Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 221–225 (page: 46)

Updated On: 26-Aug-2026

Which of the following would be the best solution to deploy a low-cost standby site that includes hardware and internet access?

  1. Recovery site
  2. Cold site
  3. Hot site
  4. Warm site

Answer(s): D



An organization needs to determine how many employees are accessing the building each day in order to configure the proper access controls.
Which of the following control types best meets this requirement?

  1. Detective
  2. Preventive
  3. Corrective
  4. Directive

Answer(s): A

Explanation:

A detective control is used to identify and record events or actions after they occur. In this case, tracking the number of employees accessing the building each day is a detective control, as it involves monitoring and logging access to gather data for configuring appropriate access controls. This helps the organization assess usage patterns to adjust security measures accordingly.



An organization wants to implement a secure solution for remote users. The users handle sensitive PHI on a regular basis and need to access an internally developed corporate application.
Which of the following best meet the organization's security requirements? (Choose two.)

  1. Local administrative password
  2. Perimeter network
  3. Jump server
  4. WAF
  5. MFA
  6. VPN

Answer(s): E,F

Explanation:

Multi-factor authentication (MFA) and a virtual private network (VPN) best meet the organization's security requirements for remote access to sensitive information like protected health information (PHI).
MFA adds a layer of security by requiring multiple forms of verification before granting access, which helps protect against unauthorized access.
VPN provides a secure encrypted connection for remote users, ensuring that data transmitted over the network remains confidential and secure.
Together, these controls help secure remote access to the corporate application handling sensitive data.



A security officer is implementing a security awareness program and is placing security-themed posters around the building and is assigning online user training.
Which of the following would the security officer most likely implement?

  1. Password policy
  2. Access badges
  3. Phishing campaign
  4. Risk assessment

Answer(s): C

Explanation:

In a security awareness program, a phishing campaign is often implemented alongside other awareness activities, such as security-themed posters and online user training. Phishing simulations help users recognize and respond correctly to phishing attempts, reinforcing the training's effectiveness. This practical exercise increases awareness about social engineering attacks, making it a suitable component of a comprehensive security awareness program.



A security consultant is working with a client that wants to physically isolate its secure systems.
Which of the following best describes this architecture?

  1. SDN
  2. Air gapped
  3. Containerized
  4. Highly available

Answer(s): B

Explanation:

An air-gapped system is physically isolated from any other network, meaning it has no direct or indirect connection to the internet or other networks. This architecture is commonly used to protect highly secure systems by ensuring that they are not accessible remotely, thus reducing the risk of unauthorized access or cyberattacks. This approach aligns with the client’s goal of physically isolating its secure systems.



Viewing page 46 of 198
Viewing questions 226 - 230 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!