Simulado SY0-701: CompTIA CompTIA Security+ Certification Exam

Explanation: Correct answer: C. Subject According to the CompTIA Security+ SY0-701 Certification Study Guide, data subjects are the individuals whose personal data is collected, processed, or stored by an organization. Data subjects have certain rights and expectations regarding how their data is handled, such as the right to access, correct, delete, or restrict their data. Data subjects are different from data owners, who are the individuals or entities that have the authority and responsibility to determine how data is classified, protected, and used. Data subjects are also different from data processors, who are the individuals or entities that perform operations on data on behalf of the data owner, such as collecting, modifying, storing, or transmitting data. Data subjects are also different from data custodians, who are the individuals or entities that implement the security controls and procedures specified by the data owner to protect data while in transit and at rest. ReferenceCompTIA Security+ SY0-701 Certification Study Guide, Chapter 2: Data Security, page 511

Explanation: Correct answer: B. Deploy an authentication factor that requires ln-person action before printing. To mitigate the risk of confidential documents being left unattended in Multi-Function Printers (MFPs), implementing an authentication factor that requires in-person action before printing (such as PIN codes or badge scanning) is the most effective measure. This ensures that documents are only printed when the authorized user is present to collect them, reducing the risk of sensitive information being exposed. Reference = CompTIA Security+ SY0-701 study materials, particularly in the domain of physical security and access control.

Explanation: Correct answer: D. MOA Detailed A Memorandum of Agreement (MOA) outlines terms of cooperation, including restrictions on sharing intellectual property. A breach indicates the terms of the agreement were violated, compromising confidentiality or usage terms. Reference: CompTIASecurity+ SY0-701 Study Guide, Domain 5: Security Program Management, Section: 'Third-Party Risk Management'.

Explanation: Correct answer: A. Implement access controls and encryption. The first step to ensure compliance with privacy regulations is conducting a data inventory and classification because: Foundation:Organizations must understand what data they have, where it resides, and how it's used before G implementing privacy controls Regulatory Requirement:Privacy regulations require organizations to know what personal/sensitive data G they process and store Risk Assessment:Proper classification allows identification of high-risk data requiring enhanced protection G Control Prioritization:Once data is classified, appropriate security measures can be designed and G implemented Compliance Roadmap:The inventory forms the basis for all subsequent privacy compliance activities G Without understanding what sensitive data exists and where it's stored, an organization cannot effectively comply with privacy regulations or implement appropriate protective measures.

Explanation: Correct answer: D. Technical An EDR (Endpoint Detection and Response) solution belongs to the Detection and Responsesecurity category. EDR tools monitor endpoints for suspicious activity, detect threats in real-time, and provide response capabilities to contain and remediate incidents. While EDR contributes to overall defense strategy, it is fundamentally focused on detecting compromises and enabling rapid response, distinguishing it from prevention-only tools.

Explanation: Correct answer: D. SQLi Poor input validation in databases typically leads to SQL Injection (SQLi) vulnerabilities, where attackers manipulate input fields to execute arbitrary SQL commands and gain unauthorized data access or control. XSS (A) affects web applications' output rendering, command injection (B) affects OS commands, and buffer overflow (C) affects memory management, so they don't directly relate to database input validation. SQLi is a critical vulnerability extensively covered in the Application Security domain6:Chapter 6CompTIA Security+ Study Guide.

Explanation: Correct answer: D. Version control tool A version control tool, such as Git, is specifically designed to track changes in code, configuration scripts, IaC templates, and deployment files. In the context of creating new virtual servers---often built using Infrastructure as Code (IaC) or automated orchestration---version control allows teams to maintain historical records, compare changes, revert mistakes, ensure code integrity, and enable collaborative development. Security+ SY0-701 emphasizes the use of version control in secure development practices to ensure traceability, accountability, and change visibility. It supports secure DevOps workflows by ensuring that no unauthorized or insecure code modifications are introduced into production environments. A change management ticketing system (A) documents approval requests but does not track code-level modifications. A behavioral analyzer (B) evaluates anomalous behavior, not code changes. A collaboration platform (C) enables communication but lacks code versioning capability. Therefore, the most appropriate tool is D: Version control tool.

Explanation: Correct answer: B. Providing an alternative security measure when standard remediation is not feasible The best answer is B. Providing an alternative security measure when standard remediation is not feasible. A compensating control is a substitute safeguard used when the preferred or required control cannot be implemented immediately or at all. It helps reduce risk in another way until proper remediation is possible, or when direct remediation is impractical. Examples include: increasing monitoring when a system cannot be patched segmenting a legacy application that cannot be upgraded restricting access to a vulnerable system that must remain in service

Explanation: Correct answer: A. SSO SSO stands forsingle sign-on, which is a method of authentication that allows users to access multiple applications or services with one set of credentials. SSO reduces the number of credentials employees need to maintain and simplifies the login process. SSO can also improve security by reducing the risk of password reuse, phishing, and credential theft. SSO can be implemented using various protocols, such as SAML, OAuth, OpenID Connect, and Kerberos, that enable the exchange of authentication information between different domains or systems.SSO is commonly used for accessing SaaS applications, such as Office 365, Google Workspace, Salesforce, and others, using domain credentials123. B. LEAP stands forLightweight Extensible Authentication Protocol, which is a Cisco proprietary protocol that provides authentication for wireless networks.LEAP is not related to SaaS applications or domain credentials4. C. MFA stands formulti-factor authentication, which is a method of authentication that requires users to provide two or more pieces of evidence to prove their identity. MFA can enhance security by adding an extra layer of protection beyond passwords, such as tokens, biometrics, or codes. MFA is not related to SaaS applications or domain credentials, but it can be used in conjunction with SSO. D. PEAP stands forProtected Extensible Authentication Protocol, which is a protocol that provides secure authentication for wireless networks. PEAP uses TLS to create an encrypted tunnel between the client and the server, and then uses another authentication method, such as MS-CHAPv2 or EAP-GTC, to verify the user's identity. PEAP is not related to SaaS applications or domain credentials. Reference=1:Security+ (SY0-701) Certification Study Guide | CompTIA IT Certifications2: What is Single Sign- On (SSO)?- Definition from WhatIs.com3: Single sign-on - Wikipedia4: Lightweight Extensible Authentication Protocol - Wikipedia: What is Multi-Factor Authentication (MFA)? - Definition from WhatIs.com: Protected Extensible Authentication Protocol - Wikipedia

Explanation: Correct answer: C. Watering-hole A watering-hole attack is a type of cyberattack that targets groups of users by infecting websites that they commonly visit. The attackers exploit vulnerabilities to deliver a malicious payload to the organization's network. The attack aims to infect users' computers and gain access to a connected corporate network. The attackers target websites known to be popular among members of a particular organization or demographic.The attack differs from phishing and spear-phishing attacks, which typically attempt to steal data or install malware onto users' devices1 In this scenario, the compromised industry blog is the watering hole that the attackers used to spread malware across the company's network. The attackers likely chose this blog because they knew that the employees of the company were interested in its content and visited it frequently. The attackers may have injected malicious code into the blog or redirected the visitors to a spoofed website that hosted the malware. The malware then infected the employees' computers and propagated to the network. Reference1:Watering Hole Attacks: Stages, Examples, Risk Factors & Defense...