A company is designing a new system to store sensitive customer data. The security team is concerned about the risk of cryptographic attacks, including brute force and cryptanalysis. They are considering using AES-256 encryption. Which additional practice would best mitigate the risk of a successful cryptographic attack?

Use the same key for all customer records to simplify management

Use a shorter key length to reduce processing overhead

Store encryption keys in the same database as the encrypted data

Use a unique encryption key for each customer record

A company has a policy that requires passwords to be at least 12 characters and include uppercase, lowercase, numbers, and special characters. However, users are still falling victim to phishing attacks that steal their passwords. Which additional control would be most effective?

Increase password length to 16 characters

Require password changes every 30 days

Implement multi-factor authentication (MFA)

A company wants to reduce the risk of credential stuffing attacks against its customer-facing web application. The application currently uses only username and password authentication. Which control would be most effective to implement?

Require multi-factor authentication (MFA)

Implement account lockout after 3 failed attempts

Increase password length requirement

Use a CAPTCHA on the login form

CompTIASecurity+

Domain 2Objective 4

Malicious Activity SY0-701 Practice Questions (Page 5)

Part of the Threats, vulnerabilities, and mitigations domain, which accounts for 22% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

12concepts

22%of the exam

Questions 21–25

21expert · medium
A company is designing a new system to store sensitive customer data. The security team is concerned about the risk of cryptographic attacks, including brute force and cryptanalysis. They are considering using AES-256 encryption. Which additional practice would best mitigate the risk of a successful cryptographic attack?
Select an answer first
22application · medium
A company has a policy that requires passwords to be at least 12 characters and include uppercase, lowercase, numbers, and special characters. However, users are still falling victim to phishing attacks that steal their passwords. Which additional control would be most effective?
Select an answer first
23foundation · easy
Which cryptographic attack involves trying every possible key until the correct one is found?
Select an answer first
24foundation · easy
Which secure coding practice is most effective at preventing SQL injection attacks?
Select an answer first
25application · medium
A company wants to reduce the risk of credential stuffing attacks against its customer-facing web application. The application currently uses only username and password authentication. Which control would be most effective to implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Malicious Activity SY0-701 Practice Questions (Page 5)

Questions 21–25

A company has a policy that requires passwords to be at least 12 characters and include uppercase, lowercase, numbers, and special characters. However, users are still falling victim to phishing attacks that steal their passwords. Which additional control would be most effective?

Which cryptographic attack involves trying every possible key until the correct one is found?

Which secure coding practice is most effective at preventing SQL injection attacks?

A company wants to reduce the risk of credential stuffing attacks against its customer-facing web application. The application currently uses only username and password authentication. Which control would be most effective to implement?

Keep studying — Threats, vulnerabilities, and mitigations