CompTIA SY0-701 問題集

質問 1：
The marketing department set up its own project management software without telling the appropriate departments. Which of the following describes this scenario?
A. Insider threat
B. Service disruption
C. Shadow IT
D. Data exfiltration
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A security administrator would like to protect data on employees' laptops. Which of the following encryption techniques should the security administrator use?
A. Partition
B. Database
C. Full disk
D. Asymmetric
正解：C

質問 3：
An organization is leveraging a VPN between its headquarters and a branch location. Which of the following is the VPN protecting?
A. Geographic restrictions
B. Data in transit
C. Data in use
D. Data sovereignty
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
After a security awareness training session, a user called the IT help desk and reported a suspicious call. The suspicious caller stated that the Chief Financial Officer wanted credit card information in order to close an invoice. Which of the following topics did the user recognize from the training?
A. Insider threat
B. Social engineering
C. Executive whaling
D. Email phishing
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Malware spread across a company's network after an employee visited a compromised industry blog. Which of the following best describes this type of attack?
A. Smishing
B. Impersonation
C. Disinformation
D. Watering-hole
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which of the following techniques is the attacker using?
A. Smishing
B. Impersonating
C. Disinformation
D. Whaling
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
After reviewing the following vulnerability scanning report:
Server:192.168.14.6
Service: Telnet
Port: 23 Protocol: TCP
Status: Open Severity: High
Vulnerability: Use of an insecure network protocol
A security analyst performs the following test:
nmap -p 23 192.168.14.6 --script telnet-encryption
PORT STATE SERVICE REASON
23/tcp open telnet syn-ack
telnet encryption: Telnet server supports encryption
Which of the following would the security analyst conclude for this reported vulnerability?
A. It is a false positive.
B. A rescan is required.
C. Compensating controls exist.
D. It is considered noise.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?
A. Logging controls should fail open.
B. Logical security controls should fail closed.
C. Safety controls should fail open.
D. Remote access points should fail closed.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
An organization is building a single virtual environment that will host customer applications and data that require availability at all times. The data center that is hosting the environment will provide generator power and ISP services. Which of the following is the best solution to support the organization's requirement?
A. Cloud backups
B. A load balancer appliance
C. NIC teaming
D. UPS
正解：D
解説: (Topexam メンバーにのみ表示されます)