[{"id":"comptiasy0701-101","domain":"general-security-concepts","topic":"Control categories","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-102","domain":"general-security-concepts","topic":"Control types","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-103","domain":"general-security-concepts","topic":"Symmetric and asymmetric cryptography","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-104","domain":"general-security-concepts","topic":"Confidentiality, integrity, availability","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-105","domain":"general-security-concepts","topic":"Authentication, authorization and accounting","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-106","domain":"general-security-concepts","topic":"Gap analysis","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-107","domain":"general-security-concepts","topic":"Zero trust architecture","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-108","domain":"general-security-concepts","topic":"Non-repudiation","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-109","domain":"general-security-concepts","topic":"Salting","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-110","domain":"general-security-concepts","topic":"Deception technologies","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-111","domain":"general-security-concepts","topic":"Change management","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-112","domain":"general-security-concepts","topic":"Public key infrastructure","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-113","domain":"general-security-concepts","topic":"Certificate revocation","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-114","domain":"general-security-concepts","topic":"Certificate signing request","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-115","domain":"general-security-concepts","topic":"Hardware security","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-116","domain":"general-security-concepts","topic":"Trusted Platform Module","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-117","domain":"general-security-concepts","topic":"Hashing","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-118","domain":"general-security-concepts","topic":"Data obfuscation","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-119","domain":"general-security-concepts","topic":"Digital signatures","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-120","domain":"general-security-concepts","topic":"Key stretching","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-121","domain":"general-security-concepts","topic":"Encryption levels","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-122","domain":"general-security-concepts","topic":"Steganography","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-123","domain":"general-security-concepts","topic":"Blockchain","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-001","domain":"general-security-concepts","topic":"Non-repudiation","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-003","domain":"general-security-concepts","topic":"Password salting","kind":"scenario","options":["a","b","c","d","e"],"answer":"cd","rev":1},{"id":"comptiasy0701-002","domain":"threats-vulnerabilities-mitigations","topic":"Compensating controls","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-124","domain":"threats-vulnerabilities-mitigations","topic":"Threat actors","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-125","domain":"threats-vulnerabilities-mitigations","topic":"Threat actors","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-126","domain":"threats-vulnerabilities-mitigations","topic":"Threat actors","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-127","domain":"threats-vulnerabilities-mitigations","topic":"Threat vectors","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-128","domain":"threats-vulnerabilities-mitigations","topic":"Motivations","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-129","domain":"threats-vulnerabilities-mitigations","topic":"Threat vectors","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-130","domain":"threats-vulnerabilities-mitigations","topic":"Threat vectors","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-131","domain":"threats-vulnerabilities-mitigations","topic":"Threat vectors","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-132","domain":"threats-vulnerabilities-mitigations","topic":"Threat vectors","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-133","domain":"threats-vulnerabilities-mitigations","topic":"Threat vectors","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-134","domain":"threats-vulnerabilities-mitigations","topic":"Hardening","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-135","domain":"threats-vulnerabilities-mitigations","topic":"Supply chain","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-136","domain":"threats-vulnerabilities-mitigations","topic":"Unsecured networks","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-137","domain":"threats-vulnerabilities-mitigations","topic":"Application attacks","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-138","domain":"threats-vulnerabilities-mitigations","topic":"Application attacks","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-139","domain":"threats-vulnerabilities-mitigations","topic":"Application attacks","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-140","domain":"threats-vulnerabilities-mitigations","topic":"Application attacks","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-141","domain":"threats-vulnerabilities-mitigations","topic":"Cryptographic attacks","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-142","domain":"threats-vulnerabilities-mitigations","topic":"Vulnerabilities","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-143","domain":"threats-vulnerabilities-mitigations","topic":"Cloud vulnerabilities","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-144","domain":"threats-vulnerabilities-mitigations","topic":"Virtualization vulnerabilities","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-145","domain":"threats-vulnerabilities-mitigations","topic":"Mobile vulnerabilities","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-146","domain":"threats-vulnerabilities-mitigations","topic":"Cryptographic vulnerabilities","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-147","domain":"threats-vulnerabilities-mitigations","topic":"Supply chain vulnerabilities","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-148","domain":"threats-vulnerabilities-mitigations","topic":"Hardware vulnerabilities","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-149","domain":"threats-vulnerabilities-mitigations","topic":"Malware","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-150","domain":"threats-vulnerabilities-mitigations","topic":"Malware","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-151","domain":"threats-vulnerabilities-mitigations","topic":"Malware","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-152","domain":"threats-vulnerabilities-mitigations","topic":"Malware","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-153","domain":"threats-vulnerabilities-mitigations","topic":"Physical attacks","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-154","domain":"threats-vulnerabilities-mitigations","topic":"Threat actors","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-155","domain":"threats-vulnerabilities-mitigations","topic":"Network attacks","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-156","domain":"threats-vulnerabilities-mitigations","topic":"Password attacks","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-157","domain":"threats-vulnerabilities-mitigations","topic":"Password attacks","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-158","domain":"threats-vulnerabilities-mitigations","topic":"Indicators","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-159","domain":"threats-vulnerabilities-mitigations","topic":"Indicators","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-160","domain":"threats-vulnerabilities-mitigations","topic":"Segmentation","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-161","domain":"threats-vulnerabilities-mitigations","topic":"Patching","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-162","domain":"threats-vulnerabilities-mitigations","topic":"Access control","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-163","domain":"threats-vulnerabilities-mitigations","topic":"Endpoint protection","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-164","domain":"threats-vulnerabilities-mitigations","topic":"Application allow listing","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-165","domain":"threats-vulnerabilities-mitigations","topic":"Legacy and end-of-life","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-166","domain":"threats-vulnerabilities-mitigations","topic":"Authentication","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-167","domain":"security-architecture","topic":"Shared responsibility","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-168","domain":"security-architecture","topic":"Serverless","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-169","domain":"security-architecture","topic":"Infrastructure as code","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-170","domain":"security-architecture","topic":"Air gap","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-171","domain":"security-architecture","topic":"Screened subnet","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-172","domain":"security-architecture","topic":"Software-defined networking","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-173","domain":"security-architecture","topic":"Containerization","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-174","domain":"security-architecture","topic":"Real-time operating systems","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-175","domain":"security-architecture","topic":"ICS and unpatchable systems","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-176","domain":"security-architecture","topic":"IoT security","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-177","domain":"security-architecture","topic":"High availability","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-178","domain":"security-architecture","topic":"Failure modes","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-179","domain":"security-architecture","topic":"Device attributes","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-180","domain":"security-architecture","topic":"Jump server","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-181","domain":"security-architecture","topic":"Alternate site types","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-182","domain":"security-architecture","topic":"Web application firewall","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-183","domain":"security-architecture","topic":"Port-based authentication","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-184","domain":"security-architecture","topic":"EAP methods","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-185","domain":"security-architecture","topic":"IPsec","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-186","domain":"security-architecture","topic":"Load balancing","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-187","domain":"security-architecture","topic":"SASE","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-188","domain":"security-architecture","topic":"Next-generation firewall","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-189","domain":"security-architecture","topic":"Data masking","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-190","domain":"security-architecture","topic":"Tokenization","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-191","domain":"security-architecture","topic":"Data states","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-192","domain":"security-architecture","topic":"Data sovereignty","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-193","domain":"security-architecture","topic":"Hot sites","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-194","domain":"security-architecture","topic":"Geographic dispersion","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-195","domain":"security-architecture","topic":"Platform diversity","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-196","domain":"security-architecture","topic":"Backup strategy","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-197","domain":"security-architecture","topic":"Journaling","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-198","domain":"security-architecture","topic":"Ransomware resilience","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-199","domain":"security-architecture","topic":"Power resiliency","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-200","domain":"security-architecture","topic":"Continuity testing","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-201","domain":"security-architecture","topic":"Data classification","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-004","domain":"security-architecture","topic":"Network segmentation","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-202","domain":"security-operations","topic":"Secure baselines","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-203","domain":"security-operations","topic":"Hardening targets","kind":"scenario","options":["a","b","c","d","e"],"answer":"de","rev":1},{"id":"comptiasy0701-204","domain":"security-operations","topic":"Rogue wireless access points","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-205","domain":"security-operations","topic":"WPA3 and SAE","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-206","domain":"security-operations","topic":"Enterprise wireless authentication","kind":"scenario","options":["a","b","c","d","e"],"answer":"ce","rev":1},{"id":"comptiasy0701-207","domain":"security-operations","topic":"Mobile application management","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-208","domain":"security-operations","topic":"Mobile deployment models","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-209","domain":"security-operations","topic":"Application security testing","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-210","domain":"security-operations","topic":"Asset inventory and ownership","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-211","domain":"security-operations","topic":"Media sanitization","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-212","domain":"security-operations","topic":"Disposal documentation","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-213","domain":"security-operations","topic":"Vulnerability scan versus penetration test","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-214","domain":"security-operations","topic":"Credentialed scans","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-215","domain":"security-operations","topic":"False positives","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-216","domain":"security-operations","topic":"Known exploited vulnerabilities","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-217","domain":"security-operations","topic":"Risk-based prioritization","kind":"scenario","options":["a","b","c","d","e"],"answer":"ae","rev":1},{"id":"comptiasy0701-218","domain":"security-operations","topic":"Remediation validation","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-219","domain":"security-operations","topic":"Exceptions and compensating controls","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-220","domain":"security-operations","topic":"Rules of engagement","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-221","domain":"security-operations","topic":"SIEM","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-222","domain":"security-operations","topic":"Log archiving","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-223","domain":"security-operations","topic":"SNMP traps","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-224","domain":"security-operations","topic":"NetFlow and IPFIX","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-225","domain":"security-operations","topic":"Firewall rule order","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-226","domain":"security-operations","topic":"IPS versus IDS","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-227","domain":"security-operations","topic":"Web filtering","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-228","domain":"security-operations","topic":"DNS filtering","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-229","domain":"security-operations","topic":"DMARC","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-230","domain":"security-operations","topic":"File integrity monitoring","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-231","domain":"security-operations","topic":"Data loss prevention","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-232","domain":"security-operations","topic":"Network access control","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-233","domain":"security-operations","topic":"EDR","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-234","domain":"security-operations","topic":"User behavior analytics","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-235","domain":"security-operations","topic":"Privileged access management","kind":"scenario","options":["a","b","c","d","e"],"answer":"ad","rev":1},{"id":"comptiasy0701-236","domain":"security-operations","topic":"Federation and SAML","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-237","domain":"security-operations","topic":"OAuth authorization","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-238","domain":"security-operations","topic":"Multifactor authentication","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-239","domain":"security-operations","topic":"Provisioning and deprovisioning","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-240","domain":"security-operations","topic":"Automation considerations","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-241","domain":"security-operations","topic":"SOAR use cases","kind":"scenario","options":["a","b","c","d","e"],"answer":"ce","rev":1},{"id":"comptiasy0701-242","domain":"security-operations","topic":"Incident response sequence","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-243","domain":"security-operations","topic":"Sharing lessons learned","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-244","domain":"security-operations","topic":"Tabletop exercises","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-245","domain":"security-operations","topic":"Root cause analysis","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-246","domain":"security-operations","topic":"Chain of custody","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-247","domain":"security-operations","topic":"Order of volatility","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-248","domain":"security-operations","topic":"Forensic integrity","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-249","domain":"security-operations","topic":"Log data sources","kind":"scenario","options":["a","b","c","d","e"],"answer":"cd","rev":1},{"id":"comptiasy0701-250","domain":"security-operations","topic":"Packet captures","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-251","domain":"security-operations","topic":"Threat hunting","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-252","domain":"security-operations","topic":"Application allow lists","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-253","domain":"security-operations","topic":"Incident response testing","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-254","domain":"security-operations","topic":"Alert tuning","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-255","domain":"security-operations","topic":"Containment and evidence","kind":"scenario","options":["a","b","c","d","e"],"answer":"be","rev":1},{"id":"comptiasy0701-005","domain":"security-operations","topic":"Incident response","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-256","domain":"security-program-management-oversight","topic":"Policies vs standards","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-257","domain":"security-program-management-oversight","topic":"Data roles","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-258","domain":"security-program-management-oversight","topic":"Controller vs processor","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-259","domain":"security-program-management-oversight","topic":"Governance structures","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-260","domain":"security-program-management-oversight","topic":"External considerations","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-261","domain":"security-program-management-oversight","topic":"Policy monitoring and revision","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-262","domain":"security-program-management-oversight","topic":"Onboarding and offboarding","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-263","domain":"security-program-management-oversight","topic":"Qualitative vs quantitative","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-264","domain":"security-program-management-oversight","topic":"Quantitative risk: ALE","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-265","domain":"security-program-management-oversight","topic":"Vendor questionnaires","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-266","domain":"security-program-management-oversight","topic":"Risk strategies: transfer","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-267","domain":"security-program-management-oversight","topic":"Risk strategies: avoid","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-268","domain":"security-program-management-oversight","topic":"Risk strategies: accept","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-269","domain":"security-program-management-oversight","topic":"Risk appetite","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-270","domain":"security-program-management-oversight","topic":"Risk tolerance","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-271","domain":"security-program-management-oversight","topic":"Risk register","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-272","domain":"security-program-management-oversight","topic":"Risk assessment types","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-273","domain":"security-program-management-oversight","topic":"Recovery metrics: RTO","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-274","domain":"security-program-management-oversight","topic":"Recovery metrics: RPO","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-275","domain":"security-program-management-oversight","topic":"User guidance: phishing","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-276","domain":"security-program-management-oversight","topic":"Vendor due diligence","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-277","domain":"security-program-management-oversight","topic":"Right to audit","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-278","domain":"security-program-management-oversight","topic":"Agreement types: MSA","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-279","domain":"security-program-management-oversight","topic":"Vendor monitoring","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-280","domain":"security-program-management-oversight","topic":"Supply chain analysis","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-281","domain":"security-program-management-oversight","topic":"Compliance consequences","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-282","domain":"security-program-management-oversight","topic":"Right to be forgotten","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-283","domain":"security-program-management-oversight","topic":"Attestation and acknowledgement","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-284","domain":"security-program-management-oversight","topic":"Internal vs external audit","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-285","domain":"security-program-management-oversight","topic":"Pen test environments","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-286","domain":"security-program-management-oversight","topic":"Penetration test approaches","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-287","domain":"security-program-management-oversight","topic":"Rules of engagement","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-288","domain":"security-program-management-oversight","topic":"Phishing campaigns","kind":"scenario","options":["a","b","c","d"],"answer":"a","rev":1},{"id":"comptiasy0701-289","domain":"security-program-management-oversight","topic":"Responding to reported phishing","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1},{"id":"comptiasy0701-290","domain":"security-program-management-oversight","topic":"Insider threat awareness","kind":"scenario","options":["a","b","c","d"],"answer":"b","rev":1},{"id":"comptiasy0701-291","domain":"security-program-management-oversight","topic":"Recognizing phishing","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-292","domain":"security-program-management-oversight","topic":"Training effectiveness","kind":"scenario","options":["a","b","c","d","e"],"answer":"ab","rev":1},{"id":"comptiasy0701-293","domain":"security-program-management-oversight","topic":"Security control assessment","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-294","domain":"security-program-management-oversight","topic":"Key risk indicators","kind":"scenario","options":["a","b","c","d"],"answer":"d","rev":1},{"id":"comptiasy0701-006","domain":"security-program-management-oversight","topic":"Third-party agreements","kind":"scenario","options":["a","b","c","d"],"answer":"c","rev":1}]