CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 141:

  A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format.

  Which of the following should the administrator apply to the site recovery resource group?

  A. RBAC
  B. ACL
  C. SAML
  D. GPO
  A. RBAC

  ---

  Explanation

  RBAC stands for Role-Based Access Control, which is a method of restricting access to data and resources based on the roles or responsibilities of users. RBAC simplifies the management of permissions by assigning roles to users and granting access rights to roles, rather than to individual users. RBAC can help enforce the principle of least privilege and reduce the risk of unauthorized access or data leakage. The other options are not as suitable for the scenario as RBAC, as they either do not prevent access based on responsibilities, or do not apply a simplified format.

  References:

  CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 133

• Question 142:

  A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network.

  Which of the following should be configured on the existing network infrastructure to best prevent this activity?

  A. Port security
  B. Web application firewall
  C. Transport layer security
  D. Virtual private network
  A. Port security

• Question 143:

  A company is performing a risk assessment on new software the company plans to use.

  Which of the following should the company assess during this process?

  A. Software vulnerabilities
  B. Cost-bene t analysis
  C. Ongoing monitoring strategies
  D. Network infrastructure compatibility
  A. Software vulnerabilities

• Question 144:

  A security administrator is working to find a cost-effective solution to implement certificates for a large number of domains and subdomains owned by the company.

  Which of the following types of certificates should the administrator implement?

  A. Wildcard
  B. Client certificate
  C. Self-signed
  D. Code signing
  A. Wildcard

• Question 145:

  The security team notices that the Always On VPN solution sometimes fails to connect. This leaves remote users unprotected because they cannot connect to the on-premises web proxy.

  Which of the following changes will best provide web protection in this scenario?

  A. Implement network access control.
  B. Configure the local gateway to point to the VPN.
  C. Create a public NAT to the on-premises proxy.
  D. Install a host-based content filtering solution.
  D. Install a host-based content filtering solution.

• Question 146:

  Which of the following is the greatest advantage that network segmentation provides?

  A. End-to-end encryption
  B. Decreased resource utilization
  C. Enhanced endpoint protection
  D. Configuration enforcement
  E. Security zones
  E. Security zones

  ---

  Explanation

  The greatest advantage of network segmentation is the creation of security zones, which isolate systems into separate logical or physical network sections. According to CompTIA Security+ SY0-701, segmentation is a foundational security architecture practice used to reduce the attack surface, restrict lateral movement, enforce least privilege, and contain breaches. By dividing the network into zones-such as DMZ, internal, restricted, and guest-administrators can apply tailored access controls, firewall rules, IDS/IPS placement, and monitoring boundaries.

  Segmentation provides defense-in-depth by preventing attackers from reaching critical systems even if they compromise a less-secure device. It also limits broadcast domains and improves traffic visibility. End-to-end encryption (A) protects confidentiality but is unrelated to segmentation. Decreased resource utilization (B) is not a primary benefit. Enhanced endpoint protection (C) applies to host controls, not network topology. Configuration enforcement (D) is a benefit of centralized management, not segmentation.

  Therefore, the correct answer is Security zones, the core outcome and highest-value advantage of segmentation.

• Question 147:

  A malicious actor is trying to access sensitive nancial information from a company's database by intercepting and reusing log-in credentials.

  Which of the following attacks is the malicious actor attempting?

  A. SQL injection
  B. On-path
  C. Brute-force
  D. Password spraying
  B. On-path

• Question 148:

  A security engineer is installing an IPS to block signature-based attacks in the environment.

  Which of the following modes will best accomplish this task?

  A. Monitor
  B. Sensor
  C. Audit
  D. Active
  D. Active

  ---

  Explanation

  To block signature-based attacks, the Intrusion Prevention System (IPS) must be in active mode. In this mode, the IPS can actively monitor and block malicious traffic in real time based on predefined signatures. This is the best mode to prevent known attack types from reaching the internal network.

  Monitor mode and sensor mode are typically passive, meaning they only observe and log traffic without actively blocking it.

  Audit mode is used for review purposes and does not actively block traffic.

• Question 149:

  Which of the following considerations is the most important regarding cryptography used in an IoT device?

  A. Resource constraints
  B. Available bandwidth
  C. The use of block ciphers
  D. The compatibility of the TLS version
  A. Resource constraints

• Question 150:

  Which of the following elements of digital forensics should a company use if it needs to ensure the integrity of evidence?

  A. Preservation
  B. E-discovery
  C. Acquisition
  D. Containment
  A. Preservation

  ---

  Explanation

  Preservation is the process in digital forensics that ensures the integrity of evidence by maintaining it in its original, unaltered state. This involves safeguarding data against modification or tampering throughout the investigation process, ensuring that the evidence remains reliable and admissible in court if needed.