Security+ SY0-701 ACTUAL EXAM QUESTIONS WITH COMPLETE SOLUTION GUIDE (100% VERIFIED)
Security+
LATEST VERSION SY0-701
2025!!
Study online at https://quizlet.com/_ewpopn
1. Which of the follow-Answer: A E
ing must be consid- Explanation:
ered when design- A high-availability network is a network that is designed to minimize down-
ing a high-availabil-
time and ensure continuous operation of critical services and applications.
ity network? (SelectTo achieve this goal, a high-availability network must consider two important
two). factors: ease of recovery and attack surface. Ease of recovery refers to the
ability of a network to quickly restore normal functionality after a failure,
A. Ease of recovery disruption, or disaster. A high-availability network should have mechanisms
B. Ability to patch such as redundancy, failover, backup, and restore to ensure that any single
C. Physical isola- point of failure does not cause a complete network outage. A high-availability
tion network should also have procedures and policies for incident response, dis-
D. Responsiveness aster recovery, and business continuity to minimize the impact of any network
E. Attack surface issue on the organization's operations and reputation. Attack surface refers
F. Extensible au- to the exposure of a network to potential threats and vulnerabilities. A high
thentication availability network should have measures such as encryption, authentication,
authorization, firewall, intrusion detection and prevention, and patch man-
agement to protect the network from unauthorized access, data breaches,
malware, denial-of-service attacks, and other cyberattacks. A high-availability
network should also have processes and tools for risk assessment, threat
intelligence, vulnerability scanning, and penetration testing to identify and
mitigate any weaknesses or gaps in the network security. References: CompTIA
Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 4: Architecture and
Design, pages 164-1651. CompTIA Security+ Certification Kit: Exam SY0-701,
7th Edition, Chapter 4: Architecture and Design, pages 164-1652.
2. A company needs Answer: A
to provide admin- Explanation:
istrative access to A bastion host is a special-purpose server that is designed to withstand attacks
internal resources and provide secure access to internal resources. A bastion host is usually
while minimizing placed on the edge of a network, acting as a gateway or proxy to the internal
the traffic allowed network. A bastion host can be configured to allow only certain types of traffic,
through the securi- such as SSH or HTTP, and block all other traffic. A bastion host can also run
, Security+ SY0-701
Study online at https://quizlet.com/_ewpopn
ty boundary. Which security software such as firewalls, intrusion detection systems, and antivirus
of the following programs to monitor and filter incoming and outgoing traffic. A bastion host
methods is most can provide administrative access to internal resources by requiring strong
secure? authentication and encryption, and by logging all activities for auditing pur-
poses. A bastion host is the most secure method among the given options
A. Implementing a because it minimizes the traffic allowed through the security boundary and
bastion host provides a single point of control and defense. A bastion host can also isolate
B. Deploying a the internal network from direct exposure to the internet or other untrusted
perimeter network networks, reducing the attack surface and the risk of compromise.
C. Installing a WAF
D. Utilizing single
sign-on
3. A company is dis- Answer: A
carding a classi- Explanation:
fied storage array The company should request a certification from the vendor that confirms
and hires an out- the storage array has been disposed of securely and in compliance with the
side vendor to com- company's policies and standards. A certification provides evidence that the
plete the disposal. vendor has followed the proper procedures and methods to destroy the
Which of the follow- classified data and prevent unauthorized access or recovery. A certification may
ing should the com- also include details such as the date, time, location, and method of disposal,
pany request from as well as the names and signatures of the personnel involved. References:
the vendor? CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter
3, page 1441
A. Certification
B. Inventory list
C. Classification
D. Proof of owner-
ship
4. A systems adminis- Answer: C
trator works for a Explanation:
, Security+ SY0-701
Study online at https://quizlet.com/_ewpopn
local hospital and Patient data in a hospital setting typically falls under the category of sensitive
needs to ensure pa- data. Sensitive data classifications are used to indicate information that re-
tient data is pro- quires a higher level of protection due to its confidentiality, integrity, and/or
tected and secure. availability concerns. Patient data, including medical records, diagnoses, treat-
Which of the fol- ments, and personal information, is considered sensitive and should be treat-
lowing data classi- ed as such to ensure compliance with privacy regulations like HIPAA (Health
fications should be Insurance Portability and Accountability Act) in the United States or similar
used to secure pa- regulations in other countries.
tient data?
A. Private
B. Critical
C. Sensitive
D. Public
5. Which of the fol- Answer: C
lowing is used to Explanation:
protect a comput- Endpoint detection and response (EDR) is a technology that monitors and
er from viruses, analyzes the activity and behavior of endpoints, such as computers, laptops,
malware, and Tro- mobile devices, and servers. EDR can help to detect and prevent malicious
jans being installed software, such as viruses, malware, and Trojans, from infecting the endpoints
and moving lateral- and spreading across the network. EDR can also provide visibility and response
ly across the net- capabilities to contain and remediate threats. EDR is different from IDS, which
work? is a network-based technology that monitors and alerts on network traffic
anomalies. EDR is also different from ACL, which is a list of
A. IDS rules that control the access to network resources. EDR is also different from
B. ACL NAC, which is a technology that enforces policies on the network access of
C. EDR devices based on their identity and compliance status. References: CompTIA
D. NAC Security+ Study Guide: Exam SY0-701, 9th Edition, page 2561
6. During a securi- Answer: B
ty incident, the Explanation:
, Security+ SY0-701
Study online at https://quizlet.com/_ewpopn
security operations --"access-list inbound" indicates that this rule is being applied to an inbound
team identified sus- access list.
tained network traf- --"deny" specifies that the traffic matching this rule should be denied.
fic from a mali- --"ig" (which might represent an interface group or interface) is not explicitly
cious IP address: defined in the question
10.1.4.9. A securi- but is likely referring to the interface where the inbound traffic is being
ty analyst is creat- filtered.
ing an inbound fire- --"source 10.1.4.9/32" specifies the source IP address that the rule applies to.
wall rule to block The /32 subnet mask
the IP address from indicates a single IP address.
accessing the orga- --"destination 0.0.0.0/0" indicates that the rule applies to traffic destined for
nization's network. any IP address.
Which of the follow-
ing fulfills this re-
quest?
A. access-list
inbound deny
ig source
0.0.0.0/0 destina-
tion 10.1.4.9/32
B. access-list
inbound deny
ig source
10.1.4.9/32 desti-
nation 0.0.0.0/0
C. access-list
inbound per-
mit ig source
10.1.4.9/32 desti-
nation 0.0.0.0/0
D. access-list
Security+
LATEST VERSION SY0-701
2025!!
Study online at https://quizlet.com/_ewpopn
1. Which of the follow-Answer: A E
ing must be consid- Explanation:
ered when design- A high-availability network is a network that is designed to minimize down-
ing a high-availabil-
time and ensure continuous operation of critical services and applications.
ity network? (SelectTo achieve this goal, a high-availability network must consider two important
two). factors: ease of recovery and attack surface. Ease of recovery refers to the
ability of a network to quickly restore normal functionality after a failure,
A. Ease of recovery disruption, or disaster. A high-availability network should have mechanisms
B. Ability to patch such as redundancy, failover, backup, and restore to ensure that any single
C. Physical isola- point of failure does not cause a complete network outage. A high-availability
tion network should also have procedures and policies for incident response, dis-
D. Responsiveness aster recovery, and business continuity to minimize the impact of any network
E. Attack surface issue on the organization's operations and reputation. Attack surface refers
F. Extensible au- to the exposure of a network to potential threats and vulnerabilities. A high
thentication availability network should have measures such as encryption, authentication,
authorization, firewall, intrusion detection and prevention, and patch man-
agement to protect the network from unauthorized access, data breaches,
malware, denial-of-service attacks, and other cyberattacks. A high-availability
network should also have processes and tools for risk assessment, threat
intelligence, vulnerability scanning, and penetration testing to identify and
mitigate any weaknesses or gaps in the network security. References: CompTIA
Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter 4: Architecture and
Design, pages 164-1651. CompTIA Security+ Certification Kit: Exam SY0-701,
7th Edition, Chapter 4: Architecture and Design, pages 164-1652.
2. A company needs Answer: A
to provide admin- Explanation:
istrative access to A bastion host is a special-purpose server that is designed to withstand attacks
internal resources and provide secure access to internal resources. A bastion host is usually
while minimizing placed on the edge of a network, acting as a gateway or proxy to the internal
the traffic allowed network. A bastion host can be configured to allow only certain types of traffic,
through the securi- such as SSH or HTTP, and block all other traffic. A bastion host can also run
, Security+ SY0-701
Study online at https://quizlet.com/_ewpopn
ty boundary. Which security software such as firewalls, intrusion detection systems, and antivirus
of the following programs to monitor and filter incoming and outgoing traffic. A bastion host
methods is most can provide administrative access to internal resources by requiring strong
secure? authentication and encryption, and by logging all activities for auditing pur-
poses. A bastion host is the most secure method among the given options
A. Implementing a because it minimizes the traffic allowed through the security boundary and
bastion host provides a single point of control and defense. A bastion host can also isolate
B. Deploying a the internal network from direct exposure to the internet or other untrusted
perimeter network networks, reducing the attack surface and the risk of compromise.
C. Installing a WAF
D. Utilizing single
sign-on
3. A company is dis- Answer: A
carding a classi- Explanation:
fied storage array The company should request a certification from the vendor that confirms
and hires an out- the storage array has been disposed of securely and in compliance with the
side vendor to com- company's policies and standards. A certification provides evidence that the
plete the disposal. vendor has followed the proper procedures and methods to destroy the
Which of the follow- classified data and prevent unauthorized access or recovery. A certification may
ing should the com- also include details such as the date, time, location, and method of disposal,
pany request from as well as the names and signatures of the personnel involved. References:
the vendor? CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, Chapter
3, page 1441
A. Certification
B. Inventory list
C. Classification
D. Proof of owner-
ship
4. A systems adminis- Answer: C
trator works for a Explanation:
, Security+ SY0-701
Study online at https://quizlet.com/_ewpopn
local hospital and Patient data in a hospital setting typically falls under the category of sensitive
needs to ensure pa- data. Sensitive data classifications are used to indicate information that re-
tient data is pro- quires a higher level of protection due to its confidentiality, integrity, and/or
tected and secure. availability concerns. Patient data, including medical records, diagnoses, treat-
Which of the fol- ments, and personal information, is considered sensitive and should be treat-
lowing data classi- ed as such to ensure compliance with privacy regulations like HIPAA (Health
fications should be Insurance Portability and Accountability Act) in the United States or similar
used to secure pa- regulations in other countries.
tient data?
A. Private
B. Critical
C. Sensitive
D. Public
5. Which of the fol- Answer: C
lowing is used to Explanation:
protect a comput- Endpoint detection and response (EDR) is a technology that monitors and
er from viruses, analyzes the activity and behavior of endpoints, such as computers, laptops,
malware, and Tro- mobile devices, and servers. EDR can help to detect and prevent malicious
jans being installed software, such as viruses, malware, and Trojans, from infecting the endpoints
and moving lateral- and spreading across the network. EDR can also provide visibility and response
ly across the net- capabilities to contain and remediate threats. EDR is different from IDS, which
work? is a network-based technology that monitors and alerts on network traffic
anomalies. EDR is also different from ACL, which is a list of
A. IDS rules that control the access to network resources. EDR is also different from
B. ACL NAC, which is a technology that enforces policies on the network access of
C. EDR devices based on their identity and compliance status. References: CompTIA
D. NAC Security+ Study Guide: Exam SY0-701, 9th Edition, page 2561
6. During a securi- Answer: B
ty incident, the Explanation:
, Security+ SY0-701
Study online at https://quizlet.com/_ewpopn
security operations --"access-list inbound" indicates that this rule is being applied to an inbound
team identified sus- access list.
tained network traf- --"deny" specifies that the traffic matching this rule should be denied.
fic from a mali- --"ig" (which might represent an interface group or interface) is not explicitly
cious IP address: defined in the question
10.1.4.9. A securi- but is likely referring to the interface where the inbound traffic is being
ty analyst is creat- filtered.
ing an inbound fire- --"source 10.1.4.9/32" specifies the source IP address that the rule applies to.
wall rule to block The /32 subnet mask
the IP address from indicates a single IP address.
accessing the orga- --"destination 0.0.0.0/0" indicates that the rule applies to traffic destined for
nization's network. any IP address.
Which of the follow-
ing fulfills this re-
quest?
A. access-list
inbound deny
ig source
0.0.0.0/0 destina-
tion 10.1.4.9/32
B. access-list
inbound deny
ig source
10.1.4.9/32 desti-
nation 0.0.0.0/0
C. access-list
inbound per-
mit ig source
10.1.4.9/32 desti-
nation 0.0.0.0/0
D. access-list
