SY0-701 Exam Questions and Answers | Exam-Dumps (Page: 12)

QUESTION: 89

A security team is addressing a risk associated with the attack surface of the organization's web application over port 443. Currently, no advanced network security capabilities are in place.
Which of the following would be best to set up? (Choose two.)

NIDS
Honeypot
Certificate revocation list
HIPS
WAF
SIEM

Answer(s): A,E

Reveal Solution Next Question

QUESTION: 90

A systems administrator would like to create a point-in-time backup of a virtual machine.
Which of the following should the administrator use?

Replication
Simulation
Snapshot
Containerization

Answer(s): C

Reference:

Reveal Solution Next Question

QUESTION: 91

A security administrator notices numerous unused, non-compliant desktops are connected to the network.
Which of the following actions would the administrator most likely recommend to the management team?

Monitoring
Decommissioning
Patching
Isolating

Answer(s): B

Reference:

Reveal Solution Next Question

QUESTION: 92

Which of the following is a common data removal option for companies that want to wipe sensitive data from hard drives in a repeatable manner but allow the hard drives to be reused?

Sanitization
Formatting
Degaussing
Defragmentation

Answer(s): A

Reference:

Reveal Solution Next Question

QUESTION: 93

An organization wants to improve the company's security authentication method for remote employees. Given the following requirements:

Must work across SaaS and internal network applications

Must be device manufacturer agnostic

Must have offline capabilities

Which of the following would be the most appropriate authentication method?

Username and password
Biometrics
SMS verification
Time-based tokens

Answer(s): D

Reference:

Reveal Solution Next Question

QUESTION: 94

A security officer is implementing a security awareness program and has placed security-themed posters around the building and assigned online user training.
Which of the following will the security officer most likely implement?

Password policy
Access badges
Phishing campaign
Risk assessment

Answer(s): C

Reference:

Reveal Solution Next Question

QUESTION: 95

A malicious update was distributed to a common software platform and disabled services at many organizations.
Which of the following best describes this type of vulnerability?

DDoS attack
Rogue employee
Insider threat
Supply chain

Answer(s): D

Reference:

Reveal Solution Next Question

QUESTION: 96

A company web server is initiating outbound traffic to a low-reputation, public IP on non-standard pat. The web server is used to present an unauthenticated page to clients who upload images the company. An analyst notices a suspicious process running on the server hat was not created by the company development team.
Which of the following is the most likely explanation for his security incident?

A web shell has been deployed to the server through the page.
A vulnerability has been exploited to deploy a worm to the server.
Malicious insiders are using the server to mine cryptocurrency.
Attackers have deployed a rootkit Trojan to the server over an exposed RDP port.

Answer(s): A

Reference:

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 12) CompTIA Security+ Updated on: 15-Feb-2026

QUESTION: 89

QUESTION: 90

Reference:

QUESTION: 91

Reference:

QUESTION: 92

Reference:

QUESTION: 93

Reference:

QUESTION: 94

Reference:

QUESTION: 95

Reference:

QUESTION: 96

Reference:

CompTIA SY0-701 Exam (page: 12)
CompTIA Security+
Updated on: 15-Feb-2026