Amazon
Anthropic
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Palo Alto Networks
Salesforce
SAP
VMware
All Vendors

CompTIA Security+ SY0-701 Dumps in PDF

Free CompTIA SY0-701 Real Questions (page: 13)

SY0-701 PDF — 985 Questions

An organization requests a third-party full-spectrum analysis of its supply chain.
Which of the following would the analysis team use to meet this requirement?

  1. Vulnerability scanner
  2. Penetration test
  3. SCAP
  4. Illumination tool

Answer(s): D



A systems administrator deployed a monitoring solution that does not require installation on the endpoints that the solution is monitoring.
Which of the following is described in this scenario?

  1. Agentless solution
  2. Client-based soon
  3. Open port
  4. File-based solution

Answer(s): A



A security analyst is reviewing the source code of an application in order to identify misconfigurations and vulnerabilities.
Which of the following kinds of analysis best describes this review?

  1. Dynamic
  2. Static
  3. Gap
  4. Impact

Answer(s): B



Which of the following agreement types is used to limit external discussions?

  1. BPA
  2. NDA
  3. SLA
  4. MSA

Answer(s): B



A security analyst is evaluating a SaaS application that the human resources department would like to implement. The analyst requests a SOC 2 report from the SaaS vendor.
Which of the following processes is the analyst most likely conducting?

  1. Internal audit
  2. Penetration testing
  3. Attestation
  4. Due diligence

Answer(s): D



Which of the following is used to conceal credit card information in a database log file?

  1. Tokenization
  2. Masking
  3. Hashing
  4. Obfuscation

Answer(s): B



SIMULATION
A systems administrator is configuring a site-to-site VPN between two branch offices. Some of the settings have already been configured correctly. The systems administrator has been provided the following requirements as part of completing the configuration:
-Most secure algorithms should be selected
-All traffic should be encrypted over the VPN
-A secret password will be used to authenticate the two VPN concentrators
INSTRUCTIONS
Click on the two VPN Concentrators to configure the appropriate settings.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.




  1. See Explanation section for answer.

Answer(s): A

Explanation:






An organization recently started hosting a new service that customers access through a web portal. A security engineer needs to add to the existing security devices a new solution to protect this new service.
Which of the following is the engineer most likely to deploy?

  1. Layer 4 firewall
  2. NGFW
  3. WAF
  4. UTM

Answer(s): C



PDF
Viewing page 13 of 125

Share your comments for CompTIA SY0-701 exam with other users:

A
AI Tutor Explanation
8/19/2026 12:31:46 PM

What are incident response processes?
Incident response processes are the organized steps an organization follows to identify, manage, and recover from a security incident.
Typical stages are:

  1. Preparation – Create policies, response plans, communication procedures, tools, backups, and training.
  2. Detection and analysis – Identify suspicious activity through alerts, logs, monitoring, or user reports, then determine whether an incident occurred and assess its scope.
  3. Containment – Limit the incident’s impact, such as isolating an affected system or blocking malicious traffic.
  4. Eradication – Remove the root cause, such as malware, compromised accounts, or unauthorized persistence.
  5. Recovery – Restore systems to normal operation, validate that they are secure, and monitor for recurrence.
  6. Lessons learned / post-incident activity – Document what happened, preserve evidence, update controls, and improve the response plan.

For the page’s Question 209, Detection is the first active response stage listed among the choices. However, many formal incident-response frameworks place Preparation before detection as part of the overall lifecycle.

Ashton-Under-Lyne, United Kingdom
A
AI Tutor Explanation
8/17/2026 10:31:48 AM

Question 142:
Correct answer: A — Determining the root cause of the incident
The post-incident review—also called a lessons-learned review—analyzes what happened and why. Determining the root cause helps the organization fix the underlying weakness and prevent recurrence.
Why the other options are less suitable:

  • B: Developing steps to mitigate risks — May result from the review, but mitigation planning is generally part of remediation and corrective action.
  • C: Validating evidence accuracy — Occurs during the investigation, before the post-incident review.
  • D: Reestablishing system configuration — This is part of recovery and restoration.

A useful sequence is:
  1. Investigate and validate evidence.
  2. Contain and eradicate the threat.
  3. Recover systems.
  4. Conduct a post-incident review, including root-cause analysis.

Ashton-Under-Lyne, United Kingdom
AI Tutor 👋 I’m here to help!