stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
sy0-701 050125 Flashcards | StudBud
Explore
/
sy0-701 050125
Who is the supplicant in 802.1X?
What does SAE in WPA3 stand for?
sy0-701 050125
40 terms
·
StudBud Administration
·
23 plays
Imported from external platform
Flashcards
40 cards
F
Practice quiz
P
Host live
L
Questions
40
Answers
1
What does SAE in WPA3 stand for?
Secure Access Encryption
Standard Authorization Encryption
Secure Access Exchange
Simultaneous Authentication of Equals
2
Who is the supplicant in 802.1X?
Switch
Authentication Server
User device requesting access
Router
3
Why is encryption needed on public Wi-Fi?
To prevent on-path attacks
To update firmware
To increase speed
To log cookies
4
Difference between pen testing and vulnerability scanning?
Pen testing exploits, scanning identifies
Same process
Scanning exploits, pen testing identifies
None of the above
5
Why monitor applications after deployment?
To erase cache
To clean cookies
To detect misuse or attacks
To update RAM
6
What is lateral movement?
Jumping between systems after access
Updating drivers
Adding firewalls
Deleting logs
7
Why is asset tracking important?
To install patches
To reduce employee turnover
To increase sales
To manage IT assets and security
8
What is an on-path attack?
Firmware upgrade
Intercepting and altering communication
Bluetooth pairing
Wi-Fi jamming
9
What is the dark web often used for?
Illicit activity and stolen info sales
Software development
Open data indexing
Social media
10
What is EAP?
Encryption Auth Packet
Extended Access Panel
Email App Protocol
Extensible Authentication Protocol
11
What is fuzzing in application security?
Random input to find vulnerabilities
Authenticating users
Compiling code
Encrypting files
12
What is sandboxing?
Isolating applications
Wireless firewalling
Full access to OS
Running apps without RAM
13
Why conduct a site survey?
To update Windows
To clean up folders
To uninstall apps
To find best wireless placement
14
What is a pivot point?
Start of data collection
Main server
Router with backup
Initial compromised device
15
What is OSINT?
Open-Source Intelligence
Internal threat scanning
Encrypted chat service
Malware scanner
16
What is the purpose of code signing?
Speed up execution
Authenticate user logins
Encrypt data transfers
Verify integrity and origin of code
17
Why avoid putting sensitive data in cookies?
They reduce RAM
They can be stolen if browser compromised
They're encrypted
They slow down loading
18
What is BYOD?
Backup your own data
Company-owned mobile program
Bring Your Own Device
Basic YAML on Demand
19
What is buffer overflow?
Running multiple apps
Increasing disk space
Writing beyond memory limits
Using more RAM
20
What is a bug bounty?
New malware
QA tool
Reward for reporting vulnerabilities
Penalty fee
21
What’s the first step in a penetration test?
Rules of engagement
Exploitation
Update antivirus
Delete logs
22
Why is fuzzing important?
Improves UI
Improves performance
Detects unknown vulnerabilities
Reduces memory usage
23
What’s the goal of a pen test?
Scan for updates
Exploit vulnerabilities for testing
Install patches
Delete temp files
24
What does MDM do?
Manages and secures mobile devices
Encrypts all Wi-Fi
Blocks ads
Monitors network traffic
25
What does a Certificate of Destruction do?
Confirms drive destruction
Grants permissions
Creates cookies
Verifies app origin
26
What is dynamic analysis?
Static code reading
Live code execution with inputs
Asset destruction
Database query testing
27
What is the role of the authenticator?
Controls access to network
Verifies credentials
Launches fuzzing attacks
Creates policies
28
What is RADIUS?
A device tracker
Remote Authentication Dial-In User Service
A secure browser
A VPN protocol
29
What does AAA stand for?
Authorization, Analysis, Availability
Analysis, Authorization, Access
Authentication, Authorization, Accounting
Authentication, Access, Analytics
30
What does static code analysis do?
Analyzes source code without execution
Runs live test attacks
Tests database performance
Checks UI for bugs
31
Which method destroys data with an electromagnetic field?
Degaussing
Secure Delete
Shredding
Burning
32
How does WPA3 improve over WPA2?
Better passwords
More cookies
Uses SAE to prevent dictionary attacks
Removes encryption
33
What’s the benefit of GCMP in WPA3?
Sends cookies faster
Allows sharing
Provides confidentiality and integrity
Improves speed
34
Why are cookies risky even when secure?
They auto-update browsers
Data in them can be accessed by attackers
They bypass firewalls
They can be executed
35
What is a CVE?
A login method
Common Vulnerabilities and Exposures listing
Encryption tool
Cookie scanner
36
What’s one limitation of SAST?
May miss cryptographic issues
It encrypts input
It is real-time
Doesn’t find UI bugs
37
What is input validation used for?
Preventing buffer overflows and SQL injection
Managing cookies
Storing user sessions
Making software faster
38
What’s the best way to test untrusted software?
Upload to cloud
Use production servers
Test in lab environment
Run on live network
39
Why is data retention important?
For mobile data usage
For compliance and backups
To fill hard drives
To increase CPU load
40
What is a secure delete?
Uses virus to delete
Deletes via Recycle Bin
Writes over data to make it unrecoverable
Deletes only images
