Question Q-6006 An organization discovers that a former employee's account was used…
2 comments · last active May 15, 2026
CompTIA Security+ SY0-701 - Domains 1 and 2 Threats Attacks Cryptography
By Jordan Blake · Updated May 25, 2026
| Questions | 25 |
| Passing Score | 75% |
| Format | 100% Multiple Choice |
| Sessions Logged | 758 |
| Your progress | Log in / Register to track times taken, best score, questions mastered, and coverage on this quiz. |
| Rating |
Topics covered
Uncategorized25 questions
Discussion
Log in to post a comment, reply, or expand a question.
Certificate pinning / HSTS / proper TLS chain — know what fixes MitM vs what just encrypts after the fact.
PKI questions in this set tie back to domain 1 crypto objectives. Root vs intermediate CA path matters.
Parameterized queries > encoding alone. Encoding can break; prepared statements keep data out of the SQL parser.
WAF is compensating control. Dev answer is always fix the code — OWASP Top 10 drills this.
I almost picked input encoding because it 'sounds' secure. Read the architect vs developer framing.
Smart card + PIN = something you have + something you know. Two passwords is NOT MFA (same factor).
Physical access control question but same principle as 2FA on apps. CompTIA loves the factor-type trap.
NYC then Tokyo 15 min later = impossible travel IOC. VPN split tunnel doesn't explain concurrent geo logins.
+2 votesSIEM correlation rules flag this constantly. First step: force password reset + revoke sessions.
Hashing is one-way; encryption is reversible. Password storage = salted hash (bcrypt/Argon2), not AES on passwords.
MD5/SHA-1 for passwords is dead. Exam still tests why collisions matter for integrity checks.
Isolated network that isn't isolated + CVSS 9.8 unpatched for 3 years = defense in depth failure. Not a zero-day.
Jump server misconfig is the segmentation failure. Patch mgmt is the other half — both have to fail for the story.
PowerShell pulling from C2 is Execution + Command and Control — not Initial Access. They already own the box.
+2 votesATT&CK tactic questions love splitting hairs. I map 'run code' → Execution, 'talk to C2' → C2 every time now.
Spear-phish to the CFO with vendor-themed lures = targeted recon. That's APT behavior, not script kiddie spray-and-pray.
OSINT on LinkedIn + invoice templates is scary common. Exam wants you to pick sophistication over volume.
Social engineering pretexting: attacker fabricates a scenario. Vishing is phone; this one read like targeted email + urgency.
User awareness training is the control, but exam answer is usually identify the attack type first.
Question catalog for this preview
Catalog listing of the 5 preview questions for this quiz.
Question 1
A company uses TLS 1.3 to encrypt web traffic. Which of the following BEST describes the purpose of TLS in this context?
Explanation
TLS (Transport Layer Security) provides: 1) Encryption of data in transit (confidentiality), 2) Server authentication via certificates (integrity/authenticity), 3) Optional mutual authentication (client + server certificates). TLS 1.3 is the current standard, removing support for weak ciphers.
Question 2
A company is moving to a zero-trust architecture. An employee on the internal network requests access to a sensitive database. Under zero trust, what must happen before access is granted?
Explanation
Zero trust rejects the "trust but verify" model. Under zero trust: 1) Verify explicitly (authenticate identity every request), 2) Use least privilege access (just enough access, just in time), 3) Assume breach (monitor and log everything). Location on internal network grants no inherent trust.
Question 3
During a penetration test, a tester exploits a vulnerability that was publicly disclosed 3 years ago with a CVSS score of 9.8. The system was not patched because it was "on an isolated network." The tester reached it via a misconfigured jump server. What vulnerability management failure does this represent?
Explanation
This represents multiple security failures: 1) An unpatched, publicly-known critical vulnerability (CVSS 9.8) — patch management failure, and 2) A network assumed isolated that was reachable via a misconfigured jump server — defense in depth/network segmentation failure.
Question 4
A company is concerned about sensitive data being exfiltrated through DNS queries. An attacker could encode stolen data in DNS lookup requests. What is this technique called?
Explanation
DNS tunneling encodes data (malware commands, exfiltrated files) within DNS query and response packets to communicate covertly. DNS traffic is often allowed through firewalls without deep inspection, making it a common C2 and data exfiltration channel.
Question 5
A security analyst is reviewing a web server and finds that the server responds to HTTP OPTIONS requests, revealing supported methods including PUT and DELETE. What is the security risk?
Explanation
Exposing HTTP methods like PUT (upload files) and DELETE (delete files) via the OPTIONS method reveals attack vectors. If the server doesn't properly restrict these methods, attackers can upload malicious files or delete web content. HTTP methods should be restricted to only what's needed.
AES-256 brute force is infeasible with current compute — key space is the answer, not 'encryption is magic'.
Know symmetric vs asymmetric tradeoffs for domain 1. Speed vs key distribution shows up again in crypto domain quizzes.