CompTIASecurity+
Domain 2Objective 4
Malicious Activity SY0-701 Practice Questions (Page 8)
Part of the Threats, vulnerabilities, and mitigations domain, which accounts for 22% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)
41questions here
9free pages
12concepts
22%of the exam
Questions 36–40
- 36
A developer is writing code for a login form. The code takes the username and password and concatenates them directly into a SQL query. To prevent SQL injection, which practice should the developer use?
Select an answer first - 37
An analyst runs a suspicious executable in a virtual machine with network monitoring to observe its behavior. Which malware analysis technique is being used?
Select an answer first - 38
Which physical attack method involves an attacker manipulating people into divulging confidential information or performing actions that compromise security?
Select an answer first - 39
An attacker injects a malicious script into a web form that executes in the browsers of other users. Which type of attack is this?
Select an answer first - 40
A network administrator notices that the company's web server is receiving an overwhelming number of TCP SYN packets from many different source IP addresses, but the server never completes the handshake. The server's resources are exhausted, and legitimate users cannot access the website. Which type of network attack is this?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.