Given a scenario, select mitigation techniques or controls to secure an enterprise environment.
45 practice questions under this official exam objective (SY0-701), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
45 total · page 2 of 3Compensating Controls for a Legacy System?
Disabling unneeded services and placing a firewall in front of a business-critical legacy system are compensating controls: alternative safeguards use
When Should an Engineer Decommission a Network Device?
Decommissioning a network device is the correct recommendation when the device cannot meet security requirements, such as being configured with cleart
Segmentation vs Isolation for Customer Data
This SY0-701 scenario asks how to keep customer data on the network while blocking access from the main corporate LAN. The correct control is network
What Should Be Done First When Deploying a DLP Solution?
When deploying a DLP solution to stop customer data exfiltration, the first step is to apply classifications to the data so the tool knows what to pro
Bastion Host for Secure Administrative Access
A bastion host is the most secure method for providing administrative access to internal resources while minimizing traffic through the security bound
Jailbreaking vs. Side Loading for Smartphone Features
This question distinguishes between jailbreaking and side loading by focusing on the ability to enable new system features beyond just installing unau
Identifying Impersonation vs Whaling in Social Engineering
This question distinguishes between impersonating a high-profile executive and the specific attack vector of whaling based on the target's identity. I
Securing Credit Card Data: Masking vs Tokenization
This question tests the distinction between data obfuscation techniques for PCI DSS compliance. The correct answer is masking, which hides sensitive d
Securing End-of-Life Systems with Network Isolation
When a critical system runs an unsupported OS, network segmentation via an isolated VLAN is the most effective mitigation to increase enterprise secur
Mitigating Malformed Input Attacks in Web Products
Fuzzing is the most effective practice for detecting vulnerabilities caused by malformed or invalid inputs by actively testing how a system handles un
Which Solution Mitigates Sensitive Data Exfiltration Risk?
This SY0-701 scenario asks which solution mitigates the risk of sensitive data exfiltration after a data classification initiative. The page establish
Why Should Root Cause Analysis Be Part of Incident Response?
Root cause analysis during incident response exists to find the underlying weakness that allowed an incident to occur so the same failure can be preve
Identifying Shadow IT in Enterprise Scenarios
This question tests the identification of Shadow IT, defined as the use of unauthorized systems or services by employees. The correct answer is D beca
Preventing Insider Record Tampering With Permission Restrictions
This scenario tests how to prevent a malicious marketing insider from altering company records and moving funds. The answer is A: permission restricti
How to Limit SaaS Document Access by High-Risk Country?
A geolocation policy is the most effective control when a SaaS application must prevent legal documents from being accessed from high-risk countries.
How Do You Stop a Visitor Laptop From Using a Lobby Jack?
A visitor connecting a laptop to a lobby network jack is an unauthorized physical access attempt that switch port security is designed to stop. This p
Best Ways to Ensure Only Authorized Personnel Access a Secure Facility?
This SY0-701 question asks you to choose two controls that ensure only authorized personnel can enter a secure facility. The correct answers are badge
What Should Security Teams Do Before Guest Devices Access Corporate Resources?
In a quarantine subnet for guest devices, compliance attestation is the control that verifies a device meets corporate security policy before it can r
How Does Patching Switch OS, Servers, and Endpoint Definitions Prevent Attacks?
Patching switch OS, server OS, and endpoint definitions closes vulnerabilities that already have fixes. This page establishes that those update action
Most Cost-Effective Way to Prevent Client Data Theft from Decommissioned Laptops?
Decommissioned laptops can leak client data, so this page establishes wiping (A) as the most cost-effective sanitization method to reduce theft risk.