CompTIA Security+ (SY0-701) Practice Exam
1. A security analyst is conducting a penetration test and has gained access to a
system. They want to maintain access for further exploration. Which of the
following actio
...
CompTIA Security+ (SY0-701) Practice Exam
1. A security analyst is conducting a penetration test and has gained access to a
system. They want to maintain access for further exploration. Which of the
following actions BEST represents this phase?
a) Scanning
b) Gaining access
c) Privilege escalation
d) Persistence
Answer: d) Persistence
Persistence involves creating backdoors or other methods to ensure continued access to a
compromised system, even after a reboot or password change. This is a key phase after
initial exploitation.
2. A company wants to ensure that even if a user's password is compromised, an
attacker cannot access the corporate VPN without a second form of verification.
Which of the following is the BEST solution?
a) Single sign-on (SSO)
b) Mandatory Access Control (MAC)
c) Multifactor authentication (MFA)
d) Role-based access control (RBAC)
Answer: c) Multifactor authentication (MFA)
MFA requires two or more verification factors (e.g., password and a push notification to a
phone), significantly reducing the risk of account takeover even if one factor is
compromised.
3. An organization experiences a widespread ransomware attack that encrypts
critical servers. The incident response team restores the servers from backups.
Which of the following phases of the incident response process are they currently
in?
[Show More]
