An employee's smartphone is lost. The device is protected by a screen lock, but the company's MDM policy does not enforce encryption. The device contains a work email app that caches messages locally. Which of the following is the MOST significant risk?

Unauthorized access to cached email data if the device is compromised

Malware infection from a malicious app

Man-in-the-middle attack on the cellular network

CompTIASecurity+

Domain 2Objective 3

Vulnerabilities SY0-701 Practice Questions (Page 6)

Part of the Threats, vulnerabilities, and mitigations domain, which accounts for 22% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

22%of the exam

Questions 26–30

26foundation · easy
An organization purchases network equipment from a supplier, but the equipment contains unauthorized modifications that could allow remote control. Which type of supply chain vulnerability is this?
Select an answer first
27foundation · easy
A developer exposes a cloud service's management interface without proper authentication, allowing attackers to control resources. Which cloud-specific vulnerability is this?
Select an answer first
28foundation · easy
An attacker gains access to a mobile device by exploiting a flaw in the device's lock screen. Once unlocked, the attacker can access apps and data. Which mobile device vulnerability is being exploited?
Select an answer first
29application · medium
An employee's smartphone is lost. The device is protected by a screen lock, but the company's MDM policy does not enforce encryption. The device contains a work email app that caches messages locally. Which of the following is the MOST significant risk?
Select an answer first
30foundation · easy
A company uses a third-party software library that contains a hidden backdoor, allowing attackers to access the company's systems. Which type of supply chain vulnerability is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Vulnerabilities SY0-701 Practice Questions (Page 6)

Questions 26–30

An organization purchases network equipment from a supplier, but the equipment contains unauthorized modifications that could allow remote control. Which type of supply chain vulnerability is this?

A developer exposes a cloud service's management interface without proper authentication, allowing attackers to control resources. Which cloud-specific vulnerability is this?

An attacker gains access to a mobile device by exploiting a flaw in the device's lock screen. Once unlocked, the attacker can access apps and data. Which mobile device vulnerability is being exploited?

An employee's smartphone is lost. The device is protected by a screen lock, but the company's MDM policy does not enforce encryption. The device contains a work email app that caches messages locally. Which of the following is the MOST significant risk?

A company uses a third-party software library that contains a hidden backdoor, allowing attackers to access the company's systems. Which type of supply chain vulnerability is this?

Keep studying — Threats, vulnerabilities, and mitigations