CompTIA Security+ SY0-701 Practice Exam A — Kerala PSC PYQ Practice with Answers

Correct answer (Option B):\nPassive reconnaissance focuses on gathering as much information from open sources such as social media, corporate websites, and business organizations without directly contacting or interacting with the target systems.\n\nWhy others are wrong:\nOption A is incorrect because vulnerability scanning actively queries or tests systems directly. Option C is incorrect because supply chain analysis examines the security profiles of suppliers, not the company's own data. Option D is incorrect because a regulatory audit is a detailed validation based on compliance laws requiring internal system access.

Correct answer (Option C):\nDMARC (Domain-based Message Authentication Reporting and Conformance) specifically determines and dictates the operational disposition (such as reject, quarantine, or accept) of emails that fail SPF or DKIM validation checks.\n\nWhy others are wrong:\nOption A is incorrect because SPF only publishes a list of authorized servers but does not define disposition rules. Option B is incorrect because NAC is used for system network access controls rather than email routing. Option D is incorrect because DKIM provides digital signatures to validate authenticity but does not define compliance dispositions.

Correct answer (Option A):\nAn organized crime actor is primarily motivated by money. Their hacking infrastructure and operational objectives are usually built around monetizable targets that can be easily exchanged for financial capital, such as ransomware or data theft.\n\nWhy others are wrong:\nOption B is incorrect because hacktivists are driven by ideological or political agendas. Option C is incorrect because nation states focus on espionage, political disruption, or strategic intelligence rather than financial gains. Option D is incorrect because shadow IT consists of internal groups bypassing corporate constraints.

Correct answer (Option A):\nThe ultimate goal of a root cause analysis is to uncover and explain the definitive fundamental reason why a security breach or system failure occurred, making it easier to mitigate similar vulnerabilities in the future.\n\nWhy others are wrong:\nOption B is incorrect because e-discovery relates to collecting and producing electronic documents for legal proceedings. Option C is incorrect because risk appetite describes the amount of risk an organization accepts. Option D is incorrect because a data subject refers to an individual associated with private data fields.

Correct answer (Option C):\nRequests to emergency dispatching systems are life-critical in nature. It is vital that the underlying infrastructure guarantees high system availability so that dispatch operations are responsive whenever an emergency occurs.\n\nWhy others are wrong:\nOption A is incorrect because financial integration costs are secondary when protecting human lives. Option B is incorrect because while patching updates maintain stability, continuous service availability takes precedence. Option D is incorrect because power optimization is less crucial than providing immediate operational uptime.