Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 526–530 (page: 107)

Updated On: 26-Aug-2026

HOTSPOT (Drag and Drop is not supported)
An organization has learned that its data is being exchanged on the dark web. The CIO has requested that you investigate and implement the most secure solution to protect employee accounts.
INSTRUCTIONS
Review the data to identify weak security practices and provide the most appropriate security solution to meet the CIO's requirements.
If at any time you would like to bring back the initial state of the simulation; please click the Reset All button.



Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Which of the following describes the reason for using an MDM solution to prevent jailbreaking?

  1. To secure end-of-life devices from incompatible firmware updates
  2. To avoid hypervisor attacks through VM escape
  3. To eliminate buffer overflows at the application layer
  4. To prevent users from changing the OS of mobile devices

Answer(s): D

Explanation:

An MDM solution can enforce device policies that block attempts to modify or replace the mobile OS, preventing users from jailbreaking their devices.



Which of the following is the best mitigation for a zero-day vulnerability found in mission-critical production servers that must be highly available?

  1. Virtualizing and migrating to a containerized instance
  2. Removing and sandboxing to an isolated network
  3. Monitoring and implementing compensating controls
  4. Patching and redeploying to production as quickly as possible

Answer(s): C

Explanation:

With no patch available for a zero-day, deploying compensating controls, such as enhanced monitoring, intrusion prevention, and strict access restrictions, reduces risk while keeping critical servers online.



An administrator has configured a quarantine subnet for all guest devices that connect to the network.
Which of the following would be best for the security team to configure on the MDM before allowing access to corporate resources?

  1. Device fingerprinting
  2. Compliance attestation
  3. NAC
  4. 802.1X

Answer(s): B

Explanation:

Compliance attestation via MDM verifies device posture (OS version, policies, certificates) before granting access, ensuring only compliant devices leave the quarantine subnet and reach corporate resources.



A security team receives reports about high latency and complete network unavailability throughout most of the office building. Flow logs from the campus switches show high traffic on TCP 445.
Which of the following is most likely the root cause of this incident?

  1. Buffer overflow
  2. NTP amplification attack
  3. Worm
  4. Kerberoasting attack

Answer(s): C

Explanation:

A worm exploiting SMB will flood TCP 445 with propagation traffic, overwhelming the network and causing high latency and outages.



Viewing page 107 of 198
Viewing questions 531 - 535 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!