CompTIA SY0-701 Online Practice Questions and Exam Preparation

CompTIA SY0-701 Online Questions & Answers

• Question 221:

  An administrator is creating a secure method for a contractor to access a test environment.

  Which of the following would provide the contractor with the best access to the test environment?

  A. Application server
  B. Jump server
  C. RDP server
  D. Proxy server
  B. Jump server

• Question 222:

  While considering the organization's cloud-adoption strategy, the Chief Information Security Officer sets a goal to outsource patching of firmware, operating systems, and applications to the chosen cloud vendor.

  Which of the following best meets this goal?

  A. Community cloud
  B. PaaS
  C. Containerization
  D. Private cloud
  E. SaaS
  F. laaS
  E. SaaS

  ---

  Explanation

  Software as a Service (SaaS) is the cloud model that best meets the goal of outsourcing the management, including patching, of firmware, operating systems, and applications to the cloud vendor. In a SaaS environment, the cloud provider is responsible for maintaining and updating the entire software stack, allowing the organization to focus on using the software rather than managing its infrastructure.

  References:

  CompTIA Security+ SY0-701 study materials, particularly the domains related to cloud security models.

• Question 223:

  Which of the following uses proprietary controls and is designed to function in harsh environments over many years with limited remote access management?

  A. ICS
  B. Microservers
  C. Containers
  D. IoT
  A. ICS

  ---

  Explanation

  Industrial Control Systems (ICS) are engineered to operate in rugged, mission-critical environments such as manufacturing floors, refineries, gas pipelines, nuclear plants, and water treatment facilities. These systems are designed to remain operational for decades, often with minimal remote-management capability and limited update cycles. ICS architectures frequently use proprietary protocols and controls, many of which were developed long before modern cybersecurity concerns existed.

  Security+ SY0-701 notes that ICS environments include SCADA systems, PLCs, actuators, sensors, and controllers that must function reliably under extreme temperature, pressure, vibration, and industrial stress conditions. Because downtime may impact safety, critical infrastructure, or national security, ICS devices avoid frequent patching and instead rely on isolation, segmentation, and compensating controls.

  Microservers (B) are small, lightweight servers-not rugged systems. Containers (C) are virtualized application environments. IoT devices (D) are consumer or commercial smart devices, not industrial-grade long-lifespan systems.

  Thus, the correct answer is A: ICS.

• Question 224:

  An organization wants to improve the company's security authentication method for remote employees. Given the following requirements:

  1. Must work across SaaS and internal network applications

  2. Must be device manufacturer agnostic

  3. Must have offline capabilities

  Which of the following would be the most appropriate authentication method?

  A. Username and password
  B. Biometrics
  C. SMS verification
  D. Time-based tokens
  D. Time-based tokens

• Question 225:

  A penetration test identifies that an SMBvl Is enabled on multiple servers across an organization. The organization wants to remediate this vulnerability in the most efficient way possible.

  Which of the following should the organization use for this purpose?

  A. GPO
  B. ACL
  C. SFTP
  D. DLP
  A. GPO

  ---

  Explanation

  SMBv1 is an outdated and vulnerable protocol that should be disabled to mitigate risks, such as exploitation by attacks like WannaCry. The question emphasizes efficiency across multiple servers. Option A (GPO) allows an organization to push a policy to disable SMBv1 across all servers in an Active Directory environment with minimal effort, making it the most efficient choice.

  Option B (ACL) refers to Access Control Lists, which manage permissions but aren't designed for protocol configuration.

  Option C (SFTP) is a secure file transfer protocol unrelated to SMBv1 remediation.

  Option D (DLP) focuses on data loss prevention, not protocol vulnerabilities. Thus, A is the correct and most efficient solution.

• Question 226:

  A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data.

  Which of the following would provide the best proof that the hosting provider has met the requirements?

  A. NIST CSF
  B. SOC 2 Type 2 report
  C. CIS Top 20 compliance reports
  D. Vulnerability report
  B. SOC 2 Type 2 report

• Question 227:

  A university employee logged on to the academic server and attempted to guess the system administrators' log-in credentials.

  Which of the following security measures should the university have implemented to detect the employee's attempts to gain access to the administrators' accounts?

  A. Two-factor authentication
  B. Firewall
  C. Intrusion prevention system
  D. User activity logs
  D. User activity logs

  ---

  Explanation

  User activity logs record user actions, including failed login attempts, account access patterns, and unusual behaviors. By reviewing these logs, security teams can detect unauthorized access attempts, such as an employee attempting to guess administrator credentials.

• Question 228:

  A client demands at least 99.99% uptime from a service provider's hosted security services.

  Which of the following documents includes the information the service provider should return to the client?

  A. MOA
  B. SOW
  C. MOU
  D. SLA
  D. SLA

  ---

  Explanation

  A service level agreement (SLA) is a document that defines the level of service expected by a customer from a service provider, indicating the metrics by which that service is measured, and the remedies or penalties, if any, should the agreed-upon levels not be achieved. An SLA can specify the minimum uptime or availability of a service, such as 99.99%, and the consequences for failing to meet that standard. A memorandum of agreement (MOA), a statement of work (SOW), and a memorandum of understanding (MOU) are other types of documents that can be used to establish a relationship between parties, but they do not typically include the details of service levels and performance metrics that an

  SLA does.

  References:

  CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 16-17

• Question 229:

  Which of the following architecture models ensures that critical systems are physically isolated from the network to prevent access from users with remote access privileges?

  A. Segmentation
  B. Virtualized
  C. Air-gapped
  D. Serverless
  C. Air-gapped

• Question 230:

  A security analyst developed a script to automate a trivial and repeatable task.

  Which of the following best describes the benefits of ensuring other team members understand how the script works?

  A. To reduce implementation cost
  B. To identify complexity
  C. To remediate technical debt
  D. To prevent a single point of failure
  D. To prevent a single point of failure

  ---

  Explanation

  Ensuring that other team members understand how a script works is essential to prevent a single point of failure. If only one person knows how the script operates, the organization risks being unable to maintain or troubleshoot it if that person is unavailable. Sharing knowledge ensures continuity and reduces dependence on one individual.

  Reducing implementation cost and remediating technical debt are secondary considerations in this context.

  Identifying complexity is important, but the main benefit is to avoid a single point of failure.