Given a scenario, select mitigation techniques or controls to secure an enterprise environment.
45 practice questions under this official exam objective (SY0-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
45 total · page 1 of 3How Should a Critical App on a Legacy Server Be Handled?
When a critical business application runs on a legacy server, CompTIA SY0-701 doctrine favors isolating the unsupported system from the rest of the ne
Mobile Data Security: Containerization vs Remote Wipe
This question explores the best method to secure mobile data when credentials are compromised, contrasting reactive remote wipe with proactive contain
PKI Cleanup: Update CRL vs Patch the CA
In a penetration test that abused internal PKI to reach domain administrator rights, the cleanup-phase answer is to update the CRL and revoke the craf
Red Team vs Blue Team Vulnerability Exploitation
This question distinguishes between offensive and defensive security teams to identify which group is best suited for exploiting identified vulnerabil
SDLC Inclusion: Branch Protection Requirements
This question tests the integration of security controls within the Software Development Life Cycle (SDLC), specifically focusing on version control p
Legacy Systems Security Concerns: Vendor Support vs Insecure Protocols
This question addresses the primary security risk of legacy systems in production, distinguishing between technical vulnerabilities like insecure prot
Keylogger Found in User File: First SOC Action?
This SY0-701 scenario shows a keylogger capture containing a Gmail address and a cleartext password; the first action should be to reimage the infecte
Remediation for Exploited Internal PKI Flaw
This question addresses the remediation of a compromised internal Public Key Infrastructure (PKI) where domain administrator rights were gained via cr
What control type is segmenting a legacy server into a private network?
This SY0-701 item asks you to classify network segmentation of a critical legacy server by security-control type. The answer is Compensating (C), beca
What Would Have Prevented the VPN Appliance Admin Login?
A VPN appliance's local administrator account was used unexpectedly to reach its remote management interface, and the question asks which control woul
Continuous Risk Treatment: Why an Email Gateway Mitigates Phishing
This SY0-701 practice question asks which control is a treatment strategy for a continuous risk; the email gateway that blocks phishing attempts (A) i
Phishing vs Brand Impersonation: Email Credential Theft
This scenario describes a classic phishing attack where an employee is tricked into revealing credentials via a fraudulent email link. The correct ans
What Should Be Done First Before a Web Server Goes Live?
This SY0-701 scenario asks for the first security action before a new web server is exposed; the correct choice is to harden the virtual host (A), not
Securing Web App Port 443: Best Mitigations
This question asks for the best advanced network security capabilities to secure a web application on port 443, focusing on mitigating attack surface
New Server Hardening: The First Step
Securing a newly deployed server starts with attack surface reduction: close unnecessary service ports before updating software, adding ACL entries, o
Best Responses to a CEO Impersonation Smishing Attack?
A fraudulent CEO impersonation text demanding gift cards is a classic smishing attack against employee judgment, not the executive's device. This page
Mitigating URL Shortener Phishing Campaigns
This scenario addresses the best mitigation technique for a phishing campaign using URL shorteners redirecting to dead domains. Blocking the URL short
Security Camera Deployment: Why Configure the Correct VLAN?
Deploying a new security camera as an IoT device requires network segmentation. This page explains why configuring the correct VLAN (A) is the correct
Jump Server for Securing Internal Resources
A jump server (or bastion host) is the correct solution for creating an added layer of security by preventing unauthorized access to internal company
What best mitigates a legacy IoT OS vulnerability quickly?
A newly identified network access vulnerability in the OS of legacy IoT devices cannot be patched if the devices are unsupported. This SY0-701 study p