#### test 14
##### #mistakes 14
```
**Hardware RAID Level 1: (Select 3 answers)**
- ✅ **Requires at least 2 drives to implement** – Minimum number for mirroring _(Missed)_
- ❌ **Requires at least 3 drives to implement** – Too many drives for RAID 1 _(Your answer)_
- ✅ **Offers improved reliability by creating identical data sets on each drive (failure of one drive
does not destroy the array as each drive contains identical copy of the data)** – Key benefit of
RAID 1 _(Missed)_
- ✅ **Is also referred to as disk mirroring** – Common name for RAID 1 _(Missed)_
- ❌ **Is also known as disk striping** – Striping applies to RAID 0 _(Your answer)_
- ❌ **Offers improved performance in comparison to RAID 0** – RAID 0 performs better _(Your
answer)_
--**Hardware RAID Level 5: (Select 3 answers)**
- ❌ **Requires at least 2 drives to implement** – Needs minimum of 3 drives _(Your answer)_
- ❌ **Continues to operate in case of failure of more than 1 drive** – Supports only one drive
failure _(Your answer)_
- ❌ **Is also known as disk striping with double parity** – That describes RAID 6 _(Your
answer)_
- ✅ **Requires at least 3 drives to implement** – Basic requirement for RAID 5 _(Missed)_
- ✅ **Offers increased performance and fault tolerance (single drive failure does not destroy the
array and lost data can be re-created by the remaining drives)** – Core RAID 5 feature _(Missed)_
- ❌ **Requires at least 4 drives to implement** – Not required, 3 is enough _(Your answer)_
- ✅ **Is also known as disk striping with parity** – Standard description of RAID 5 _(Missed)_
--**Hardware RAID Level 6: (Select 3 answers)**
- ❌ **Is also known as disk striping with parity** – Parity alone is RAID 5 _(Your answer)_
- ✅ **Requires at least 4 drives to implement** – Minimum to support dual parity _(Missed)_
- ✅ **Offers increased performance and fault tolerance (failure of up to 2 drives does not destroy
the array and lost data can be re-created by the remaining drives)** – Main benefit of RAID 6
_(Missed)_
- ❌ **Requires at least 3 drives to implement** – Insufficient for dual parity _(Your answer)_
- ✅ **Is also known as disk striping with double parity** – Correct RAID 6 description _(Missed)_
- ❌ **Continues to operate in case of failure of more than 2 drives** – Supports only 2 drive
failures _(Your answer)_
- ❌ **Requires at least 5 drives to implement** – Only 4 drives needed _(Your answer)_
--**Which alternate site allows for the fastest disaster recovery?**
- ❌ **Mobile site** – Temporary, slower to deploy _(Your answer)_
- ✅ **Hot site** – Fully operational backup facility _(Missed)_
- ❌ **Cold site** – Requires full setup _(Your answer)_
- ❌ **Warm site** – Partially ready, needs configuration _(Your answer)_
--**The process of switching to a redundant or standby system upon detecting a disruption in the
primary system is called:**
- ✅ **Fail over** – Automatic switch to standby system _(Missed)_
- ❌ **Parallel processing** – Simultaneous task execution, not redundancy _(Your answer)_
- ❌ **Multipath I/O** – Multiple I/O paths, not failover _(Your answer)_
- ❌ **Load balancing** – Distributes workload, doesn’t switch systems _(Your answer)_
--**Which of the following terms refers to a backup strategy that relies on creating and maintaining
copies of data in real-time or near real-time on a separate system?**
- ✅ **Replication** – Real-time data duplication _(Missed)_
- ❌ **Mirroring** – Typically local disk-level redundancy _(Your answer)_
- ❌ **Journaling** – Logs file system changes _(Your answer)_
- ❌ **Virtualization** – Abstracts hardware, unrelated to backup _(Your answer)_
```
##### #results 14
Your Final Report
| Total marks
| 36 |
| ---------------------------- | ------ |
| Total Questions
| 25 |
| Questions correctly answered | 19 |
| Success ratio
| 76% |
| Marks secured
| 28 |
| Percentage secured
| 77.78% |
#### test 15
##### #mistakes 15
```
1.
Question:
Data on a lost or stolen mobile device can be erased by:
❌ Low-level formatting (Your answer – incorrect)
✅ Remote wipe (Correct – Missed)
Explanation: Remote wipe is the standard mobile security feature that allows administrators or users
to erase data remotely if a device is lost or stolen.
2.
Question:
Which of the following answers refers to a mobile security solution that enables separate controls
over the user and enterprise data?
❌ Content management (Your answer – incorrect)
✅ Storage segmentation (Correct – Missed)
Explanation: Storage segmentation (also known as sandboxing) allows separation of personal and
enterprise data, enabling different policies and security controls for each.
3.
Question:
In the context of MDM, the isolation of corporate applications and data from other parts of the
mobile device is referred to as:
❌ Storage segmentation (Your answer – incorrect)
✅ Containerization (Correct – Missed)
Explanation: Containerization creates secure containers on the device to isolate corporate apps and
data from personal ones.
4.
Question:
Which of the following answers refers to a security feature used in Bluetooth device pairing?
❌ SAE (Your answer – incorrect)
✅ PIN (Correct – Missed)
Explanation: Bluetooth pairing typically uses a PIN code, especially in legacy and many current
devices.
5.
Question:
Which of the following solutions would offer the strongest security for a small network that lacks
an authentication server?
❌WPA3-Enterprise (Your answer – incorrect)
✅WPA3-SAE (Correct – Missed)
Explanation: WPA3-SAE (Simultaneous Authentication of Equals) is the most secure method for
personal or small business networks without authentication servers.
6.
Question:
What are the characteristics of TACACS+? (Select 3 answers)
✅ Combines authentication and authorization (Your answer – Correct)
✅ Encrypts the entire payload of the access-request packet (Your answer – Correct)
✅ Primarily used for device administration (Your answer – Correct)
❌ Separates authentication and authorization (Missed – also correct)
Explanation: TACACS+ separates authentication, authorization, and accounting (AAA), and
encrypts the full payload, unlike RADIUS.
7.
Question:
What are the characteristic features of RADIUS? (Select 3 answers)
✅ Primarily used for network access (Your answer – Correct)
❌ Combines authentication and authorization (Missed – also correct)
✅ Encrypts only the password in the access-request packet (Your answer – Correct)
❌ Separates authentication and authorization (Your answer – incorrect)
Explanation: RADIUS combines authentication and authorization, and only encrypts the
password—not the full packet.
8.
Question:
Which of the wireless encryption schemes listed below offers the highest level of protection?
❌AES (Your answer – incorrect)
✅WPA3 (Correct – Missed)
Explanation: AES is an encryption algorithm, not a wireless security protocol. WPA3 is the most
secure wireless encryption standard currently available.
```
##### #results 15
Your Final Report
| Total marks
| 35 |
| ---------------------------- | ------ |
| Total Questions
| 25 |
| Questions correctly answered | 17 |
| Success ratio
| 68% |
| Marks secured
| 27 |
| Percentage secured
| 77.14% |
#### test 16
##### #mistakes 16
```
1. Which of the following answers refers to a deprecated wireless authentication protocol developed
by Cisco?
A. PEAP
B. EAP-TTLS (Your Answer)
C. LEAP (✅Correct Answer)
D. EAP-TLS
LEAP (Lightweight EAP) was developed by Cisco but is deprecated due to known vulnerabilities.
2. Which of the programming aspects listed below are critical in the secure application development
process? (Select 2 answers)
A. Patch management (Your Answer)
B. Input validation (✅Correct Answer)
C. Password protection
D. Error and exception handling (Your Answer, ✅ Correct)
E. Application whitelisting
Input validation and error/exception handling are critical for preventing common security issues
such as injection and logic errors.
3. The term "Static code analysis" refers to the process of discovering application runtime errors.
A. True (Your Answer)
B. False (✅Correct Answer)
Static code analysis is done without running the application. Runtime errors are typically found
using dynamic analysis.
4. The practice of finding vulnerabilities in an application by feeding it incorrect input is called:
A. Normalization
B. Hardening
C. Dynamic code analysis (Your Answer)
D. Fuzzing (✅Correct Answer)
Fuzzing is used to test how applications handle unexpected or malformed inputs.
5. Which of the following answers refers to a Windows-specific feature for handling exceptions,
errors, and abnormal conditions in software?
A. EPC
B. SEH (✅Correct Answer)
C. EH
D. EXR (Your Answer)
SEH (Structured Exception Handling) is the Windows mechanism for managing exceptions.
6. Which of the following answers refers to a hardware monitoring and asset tracking method?
A. Barcode labels
B. QR codes
C. RFID tags
D. GPS tracking (Your Answer)
E. All of the above (✅Correct Answer)
All these options are used for tracking physical assets and inventory.
7. Which of the following wireless technologies enables identification and tracking of tags attached
to objects?
A. GPS
B. IR
C. RFID (✅Correct Answer)
D. NFC (Your Answer)
RFID is commonly used in logistics and supply chains for tag tracking.
8. Which of the destruction tools/methods listed below allow(s) for secure disposal of physical
documents? (Select all that apply)
A. Shredding (Your Answer, ✅Correct)
B. Overwriting
C. Burning (Your Answer, ✅ Correct)
D. Formatting
E. Degaussing (Your Answer)
✅ Correct Answers: Shredding, Burning
Degaussing applies only to magnetic media, not physical paper.
```
##### #results 16
Your Final Report
| Total marks
| 32 |
| ---------------------------- | ------ |
| Total Questions
| 25 |
| Questions correctly answered | 17 |
| Success ratio
| 68% |
| Marks secured
| 25 |
| Percentage secured
| 78.13% |
#### test 17‼️
##### #mistakes 17
```
Here’s a summary of your incorrect or incomplete answers for CompTIA Security+ SY0-701
Practice Test 17, including:
The question
All answer options
Your selected answer
✅The correct answer(s)
1. Which of the following terms refers to threat intelligence gathered from publicly available
sources?
A. IoC
B. OSINT ✅ (Correct)
C. RFC
D. CVE/NVD (Your Answer)
OSINT = Open Source Intelligence; refers to intelligence collected from publicly available sources.
2. Which of the terms listed below refers to a US government initiative for real-time sharing of
cyber threat indicators?
A. AIS ✅(Correct)
B. STIX (Your Answer)
C. TTP
D. CVSS
AIS = Automated Indicator Sharing, a DHS/CISA initiative.
3. What is STIX?
A. A type of vulnerability database
B. Common language for describing cyber threat information ✅ (Correct)
C. US government initiative for real-time sharing of cyber threat indicators (Your Answer)
D. Transport mechanism for cyber threat information
STIX = Structured Threat Information eXpression, a standard format for threat data.
4. Which of the following provides insights into the methods and tools used by cybercriminals to
carry out attacks?
A. CVE
B. IoC
C. AIS (Your Answer)
D. TTP ✅(Correct)
TTP = Tactics, Techniques, and Procedures used by attackers.
5. Which of the following statements does not apply to dark web?
A. Typically requires specialized software to access its contents (Your Answer)
B. Forms a large part of the deep web ✅ (Correct)
C. Not indexed by traditional search engines
D. Often associated with trading stolen data, malware, and cyber threats
The dark web is a subset of the deep web, not the other way around.
6. What is Exposure Factor (EF) in vulnerability analysis?
A. The likelihood that a vulnerability will be exploited in a real-world scenario
B. The rate at which vulnerabilities are discovered and reported
C. The degree of loss that a realized threat would have on a specific asset ✅(Correct)
D. The measure of the potential impact of a vulnerability on an organization's assets (Your Answer)
EF = The percentage of asset loss due to a realized threat.
7. Which of the statements listed below does not refer to a vulnerability response and remediation
technique?
A. Patching
B. Insurance
C. Segmentation
D. Compensating controls
E. Exceptions and exemptions (Your Answer)
F. All of the above answers are examples of vulnerability response and remediation techniques ✅
(Correct)
All listed are valid techniques used based on risk assessment and business context.
8. Which of the answers listed below refer to SCAP? (Select 3 answers)
A. A type of security system designed to collect logs and events from various sources (Your
Answer)
B. Designed to provide a centralized user interface for accessing collected data
C. A collection of standards developed by NIST (Your Answer ✅)
D. Provides a common language for communicating security information ✅ (Missed)
E. Allows different security tools to share data and work together more effectively ✅ (Missed)
F. Enables real-time threat detection, incident response, and compliance monitoring (Your Answer)
SCAP = Security Content Automation Protocol. Focus is on standardization and interoperability, not
on detection or collection.
9. Which of the answers listed below refer to SIEM? (Select 3 answers)
A. Allows different security tools to share data and work together more effectively (Your Answer)
B. Designed to provide a centralized user interface for accessing collected data (Your Answer ✅)
C. A collection of standards developed by NIST
D. Enables real-time threat detection, incident response, and compliance monitoring ✅ (Missed)
E. A type of security system designed to collect logs and events from various sources ✅ (Missed)
F. Provides a common language for communicating security information (Your Answer)
SIEM = Security Information and Event Management; emphasizes log aggregation and real-time
response, not protocol standardization.
10. Which of the following acronyms refers to software or hardware-based security solutions
designed to detect and prevent unauthorized use and transmission of confidential information?
A. IPS (Your Answer)
B. DLP ✅(Correct)
C. IDS
D. DEP
DLP = Data Loss Prevention, explicitly focused on confidential data control.
11. An SNMP-compliant device includes a virtual database containing information about
configuration and state of the device that can be queried by an SNMP management station. This
type of data repository is referred to as:
A. MIB ✅(Correct)
B. DCS
C. NMS
D. SIEM (Your Answer)
MIB = Management Information Base, core to SNMP systems.
```
##### #results 17
Your Final Report
| Total marks
| 33 |
| ---------------------------- | ------ |
| Total Questions
| 25 |
| Questions correctly answered | 14 |
| Success ratio
| 56% |
| Marks secured
| 20 |
| Percentage secured
| 60.61% |