Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 266–270 (page: 55)

Updated On: 26-Aug-2026

Which of the following is the best way to prevent an unauthorized user from plugging a laptop into an employee's phone network port and then using tools to scan for database servers?

  1. MAC filtering
  2. Segmentation
  3. Certification
  4. Isolation

Answer(s): A



Which of the following should a systems administrator use to decrease the company's hardware attack surface?

  1. Replication
  2. Isolation
  3. Centralization
  4. Virtualization

Answer(s): D



A company wants to add an MFA solution for all employees who access the corporate network remotely. Log-in requirements include something you know, are, and have. The company wants a solution that does not require purchasing third-party applications or specialized hardware.
Which of the following MFA solutions would best meet the company's requirements?

  1. Smart card with PIN and password
  2. Security questions and a one-time passcode sent via email
  3. Voice and fingerprint verification with an SMS one-time passcode
  4. Mobile application-generated, one-time passcode with facial recognition

Answer(s): D



A company is using a legacy FTP server to transfer financial data to a third party. The legacy system does not support SFTP, so a compensating control is needed to protect the sensitive, financial data in transit.
Which of the following would be the most appropriate for the company to use?

  1. Telnet connection
  2. SSH tunneling
  3. Patch installation
  4. Full disk encryption

Answer(s): B

Explanation:

Since the legacy FTP server does not support SFTP (which would provide secure file transfer), SSH tunneling is a compensating control that can help protect sensitive financial data in transit. SSH tunneling involves creating a secure, encrypted tunnel between the FTP server and the third party, ensuring that the data transferred through FTP is encrypted and protected from eavesdropping or tampering.



A security manager wants to reduce the number of steps required to identify and contain basic threats.
Which of the following will help achieve this goal?

  1. SOAR
  2. SIEM
  3. DMARC
  4. NIDS

Answer(s): A

Explanation:

SOAR (Security Orchestration, Automation, and Response) is designed to automate and streamline security operations, including threat identification and containment. SOAR platforms integrate with existing security tools to automate repetitive tasks, facilitate faster decision-making, and reduce the number of manual steps required to respond to basic threats. This helps improve response times and operational efficiency by orchestrating workflows and automating incident handling.



Viewing page 55 of 198
Viewing questions 271 - 275 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!