Texte à trous — CompTIA Security+ SY0-701

Before granting network credentials to new contractors, the IT department required each of them to read and sign the _____, confirming they understood that installing personal software on company systems was strictly forbidden.

To prevent malware from executing on point-of-sale terminals, the retail chain enforced _____, ensuring that only the payment processing software and a handful of approved utilities could ever run on those machines.

The research laboratory replaced its PIN-based entry system with _____, requiring employees to pass an iris scan before accessing the chemical storage area.

The SIEM dashboard alerted the security team to a _____ after logging thousands of sequential password attempts against the administrator account of the remote desktop gateway within a single hour.

When a severe flood knocked out the primary data center, the organization relied on its _____ to redirect operations to a geographically separate hot site and keep customer-facing services running without interruption.

Because the legacy manufacturing system could not be patched to meet current security standards, the security team isolated it on a dedicated VLAN as a _____ to limit its exposure to the rest of the network.

A penetration tester discovered a _____ vulnerability in the e-commerce site's product review field, where unsanitized input allowed a malicious script to redirect users to a phishing page collecting their credit card details.

As part of the new information governance program, every document stored in the enterprise content management system was required to carry a _____ label—such as 'internal,' 'confidential,' or 'public'—so that appropriate handling rules could be automatically applied.

The hospital deployed a _____ solution that inspected all outbound email attachments and automatically quarantined any message containing patterns matching patient health record numbers before it could leave the network perimeter.

Before distributing the quarterly financial report to investors, the CFO applied a _____ to the document so that recipients could independently confirm its authenticity and detect any unauthorized modifications made after it was sent.

The healthcare organization mandated _____ on all field nurses' tablets so that sensitive patient records stored locally would remain unreadable if a device were ever lost during a home visit.

When the security operations center identified an active intrusion on the corporate network at 2 a.m., the on-call analyst immediately activated the _____, following pre-defined steps to isolate the affected segment and escalate to senior management.

After discovering that configuration files on the production server had been silently modified by an unauthorized process, the auditor concluded that the _____ of those critical assets had been violated.

The security engineer deployed a network-based _____ on a mirrored port of the core switch so it could analyze all internal traffic and raise alerts when communication patterns matched known command-and-control signatures, without interfering with legitimate flows.

Applying the principle of _____, the system administrator configured the backup service account to have read-only access to the directories it needed to archive, removing the write and execute permissions it had previously held unnecessarily.

By performing ARP poisoning on the local network segment, the attacker executed a _____ that allowed them to silently intercept and read encrypted session tokens exchanged between an internal application server and its clients.

The classified intelligence platform implemented _____, so that even a system administrator could not grant a 'Confidential'-cleared analyst access to documents bearing a 'Top Secret' label, because the operating system enforced those boundaries independently of any human decision.

After several phishing incidents compromised employee passwords, the CISO mandated _____ for all cloud application logins, requiring users to present both their credentials and a time-based one-time code generated by an authenticator app.

The university deployed _____ across its campus infrastructure so that any student device attempting to join the academic network would first be evaluated for current OS patches and active antivirus before being granted access, with non-compliant machines redirected to a remediation VLAN.

The security team's mature _____ process ensured that a critical zero-day fix released by the operating system vendor was tested in a staging environment on Monday and rolled out to all production servers by Wednesday, well before threat actors began mass-exploiting the vulnerability.

The manufacturing plant's operations were halted for three days after _____ spread through the OT network, encrypting engineering workstations and displaying a demand for payment in cryptocurrency before any production systems would be unlocked.

Following the acquisition of a smaller firm, the security team conducted a _____ of the newly inherited infrastructure and discovered several internet-exposed servers running end-of-life software, which were immediately prioritized for remediation due to their high likelihood of exploitation.

To prevent any single database administrator from both modifying audit logs and approving their own changes without oversight, the organization enforced _____ by assigning log review responsibilities exclusively to a dedicated compliance officer.

While waiting in line at a busy airport kiosk, a traveler unknowingly fell victim to _____ when a person standing close behind observed the PIN she entered to unlock her mobile boarding pass application.

Before launching the new customer portal into production, the development team ran a _____ against the staging environment and identified three outdated library dependencies with known exploits that needed to be updated before go-live.