Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 366–370 (page: 75)

Updated On: 26-Aug-2026

A company is changing its mobile device policy. The company has the following requirements:
-Company-owned devices
-Ability to harden the devices
-Reduced security risk
-Compatibility with company resources
Which of the following would best meet these requirements?

  1. BYOD
  2. CYOD
  3. COPE
  4. COBO

Answer(s): D



A company is concerned about employees unintentionally introducing malware into the network. The company identified fifty employees who clicked on a link embedded in an email sent by the internal IT department.
Which of the following should the company implement to best improve its security posture?

  1. Social engineering training
  2. SPF configuration
  3. Simulated phishing campaign
  4. Insider threat awareness

Answer(s): A



A penetration test identifies that an SMBv1 is enabled on multiple servers across an organization. The organization wants to remediate this vulnerability in the most efficient way possible.
Which of the following should the organization use for this purpose?

  1. GPO
  2. ACL
  3. SFTP
  4. DLP

Answer(s): A

Explanation:

A Group Policy Object (GPO) can be used to efficiently disable SMBv1 across multiple servers within an organization. By configuring a GPO to disable the outdated and vulnerable SMBv1 protocol, the organization can ensure that the change is applied consistently across all affected systems. This is a centralized and efficient method for remediation, reducing the potential attack surface related to SMBv1.



Which of the following best protects sensitive data in transit across a geographically dispersed infrastructure?

  1. Encryption
  2. Masking
  3. Tokenization
  4. Obfuscation

Answer(s): A

Explanation:

Encryption ensures that sensitive data is protected while it is being transmitted across networks, especially over long distances or between geographically dispersed infrastructures. By encrypting data, it becomes unreadable to unauthorized parties, even if intercepted, ensuring confidentiality and integrity during transmission. Encryption is the most effective method for protecting data in transit.



As part of new compliance audit requirements, multiple servers need to be segmented on different networks and should be reachable only from authorized internal systems.
Which of the following would meet the requirements?

  1. Configure firewall rules to block external access to Internal resources.
  2. Set up a WAP to allow internal access from public networks.
  3. Implement a new IPSec tunnel from internal resources.
  4. Deploy an internal jump server to access resources.

Answer(s): D



Viewing page 75 of 198
Viewing questions 371 - 375 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!