CompTIA Security+ Certification Exam SY0-701 Practice Test 2

Which of the following terms describes the process of identifying differences between an organization's current security posture and its desired security posture?

• Tabletop exercise

• Gap analysis

• Security awareness training

• Risk assessment

The term 'Zero Trust security' refers to a cybersecurity model that eliminates implicit trust from networks and requires all users and devices to be continuously verified before being granted access to resources. The implementation of the Zero Trust security involves two distinct components: a Data Plane, responsible for defining and managing security policies, and a Control Plane, responsible for enforcing the security policies established by the Data Plane.

• True

• False

Which of the answers listed below refers to a Zero Trust Control Plane security approach that takes into account user identity, device security, network conditions, and other contextual information to enable dynamic access decisions?

• Implicit trust

• Monitoring and logging

• Adaptive identity

• Microsegmentation

What are the key components of the Zero Trust Control Plane's Policy Decision Point (PDP)? (Select 2 answers)

• Policy Engine (PE)

• Monitoring and logging

• Policy Enforcement Point (PEP)

• Microsegmentation

• Policy Administrator (PA)

In the Zero Trust security architecture, the Policy Enforcement Point (PEP) is a Data Plane component that enforces the security policies defined at the Control Plane by the Policy Decision Point (PDP).

• True

• False

An access control vestibule (a.k.a. mantrap) is a physical security access control system used to prevent unauthorized users from gaining access to restricted areas. An example mantrap could be a two-door entrance point connected to a guard station wherein a person entering from the outside remains locked inside until he/she provides authentication token required to unlock the inner door.

• True

• False

Which of the following statements about honeypots are true? (Select 2 answers)

• Honeypots are always part of a honeynet

• Honeypots mimic real systems to attract cyber attackers

• Honeypots are a type of anti-malware solution

• Honeypots contain apparent vulnerabilities that are closely monitored by a security team

• Honeypots are used to launch attacks on cyber attackers

What is a honeynet in the context of cybersecurity?

• A network of IDSs

• A network of honeypots

• A network of infected hosts

• A network of IPSs

Which of the answers listed below refers to a honeynet example?

• A network of fake websites

• A network of fake servers

• A network of fake databases

• A network of fake file shares

• All of the above

A honeyfile can be any type of file (e.g., a document, email message, image, or video file) containing real user data intentionally placed within a network or system to attract potential attackers or unauthorized users.

• True

• False