SY0-701 Exam Questions and Answers | Exam-Dumps (Page: 15)

QUESTION: 113

Which of the following would a systems administrator follow when upgrading the firmware of an organization’s router?

Software development life cycle
Risk tolerance
Certificate signing request
Maintenance window

Answer(s): D

Explanation:

A maintenance window is a pre-scheduled period when system or network changes, updates, or repairs are performed. By using a designated maintenance window, a systems administrator can minimize disruption to the organization’s operations, as this window is typically chosen during a time when network usage is lower, reducing the impact on users.

Reveal Solution Next Question

QUESTION: 114

The security team has been asked to only enable host A (10.2.2.7) and host B (10.3.9.9) to the new isolated network segment (10.9.8.14) that provides access to legacy devices.
Access from all other hosts should be blocked. Which of the following entries would need to be added on the firewall?

Answer(s): C

Explanation:

Permit 10.2.2.7/32 to 10.9.8.14/27: This rule allows host A (10.2.2.7) specific access to the isolated network (10.9.8.14/27).
Permit 10.3.9.9/32 to 10.9.8.14/27: This rule allows host B (10.3.9.9) specific access to the isolated network (10.9.8.14/27).
Deny 0.0.0.0/0 to 10.9.8.14/27: This rule blocks access from all other IPs to the isolated network (10.9.8.14/27).

Reveal Solution Next Question

QUESTION: 115

SIMULATION
A security analyst is creating the first draft of a network diagram for the company’s new customer-facing payment application that will be hosted by a third-party cloud service provider.

INSTRUCTIONS
Click the ? to select the appropriate icons to create a secure, redundant web application. Then use the dropdown menu to select the appropriate subnet type. Every space in the diagram must be filled.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

See Explanation section for answer.

Answer(s): A

Explanation:

The diagram should be filled in the way shown below.

WAF (Web Application Firewall) at the top to handle incoming traffic from the Internet Gateway.
Load Balancer for distributing traffic between instances.
Instances for handling the application workloads, ensuring multiple instances for redundancy.
Autoscaling Instance to adjust the number of instances based on demand dynamically. In the middle of the diagram, you should select Private Subnet in the dropdown menu.
This choice is appropriate because the elements in the lower section, especially the Database instances, are part of the private subnet. Placing databases in a private subnet adds an additional layer of security, as it prevents direct internet access to sensitive data. The private subnet is also typically used for backend resources that don’t need to be exposed publicly.

Reveal Solution Next Question

QUESTION: 116

A systems administrator needs to ensure the secure communication of sensitive data within the organization’s private cloud. Which of the following is the best choice for the administrator to implement?

IPSec
SHA-1
RSA
TGT

Answer(s): A

Explanation:

IPSec (Internet Protocol Security) is a suite of protocols designed to secure IP communications by authenticating and encrypting each IP packet in a communication session. It is widely used for securing data transfer in networks, including private clouds, by providing confidentiality, integrity, and authenticity of data.

Reveal Solution Next Question

QUESTION: 117

Which of the following should an internal auditor check for first when conducting an audit of the organization’s risk management program?

Policies and procedures
Asset management
Vulnerability assessment
Business impact analysis

Answer(s): A

Explanation:

Policies and procedures form the foundation of an organization's risk management program. They establish the framework and guidelines for managing risks across the organization, including roles, responsibilities, and the approach for identifying, assessing, and mitigating risks.
Without well-defined policies and procedures, it would be challenging to assess other areas of risk management effectively, as they are all built upon these foundational documents.
Asset management, vulnerability assessment, and business impact analysis are critical components of a risk management program, but they should follow a review of policies and procedures. These documents set the standards and processes that the organization uses to manage assets, assess vulnerabilities, and conduct impact analyses.

Reveal Solution Next Question

QUESTION: 118

Which of the following activities are associated with vulnerability management? (Choose two.)

Reporting
Prioritization
Exploiting
Correlation
Containment
Tabletop exercise

Answer(s): A,B

Explanation:

Reporting involves documenting and communicating the findings of vulnerability scans and assessments. This allows stakeholders to be informed about existing vulnerabilities and track remediation efforts.
Prioritization is the process of ranking vulnerabilities based on their severity, impact, and exploitability, helping the organization address the most critical vulnerabilities first.

Reveal Solution Next Question

QUESTION: 119

An administrator wants to perform a risk assessment without using proprietary company information. Which of the following methods should the administrator use to gather information?

Network scanning
Penetration testing
Open-source intelligence
Configuration auditing

Answer(s): C

Explanation:

Open-source intelligence (OSINT) involves collecting information from publicly available sources, such as websites, social media, news articles, and other publicly accessible databases. OSINT allows an administrator to gather valuable information about potential risks without using any proprietary or internal company information.

Reveal Solution Next Question

QUESTION: 120

A systems administrator is concerned about vulnerabilities within cloud computing instances. Which of the following is most important for the administrator to consider when architecting a cloud computing environment?

SQL injection
TOC/TOU
VM escape
Tokenization
Password spraying

Answer(s): C

Explanation:

In cloud computing, virtual machines (VMs) share physical resources. VM escape is a critical vulnerability where an attacker could break out of a virtualized environment and access the host system or other VMs running on the same physical hardware. This would pose a significant security risk, as it could allow attackers to compromise the entire cloud infrastructure.

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 15) CompTIA Security+ Updated on: 06-Dec-2025

QUESTION: 113

Explanation:

QUESTION: 114

Explanation:

QUESTION: 115

Explanation:

QUESTION: 116

Explanation:

QUESTION: 117

Explanation:

QUESTION: 118

Explanation:

QUESTION: 119

Explanation:

QUESTION: 120

Explanation:

CompTIA SY0-701 Exam (page: 15)
CompTIA Security+
Updated on: 06-Dec-2025