-change request trigger?
جواب
Independent verification through a known channel before any account or payment detail is changed.
کارڈ 716
سوال
What does preserving digital evidence require?
جواب
Protecting its integrity, context, access history, and availability from collection through final disposition.
کارڈ 717
سوال
What should a risk report tell decision-makers?
جواب
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
کارڈ 718
سوال
What should an external assessment report provide?
جواب
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
کارڈ 719
سوال
What is a centralized design's main resilience risk?
جواب
A central dependency can become a bottleneck or single point of failure.
کارڈ 720
سوال
What does mutual TLS add to a TLS-protected service connection?
جواب
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
کارڈ 721
سوال
What should recurring security-awareness reporting show?
جواب
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
کارڈ 722
سوال
Why do legacy applications require extra change planning?
جواب
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
کارڈ 723
سوال
How do a data controller and a data processor differ?
جواب
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
کارڈ 724
سوال
How can orchestration become a single point of failure?
جواب
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
کارڈ 725
سوال
Why should defenses account for a threat actor's sophistication and capability?
جواب
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
کارڈ 726
سوال
How does an injection attack make an application execute unintended instructions?
جواب
It sends crafted input that an interpreter treats as code or commands instead of data.
کارڈ 727
سوال
What does a host-based firewall control?
جواب
Inbound and outbound network traffic for one endpoint according to local rules.
کارڈ 728
سوال
Why revise alerting after an incident?
جواب
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
کارڈ 729
سوال
Why include security duties in procurement criteria?
جواب
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
کارڈ 730
سوال
What does a critical data classification indicate?
جواب
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
کارڈ 731
سوال
What infrastructure capacity must support failover?
جواب
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
کارڈ 732
سوال
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
جواب
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
کارڈ 733
سوال
How does a remediation exemption differ from an exception?
جواب
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
کارڈ 734
سوال
Why should automated EDR or XDR blocking have an exception and rollback path?
جواب
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
کارڈ 735
سوال
What does a security playbook provide?
جواب
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
کارڈ 736
سوال
How does an ultrasonic security sensor detect movement?
جواب
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
کارڈ 737
سوال
What should a managed mobile device require for Bluetooth connections?
جواب
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
کارڈ 738
سوال
How do password complexity rules differ from password length?
جواب
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
کارڈ 739
سوال
What makes a certificate third-party trusted?
جواب
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
کارڈ 740
سوال
Why is an out-of-band check effective against impersonation?
جواب
It verifies the request through a separate, previously trusted communication path.
کارڈ 741
سوال
What does a risk exception authorize?
جواب
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
کارڈ 742
سوال
What security challenge grows in a decentralized design?
جواب
Consistent policy, inventory, monitoring, and patching become harder.
کارڈ 743
سوال
How should controls be selected for an unused network path?
جواب
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
کارڈ 744
سوال
How can a buffer-overflow attack affect an application?
جواب
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 کارڈز
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
مطالعہ شروع کرنے کے لیے Nibomo کھلے گا۔