Quizeey

CompTIA Security+ SY0-501

문제1 / 20

회차 · 2026-10

Which security principle grants only the permissions required for a task?

하나 선택

오답 신고

시험과 문제 정보는 자동으로 전달됩니다.

문제 목록·복습
정답오답미응답
문제 링크
2026-10 회차 · 연습문제 53개와 해설

공식 기출 회차와 구분되는 자체 제작 학습 자료입니다.

The exam code in this catalog entry is retired. This 2026-10 set reviews foundational concepts; it does not claim alignment with a current replacement exam blueprint.

이 페이지의 연습문제 20개

  1. Which security principle grants only the permissions required for a task?

  2. Which combination provides two different authentication factor types?

  3. What is a cryptographic hash primarily used to verify?

  4. An organization restricts access to payroll records so only authorized staff can read them. Which security objective is addressed most directly?

  5. A recipient verifies a downloaded file's hash against a trusted published hash. Which property is being checked most directly?

  6. A digital signature on a document can help a recipient establish which combination of properties?

  7. A security camera records entries into a restricted server room. Which control function is its recording primarily providing?

  8. A company cannot install a required patch immediately and temporarily isolates the affected system behind stricter access controls. How is the temporary alternative best described?

  9. An employee receives a convincing text message asking them to sign in through a link controlled by an attacker. What is this attack called?

  10. A user receives repeated unexpected MFA approval prompts after an attacker obtains the user's password. What is the most appropriate response?

  11. A web application builds SQL by concatenating untrusted input. Which mitigation most directly addresses SQL injection?

  12. An attacker places JavaScript in a comment that later executes in other users' browsers. Which vulnerability is demonstrated?

  13. An application allows a signed-in user to download another user's invoice by changing an invoice ID in the URL. Which missing control is most relevant?

  14. A network is divided so a compromise of a guest Wi-Fi client does not directly expose payroll servers. Which technique supports this design?

  15. Which statement best reflects a zero trust approach?

  16. A user authenticates with a password and a hardware security key. Which description is correct?

  17. A service account needs database read access for one application and no interactive login. Which configuration best follows least privilege?

  18. Why should password hashes normally use a unique salt for each password?

  19. A company wants to protect a private key from direct export while allowing approved cryptographic operations. Which technology best fits?

  20. A browser reports that a server certificate has expired. What should an administrator do?

시험 댓글