Malicious Activity SY0-701 Practice Questions (Page 6)

Part of the Threats, vulnerabilities, and mitigations domain, which accounts for 22% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

12concepts

22%of the exam

Questions 26–30

26application · medium
A company wants to prevent shoulder surfing at its help desk workstations. Which control would be most effective?
Select an answer first
27foundation · easy
An attacker uses a list of common passwords and words from a dictionary to attempt to log into user accounts. Which password attack method is being used?
Select an answer first
28application · medium
A security analyst discovers a file on a user's workstation that, when executed, encrypts the user's documents and displays a ransom note. The analyst also notices that the file was delivered as an email attachment and, upon execution, it copied itself to network shares. Which type of malware is this?
Select an answer first
29foundation · easy
Which cryptographic attack exploits the mathematical probability that two different inputs will produce the same hash value?
Select an answer first
30application · medium
An attacker stands behind an employee at an ATM and watches the employee enter their PIN. The attacker later uses the stolen PIN to access the employee's bank account. Which type of physical attack is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Malicious Activity SY0-701 Practice Questions (Page 6)

Questions 26–30

A company wants to prevent shoulder surfing at its help desk workstations. Which control would be most effective?

An attacker uses a list of common passwords and words from a dictionary to attempt to log into user accounts. Which password attack method is being used?

Which cryptographic attack exploits the mathematical probability that two different inputs will produce the same hash value?

An attacker stands behind an employee at an ATM and watches the employee enter their PIN. The attacker later uses the stolen PIN to access the employee's bank account. Which type of physical attack is this?

Keep studying — Threats, vulnerabilities, and mitigations