Home / CompTIA / SY0-701

Question list

List of questions

Question 1

(5)

Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?

Question 2

(5)

Which of the following is used to add extra complexity before using a one-way data transformation algorithm?

Question 3

(3)

Which of the following has been implemented when a host-based firewall on a legacy Linux system allows connections from only specific internal IP addresses?

Question 4

(3)

The management team notices that new accounts that are set up manually do not always have correct access or permissions. Which of the following automation techniques should a systems administrator

Question 5

(5)

Which of the following involves an attempt to take advantage of database misconfigurations?

Question 6

(4)

An organization would like to store customer data on a separate part of the network that is not accessible to users on the main corporate network. Which of the following should the administrator use

Question 7

(1)

Which of the following is used to quantitatively measure the criticality of a vulnerability?

Question 8

(4)

A technician is opening ports on a firewall for a new system being deployed and supported by a SaaS provider. Which of the following is a risk in the new system?

Question 9

(4)

Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?

Question 10

(4)

A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis. Which of the following types of controls is the company setting up?

Question 124 - SY0-701 discussion

A newly identified network access vulnerability has been found in the OS of legacy loT devices. Which of the following would best mitigate this vulnerability quickly?

Insurance

Patching

Segmentation

Replacement

Show Answer

asked 02/10/2024

Synathia Imafidon

41 questions

Your answer: A B C D

4 comments

Sorted by

Youssef Aaddi

Edited 15 days ago

Voted C

C. Segmentation Since these are legacy IoT devices, patching may not be immediately available or possible, and replacing them might take time. Segmentation is a quick and effective approach to isolate these vulnerable devices from the rest of the network, limiting the potential impact of the vulnerability. This containment strategy minimizes exposure while a more permanent solution, such as patching or replacement, is pursued.

Gordon Summerlin

Edited 17 days ago

Voted C

I believe that the answer is C. If it is *legacy* IoT, that means that support, for said devices, could no longer be available. Hence patches for these devices may not exist or the latest patch available is extremely out of date.

Danehun

Edited one month ago

Voted B

I think answer B correct

sewaknijjar