Free Access to CompTIA.SY0-701.v2025-08-18.q266 with Valid Practice Test (Page 42)

Question 201

Which of the following is the most likely to be used to document risks, responsible parties, and thresholds?

A.Risk tolerance
B.Risk transfer
C.Risk register
D.Risk analysis

Question 202

A security analyst is reviewing the following logs:

Which of the following attacks is most likely occurring?

A.Password spraying
B.Account forgery
C.Pass-t he-hash
D.Brute-force

Correct Answer: A

Password spraying is a type of brute force attack that tries common passwords across several accounts to find a match. It is a mass trial-and-error approach that can bypass account lockout protocols. It can give hackers access to personal or business accounts and information. It is not a targeted attack, but a high-volume attack tactic that uses a dictionary or a list of popular or weak passwords12.
The logs show that the attacker is using the same password ("password123") to attempt to log in to different accounts ("admin", "user1", "user2", etc.) on the same web server. This is a typical pattern of password spraying, as the attacker is hoping that at least one of the accounts has a weak password that matches the one they are trying. The attacker is also using a tool called Hydra, which is one of the most popular brute force tools, often used in cracking passwords for network authentication3.
Account forgery is not the correct answer, because it involves creating fake accounts or credentials to impersonate legitimate users or entities. There is no evidence of account forgery in the logs, as the attacker is not creating any new accounts or using forged credentials.
Pass-the-hash is not the correct answer, because it involves stealing a hashed user credential and using it to create a new authenticated session on the same network. Pass-the-hash does not require the attacker to know or crack the password, as they use the stored version of the password to initiate a new session4. The logs show that the attacker is using plain text passwords, not hashes, to try to log in to the web server.
Brute-force is not the correct answer, because it is a broader term that encompasses different types of attacks that involve trying different variations of symbols or words until the correct password is found. Password spraying is a specific type of brute force attack that uses a single common password against multiple accounts5. The logs show that the attacker is using password spraying, not brute force in general, to try to gain access to the web server. References = 1: Password spraying: An overview of password spraying attacks
... - Norton, 2: Security: Credential Stuffing vs. Password Spraying - Baeldung, 3: Brute ForceAttack: A definition + 6 types to know | Norton, 4: What is a Pass-the-Hash Attack? - CrowdStrike, 5: What is a Brute Force Attack? | Definition, Types & How It Works - Fortinet

Question 203

A certificate authority needs to post information about expired certificates. Which of the following would accomplish this task?

A.TPM
B.CRL
C.PKI
D.CSR

Question 204

A systems administrator is working on a solution with the following requirements:
* Provide a secure zone.
* Enforce a company-wide access control policy.
* Reduce the scope of threats.
Which of the following is the systems administrator setting up?

A.Zero Trust
B.AAA
C.Non-repudiation
D.CIA

Question 205

Which of the following phases of an incident response involves generating reports?

A.Containment
B.Preparation
C.Lessons learned
D.Recovery

Question 201

Question 202

Question 203

Question 204

Question 205

Download PDF File