SY0-701 Threats, Vulnerabilities, and Mitigations Practice Question
Exhibit
Configuration review output from a new network camera deployment: Interface status: 0.0.0.0:8080 LISTEN camera-web 0.0.0.0:554 LISTEN rtsp-stream Admin banner: Firmware version 1.0.3 Admin login: enabled Password policy: not enforced Firewall ACL: allow tcp any any eq 8080 allow tcp any any eq 554
Based on the exhibit, what security issue is most likely present?
⚠ Common exam trap
The trap here is that candidates may focus on the presence of default credentials or outdated firmware as obvious vulnerabilities, but the exhibit does not provide evidence of those—instead, the clear misconfiguration is the service exposure, which is a distinct and common threat in IoT and network device security.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Exposed service, because management and streaming ports are listening on all interfaces and allowed from anywhere.
The exhibit shows that both the management interface (TCP 443) and the streaming interface (TCP 554) are bound to 0.0.0.0 (all interfaces) and the firewall rules allow traffic from 0.0.0.0/0 (any source). This exposes the camera's web management and RTSP streaming services to the entire internet, making it vulnerable to unauthorized access, reconnaissance, and potential exploitation. An exposed service of this nature is a common entry point for attackers to compromise IoT devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Weak permissions, because the camera streams video to multiple ports.
Why it's wrong here
Weak permissions concern incorrect access control lists on files, directories, or system objects, not the number of ports a service listens on. The exhibit shows network exposure: management and streaming services bound to 0.0.0.0 and firewall rules permitting connections from any source. That is a service-exposure problem, not a permissions misconfiguration. Streaming to multiple ports increases attack surface, but it does not demonstrate that file or object permissions are weak.
- ✗
Default credentials, because the admin login is enabled.
Why it's wrong here
An enabled administrative account is a standard configuration for initial device access and does not by itself prove that the password is still the factory default. Exploitation of default credentials requires evidence that the username and password match a known vendor default, such as admin/admin or root/12345. The exhibit only shows that the admin login is active, so concluding default credentials is an unsupported assumption. Without login configuration details or a known default credential string, the correct issue remains the exposed network service.
- ✓
Exposed service, because management and streaming ports are listening on all interfaces and allowed from anywhere.
Why this is correct
The main issue is exposed service. The camera-web and RTSP services listen on 0.0.0.0, which means all interfaces, and the ACL allows any source to connect. That exposes the device to the network far beyond the intended management scope, creating an easy attack path.
- ✗
Outdated component, because firmware version 1.0.3 is listed.
Why it's wrong here
A firmware version such as 1.0.3 is simply an identifier; without a vendor advisory, CVE, or a published list of known-vulnerable releases, you cannot claim it is outdated. A lower version number does not automatically mean a security risk—the device might have no disclosed vulnerabilities or may be patched through another mechanism. The exhibit's evidence points to an exposure issue (services on 0.0.0.0 and permissive ACLs), not to a component version risk. The mere presence of a version number does not support a finding of outdated components.
Go deeper
Related to this question
Learn chapter
Network-Based Attacks
Key term
Exploitation
Exploitation is the act of using a vulnerability or weakness in a system, network, or application to gain unauthorized access, cause damage, or extract data.
Key term
TCP
TCP is a connection-oriented transport layer protocol that ensures reliable, ordered, and error-checked delivery of data between applications over IP networks.
About these practice questions
One of 1,013 original SY0-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.