Reliable CompTIA Security+ SY0-701 Dumps PDF Sep 24, 2025 Recently Updated Questions [Q169-Q192]

NO.169 An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period. Which of the following data policies is the administrator carrying out?

NO.170 Malware spread across a company’s network after an employee visited a compromised industry blog. Which of the following best describes this type of attack?

NO.171 A city municipality lost its primary data center when a tornado hit the facility. Which of the following should the city staff use immediately after the disaster to handle essential public services?

NO.172 The Chief Information Security Officer wants to put security measures in place to protect PlI. The organization needs to use its existing labeling and classification system to accomplish this goal. Which of the following would most likely be configured to meet the requirements?

NO.173 Which of the following threat actors is the most likely to use large financial resources to attack critical systems located in other countries?

NO.174 A new vulnerability enables a type of malware that allows the unauthorized movement of data from a system. Which of the following would detect this behavior?

NO.175 A systems administrator set up a perimeter firewall but continues to notice suspicious connections between internal endpoints. Which of the following should be set up in order to mitigate the threat posed by the suspicious activity?

NO.176 A security administrator observed the following in a web server log while investigating an incident:
Which of the following attacks did the security administrator most likely see?

NO.177 Which of the following activities are associated with vulnerability management? (Select two).

NO.178 The application development teams have been asked to answer the following questions:
– Does this application receive patches from an external source?
– Does this application contain open-source code?
– is this application accessible by external users?
– Does this application meet the corporate password standard?
Which of the following are these questions port of?

NO.179 A security administrator would like to protect data on employees’ laptops. Which of the following encryption techniques should the security administrator use?

NO.180 Which of the following types of vulnerabilities is primarily caused by improper use and management of cryptographic certificates?

NO.181 Which of the following is the best resource to consult for information on the most common application exploitation methods?

NO.182 A technician needs to apply a high-priority patch to a production system. Which of the following steps should be taken first?

NO.183 A company is discarding a classified storage array and hires an outside vendor to complete the disposal.
Which of the following should the company request from the vendor?

NO.184 The security operations center is researching an event concerning a suspicious IP address A security analyst looks at the following event logs and discovers that a significant portion of the user accounts have experienced faded log-In attempts when authenticating from the same IP address:

Which of the following most likely describes attack that took place?

NO.185 Which of the following tools can assist with detecting an employee who has accidentally emailed a file containing a customer’s PII?

NO.186 Which of the following risk management strategies should an enterprise adopt first if a legacy application is critical to business operations and there are preventative controls that are not yet implemented?

NO.187 An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to email these files outside of the organization. Which of the following best describes the tool the administrator is using?

NO.188 The internal audit team determines a software application is no longer in scope for external reporting requirements. Which of the following will confirm management’s perspective that the application is no longer applicable?

NO.189 A systems administrator is reviewing the VPN logs and notices that during non-working hours a user is accessing the company file server and information is being transferred to a suspicious IP address. Which of the following threats is most likely occurring?

NO.190 A security engineer at a large company needs to enhance IAM to ensure that employees can only access corporate systems during their shifts. Which of the following access controls should the security engineer implement?

NO.191 Which of the following would a security administrator use to comply with a secure baseline during a patch update?

NO.192 Which of the following best describe the benefits of a microservices architecture when compared to a monolithic architecture? (Select two).