SY0-701 Exam Questions and Answers | Exam-Dumps (Page: 17)

QUESTION: 129

An organization plans to expand its operations internationally and needs to keep data at the new location secure. The organization wants to use the most secure architecture model possible. Which of the following models offers the highest level of security?

Cloud-based
Peer-to-peer
On-premises
Hybrid

Answer(s): C

Explanation:

An on-premises architecture provides the highest level of control over data security, as the organization manages its own hardware, software, and network infrastructure directly. This setup enables the organization to implement strict access controls, customize security measures according to regulatory requirements, and avoid some of the risks associated with data transmission and storage in cloud environments, particularly for sensitive or proprietary information.

Reveal Solution Next Question

QUESTION: 130

Which of the following is the most relevant reason a DPO would develop a data inventory?

To manage data storage requirements better
To determine the impact in the event of a breach
To extend the length of time data can be retained
To automate the reduction of duplicated data

Answer(s): B

Explanation:

A data inventory provides a comprehensive overview of what data the organization holds, where it is stored, and its sensitivity. This information is crucial for assessing the potential impact of a data breach, as it allows the DPO to identify which data would be affected and the associated risks. Additionally, it aids in compliance with data protection regulations by ensuring that sensitive data is adequately managed and protected.

Reveal Solution Next Question

QUESTION: 131

Which of the following cryptographic solutions protects data at rest?

Digital signatures
Full disk encryption
Private key
Steganography

Answer(s): B

Explanation:

Full disk encryption (FDE) secures data at rest by encrypting the entire storage drive, ensuring that data is protected when the system is powered off or if the drive is accessed without authorization. This approach is commonly used to protect sensitive data stored on devices like laptops, servers, and storage media.

Reveal Solution Next Question

QUESTION: 132

Which of the following should an organization use to protect its environment from external attacks conducted by an unauthorized hacker?

ACL
IDS
HIDS
NIPS

Answer(s): D

Explanation:

A Network Intrusion Prevention System (NIPS) actively monitors network traffic and can detect and block malicious activities in real-time, helping to prevent external attacks. Unlike IDS, which only detects intrusions, NIPS can take immediate action to stop threats, making it a strong defensive measure against unauthorized external attacks.

Reveal Solution Next Question

QUESTION: 133

Which of the following would enable a data center to remain operational through a multiday power outage?

Generator
Uninterruptible power supply
Replication
Parallel processing

Answer(s): A

Explanation:

A generator can provide continuous power for extended periods during a power outage, as long as it has sufficient fuel. Unlike an Uninterruptible Power Supply (UPS), which is typically used to bridge short power interruptions, a generator is designed to sustain operations over longer durations, making it ideal for keeping a
data center functional during a multiday outage.

Reveal Solution Next Question

QUESTION: 134

A company installed cameras and added signs to alert visitors that they are being recorded. Which of the following controls did the company implement? (Choose two.)

Directive
Deterrent
Preventive
Detective
Corrective
Technical

Answer(s): B,D

Reveal Solution Next Question

QUESTION: 135

Which of the following is the best way to securely store an encryption key for a data set in a manner that allows multiple entities to access the key when needed?

Public key infrastructure
Open public ledger
Public key encryption
Key escrow

Answer(s): D

Explanation:

Key escrow involves storing the encryption key with a trusted third party or system that securely retains the key and grants access to authorized entities as needed. This approach ensures that multiple authorized parties can access the key in a controlled and secure manner, making it a reliable solution for shared access requirements.

Reveal Solution Next Question

QUESTION: 136

For which of the following reasons would a systems administrator leverage a 3DES hash from an installer file that is posted on a vendor’s website?

To test the integrity of the file
To validate the authenticity of the file
To activate the license for the file
To calculate the checksum of the file

Answer(s): A

Explanation:

A hash (such as one generated using 3DES) is used to verify that the file has not been altered or corrupted during download. By comparing the hash of the downloaded file with the one provided by the vendor, the administrator can confirm the file's integrity.

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 17) CompTIA Security+ Updated on: 06-Dec-2025

QUESTION: 129

Explanation:

QUESTION: 130

Explanation:

QUESTION: 131

Explanation:

QUESTION: 132

Explanation:

QUESTION: 133

Explanation:

QUESTION: 134

QUESTION: 135

Explanation:

QUESTION: 136

Explanation:

CompTIA SY0-701 Exam (page: 17)
CompTIA Security+
Updated on: 06-Dec-2025