CompTIA Security+ Certification Exam SY0-701 Practice Test 8

Question 1

Which of the answers listed below refers to a security vulnerability that enables inserting malicious code into input fields, such as search bars or login forms, to execute unauthorized commands on a database?

A) RCE
B) SQLi
C) XSS
D) CSRF

Answer 1

B) SQLi

Question 2

Which of the following indicates an SQL injection attack attempt?

A) DELETE FROM itemDB WHERE itemID = ‘1’;

B) SELECT * FROM users WHERE userName = ‘Alice’ AND password = ‘’ OR ‘1’ = ‘1’;

C) DROP TABLE itemDB;

D) SELECT * FROM users WHERE email = ‘example@example.com’ AND password = ‘’;

Answer 2

B) SELECT * FROM users WHERE userName = ‘Alice’ AND password = ‘’ OR ‘1’ = ‘1’;

Question 3

Which of the answers listed below describe the characteristics of a cross-site scripting attack? (Select 3 answers)

A) Exploits the trust a user’s web browser has in a website

B) A malicious script is injected into a trusted website

C) User’s browser executes attacker’s script

D) Exploits the trust a website has in the user’s web browser

E) A user is tricked by an attacker into submitting unauthorized web requests

F) Website executes attacker’s requests

Answer 3

A) Exploits the trust a user’s web browser has in a website

B) A malicious script is injected into a trusted website

C) User’s browser executes attacker’s script

Question 4

Which of the following answers refers to a type of software embedded into a hardware chip?

A) Firmware
B) Middleware
Device driver
Machine code

Answer 4

A) Firmware

Question 5

Which of the terms listed below refers to a situation in which a product or service may no longer receive security patches or other updates, making it more vulnerable to attack?

A) EOL
B) ALM
C) EOS
D) SDLC

Answer 5

A) EOL

Question 6

What is the main vulnerability related to legacy hardware?

A) Compatibility issues
B) Lack of security updates and patches
C) Worn-out physical components
D) Lack of skilled personnel to run it and maintain it

Answer 6

B) Lack of security updates and patches

Question 7

The term “VM escape” refers to the process of breaking out of the boundaries of a guest operating system installation to access the primary hypervisor controlling all the virtual machines on the host machine.

A) True

B) False

Answer 7

A) True

Question 8

Which of the following answers refers to a virtualization-related vulnerability where virtualized assets allocated to one VM are improperly isolated and can be accessed or compromised by another VM?

A) Resource reuse
B) Privilege escalation
C) Resource exhaustion
D) Concurrent session usage

Answer 8

A) Resource reuse

Question 9

Which of the answers listed below refers to a cloud-related vulnerability type?

A) Insecure APIs
B) Poor access controls
C) Lack of security updates
D) Misconfigured cloud storage
E) Shadow IT / Malicious insiders
F) All of the above

Answer 9

F) All of the above

Question 10

The practice of installing mobile apps from websites and app stores other than the official marketplaces is referred to as:

A) Jailbreaking
B) Rooting
C) Sideloading
D) Carrier unlocking

Answer 10

C) Sideloading

Question 11

Which of the following terms is used to describe the process of removing software restrictions imposed by Apple on its iOS operating system?

A) Sideloading
B) Carrier unlocking
C) Rooting
D) Jailbreaking

Answer 11

D) Jailbreaking

Question 12

The term “Rooting” refers to the capability of gaining administrative access to the operating system and system applications on:

A) Android devices
B) iOS devices
C) Microsoft devices
D) All types of mobile devices

Answer 12

A) Android devices

Question 13

A type of attack aimed at exploiting vulnerability that is present in already released software but unknown to the software developer is known as:

A) On-path attack
B) IV attack
C) Zero-day attack
D) Replay attack

Answer 13

C) Zero-day attack

Question 14

Malware that restricts access to a computer system by encrypting files or locking the entire system down until the user performs requested action is called:

A) Grayware
B) Adware
C) Ransomware
D) Spyware

Answer 14

C) Ransomware

Question 15

A Trojan horse is a type of software that performs harmful actions under the guise of a legitimate and useful program. The most characteristic feature of Trojan horse is that while it may function as a legitimate program and possess all the expected functionalities, it also contains a concealed portion of malicious code that the user is unaware of.

A) True

B) False

Answer 15

A) True

Question 16

Which type of Trojan enables unauthorized remote access to a compromised system?

A) APT
B) RAT
C) MaaS
D) PUP

Answer 16

B) RAT

Question 17

A standalone malicious computer program that typically propagates itself over a computer network to adversely affect system resources and network bandwidth is referred to as:

A) Worm
B) Fileless virus
C) Bot
D) Logic bomb

Answer 17

A) Worm

Question 18

Malicious software collecting information about users without their knowledge/consent is known as:

A) Cryptomalware
B) Adware
C) Ransomware
D) Spyware

Answer 18

D) Spyware

Question 19

Which of the answers listed below refer to the characteristic features of bloatware? (Select 3 answers)

A) Pre-installed on a device by the device manufacturer or retailer

B) Generally considered undesirable due to negative impact on system performance

C) Installed without user consent

D) Can be pre-installed, downloaded, or bundled with other software

E) Generally considered undesirable due to negative impact on system performance, privacy, and security

Answer 19

A) Pre-installed on a device by the device manufacturer or retailer

B) Generally considered undesirable due to negative impact on system performance

C) Installed without user consent

Question 20

Which of the following answers refer to the characteristics of a PUP? (Select 3 answers)

A) Often installed without clear user consent

B) Can be pre-installed, downloaded, or bundled with other software

C) Generally considered undesirable due to negative impact on system performance, privacy, and security

D) Pre-installed on a device by the device manufacturer or retailer

E) Generally considered undesirable due to negative impact on system performance

Answer 20

A) Often installed without clear user consent

B) Can be pre-installed, downloaded, or bundled with other software

C) Generally considered undesirable due to negative impact on system performance, privacy, and security

Question 21

Which of the statements listed below apply to the definition of a computer virus? (Select 3 answers)

A) A self-replicating computer program containing malicious segment

B) Malware that typically requires its host application to be run to make the virus active

C) A standalone malicious computer program that replicates itself over a computer network

D) Malware that can run by itself without any interaction

E) Malicious code that typically attaches itself to an application program or other executable component

F) A self-contained malicious program or code that does need a host to propagate itself

Answer 21

A) A self-replicating computer program containing malicious segment

B) Malware that typically requires its host application to be run to make the virus active

E) Malicious code that typically attaches itself to an application program or other executable component

Question 22

Which of the following is an example of spyware?

A) Keylogger
B) Vulnerability scanner
C) Computer worm
D) Packet sniffer

Answer 22

A) Keylogger

Question 23

Malicious code activated by a specific event is called:

A) Cryptomalware
B) Backdoor
C) Rootkit
D) Logic bomb

Answer 23

D) Logic bomb

Question 24

Which of the following answers refers to a collection of software tools used by a hacker to mask intrusion and obtain administrator-level access to a computer or computer network?

A) Rootkit
B) Spyware
C) Backdoor
D) Trojan

Answer 24

A) Rootkit

Question 25

The term “RFID cloning” refers to copying the data stored on any RFID-enabled device (including tags, cards, key fobs, implants, and other objects embedded with RFID technology) onto another RFID-enabled device, which then can be read and used in the same way as the original tag. While RFID cloning can be utilized for legitimate purposes, such as replicating important tags for backup and testing purposes, it also poses significant security risk, as duplicate tags can potentially be used for gaining unauthorized access or unauthorized information disclosure.

A) True

B) False

Answer 25

A) True