SY0-701 Exam dumps PDF | Exam-Dumps.net (Page: 3)

QUESTION: 17

A company allows customers to upload PDF documents to its public e-commerce website.
Which of the following would a security analyst most likely recommend?

Utilizing attack signatures in an IDS
Enabling malware detection through a UTM
Limiting the affected servers with a load balancer
Blocking command injections via a WAF

Answer(s): B

Explanation:

A) Enabling malware detection through a UTM best addresses protecting file uploads by inspecting content for malware at the network edge, reducing risk from PDFs containing malware before reaching hosts.
B) Incorrect: Blocking command injections via a WAF focuses on input validation for web apps, not general malware in uploaded PDFs; while helpful for input-based attacks, it’s not as comprehensive for uploaded file scanning as a UTM’s malware signature/id-based detection.
C) Limiting affected servers with a load balancer helps availability and segmentation but does not detect or scan uploaded PDFs for malware.
D) Utilizing attack signatures in an IDS detects known network attacks but is not effective for inspecting individual uploaded files for malware.

Reference:

Reveal Solution Next Question

QUESTION: 18

A security analyst developed a script to automate a trivial and repeatable task.
Which of the following best describes the benefits of ensuring other team members understand how the script works?

To reduce implementation cost
To identify complexity
To remediate technical debt
To prevent a single point of failure

Answer(s): D

Explanation:

A) D is correct because ensuring others understand the script reduces reliance on a single individual and avoids a single point of failure, promoting cross-team knowledge and continuity. B) Identifying complexity is useful, but the primary benefit here is resilience through shared understanding, not merely recognizing complexity. C) Remediating technical debt involves addressing long-term quality and maintainability; while helpful, it is not the main reason for team-wide understanding in this scenario. E) The option list has no E; among given options, A) to reduce implementation cost is not as strong as preventing a single point of failure.

Reference:

Reveal Solution Next Question

QUESTION: 19

A company is decommissioning its physical servers and replacing them with an architecture that will reduce the number of individual operating systems.
Which of the following strategies should the company use to achieve this security requirement?

Microservices
Containerization
Virtualization
Infrastructure as code

Answer(s): B

Explanation:

Containerization is the correct approach because it consolidates workloads into isolated containers, reducing the number of separate OS instances while maintaining process isolation and consistent security boundaries. It enables lightweight, portable deployment across hosts, lowering attack surface and simplifying patch management.
A) Microservices - While compatible with containerization, microservices describes an architectural style, not a deployment mechanism to reduce OS instances.
C) Virtualization - Increases the number of OS instances (each VM runs its own OS), opposite of the goal.
D) Infrastructure as code - Automates provisioning, not specifically reducing OS counts or isolation boundaries.

Reference:

Reveal Solution Next Question

QUESTION: 20

An administrator needs to perform server hardening before deployment.
Which of the following steps should the administrator take? (Choose two.)

Disable default accounts.
Add the server to the asset inventory.
Remove unnecessary services.
Document default passwords.
Send server logs to the SIEM.
Join the server to the corporate domain.

Answer(s): A,C

Explanation:

A) Disabling default accounts prevents attackers from using well-known credentials to gain initial access.
C) Removing unnecessary services reduces the attack surface by limiting exploitable functionality.
B) Adding the server to asset inventory is a good practice but not a hardening step per se.
D) Documenting default passwords is risky and counterproductive; change or remove defaults.
E) Sending logs to SIEM aids monitoring, not a hardening action.
F) Joining to a domain is deployment/management but not a direct hardening step; could introduce additional risks if misconfigured.

Reference:

Reveal Solution Next Question

QUESTION: 21

A Chief Information Security Officer would like to conduct frequent, detailed reviews of systems and procedures to track compliance objectives.
Which of the following will be the best method to achieve this objective?

Third-party attestation
Penetration testing
Internal auditing
Vulnerability scans

Answer(s): C

Explanation:

A) Internal auditing provides ongoing, formal reviews of controls and procedures to verify compliance objectives and governance, meeting frequent assessment needs.
B) Penetration testing simulates external attacks to find exploitable flaws, not a broad compliance review.
C) Internal auditing is correct: systematic evaluation of controls, policies, and procedures to ensure compliance with standards and objectives.
D) Vulnerability scans identify known weaknesses but do not assess adherence to policies or governance requirements, nor provide comprehensive compliance evidence.

Reference:

Reveal Solution Next Question

QUESTION: 22

Which of the following security concepts is accomplished with the installation of a RADIUS server?

CIA
AAA
ACL
PEM

Answer(s): B

Explanation:

A RADIUS server provides centralized AAA (Authentication, Authorization, and Accounting) services for network access, enabling verification, policy enforcement, and session tracking. B is correct. A) CIA is a confidentiality, integrity, availability model not specifically implemented by RADIUS. C) ACLs are access control lists used to permit or deny traffic, not the primary function of a RADIUS server. D) PEM refers to privacy-enhanced mail or certificate formats, not a security concept tied to RADIUS functionality.

Reference:

Reveal Solution Next Question

QUESTION: 23

After creating a contract for IT contractors, the human resources department changed several clauses. The contract has gone through three revisions.
Which of the following processes should the human resources department follow to track revisions?

Version validation
Version changes
Version updates
Version control

Answer(s): D

Explanation:

A clear version control process tracks, documents, and audits all revisions to contracts, enabling rollback and accountability across multiple revisions. A) Version validation is not a standard term for tracking changes. B) Version changes implies changes occur but lacks the formal mechanism and history tracking. C) Version updates suggests updating but not preserving a complete change history. D) Version control provides a structured system (check-in/check-out, changelogs, permissions) to manage contract revisions across three iterations.

Reference:

Reveal Solution Next Question

QUESTION: 24

The executive management team is mandating the company develop a disaster recovery plan. The cost must be kept to a minimum, and the money to fund additional internet connections is not available.
Which of the following would be the best option?

Hot site
Cold site
Failover site
Warm site

Answer(s): B

Explanation:

A cold site provides DR capability at the lowest ongoing cost by providing space and basic infrastructure without active systems, meeting the requirement to minimize costs and without funding extra internet connections.
A) Hot site is expensive with immediate readiness and active systems, not aligning with cost constraints.
C) Failover site is not a standard DR option and could imply dynamic switching; it’s not the commonly defined DR facility type.
D) Warm site has partial readiness and some pre-installed equipment, but typically costs more than a cold site and may require bandwidth setup.

Reference:

Reveal Solution Next Question

CompTIA SY0-701 Exam (page: 3) CompTIA Security+ Updated on: 31-Mar-2026

QUESTION: 17

Explanation:

Reference:

QUESTION: 18

Explanation:

Reference:

QUESTION: 19

Explanation:

Reference:

QUESTION: 20

Explanation:

Reference:

QUESTION: 21

Explanation:

Reference:

QUESTION: 22

Explanation:

Reference:

QUESTION: 23

Explanation:

Reference:

QUESTION: 24

Explanation:

Reference:

CompTIA SY0-701 Exam (page: 3)
CompTIA Security+
Updated on: 31-Mar-2026