CompTIA SY0-701 問題集

質問 1：
Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?
A. Logging controls should fail open.
B. Logical security controls should fail closed.
C. Safety controls should fail open.
D. Remote access points should fail closed.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A network team segmented a critical, end-of-life server to a VLAN that can only be reached by specific devices but cannot be reached by the perimeter network. Which of the following best describe the controls the team implemented? (Choose two.)
A. Compensating
B. Managerial
C. Technical
D. Physical
E. Detective
F. Corrective
G. Deterrent
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Client files can only be accessed by employees who need to know the information and have specified roles in the company. Which of the following best describes this security concept?
A. Integrity
B. Availability
C. Non-repudiation
D. Confidentiality
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIRT found that the recruiter was able to use HTTP over port 53 to upload documents to a web server. Which of the following security infrastructure devices could have identified and blocked this activity?
A. NGFW utilizing application inspection
B. SD-WAN utilizing IPSec
C. UTM utilizing a threat feed
D. WAF utilizing SSL decryption
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An organization is struggling with scaling issues on its VPN concentrator and internet circuit due to remote work. The organization is looking for a software solution that will allow it to reduce traffic on the VPN and internet circuit, while still providing encrypted tunnel access to the data center and monitoring of remote employee internet traffic. Which of the following will help achieve these objectives?
A. Using a cloud provider to create additional VPN concentrators
B. Building a load-balanced VPN solution with redundant internet
C. Deploying a SASE solution to remote employees
D. Purchasing a low-cost SD-WAN solution for VPN traffic
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?
A. Hacktivist
B. Organized crime
C. Whistleblower
D. Unskilled attacker
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than the impact of the risk?
A. SLE
B. ARO
C. ALE
D. RTO
E. RPO
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which of the following is a common, passive reconnaissance technique employed by penetration testers in the early phases of an engagement?
A. Open-source intelligence
B. Port scanning
C. Pivoting
D. Exploit validation
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Which of the following security measures is required when using a cloud-based platform for IoT management?
A. Firewall
B. Federated identity
C. Single sign-on
D. Encrypted connection
正解：D
解説: (Topexam メンバーにのみ表示されます)