Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 431–435 (page: 88)

Updated On: 26-Aug-2026

An organization decides that most employees will work remotely. The existing VPN solution does not have adequate bandwidth, and the content filtering proxy is on premises.
Which of the following strategies will enable the business to securely achieve its objective while also being prepared to quickly scale for growth?

  1. Integrate with an SASE platform, and deploy the agent to all laptops.
  2. Purchase a larger internet circuit, and create a NAT policy for the proxy.
  3. Purchase a SOAR solution to decrease response times for remote workers.
  4. Install a secondary VPN and proxy at the disaster recovery site, and automate failover.

Answer(s): A

Explanation:

A Secure Access Service Edge (SASE) solution delivers VPN, firewall, and content‐filtering functions from the cloud, eliminating on-premises bottlenecks and easily scaling as remote usage grows when agents are deployed to endpoints.



Which of the following is the most likely reason a security analyst would review SIEM logs?

  1. To check for recent password reset attempts
  2. To monitor for potential DDoS attacks
  3. To assess the scope of a privacy breach
  4. To see correlations across multiple hosts

Answer(s): D

Explanation:

A SIEM’s primary value is aggregating and correlating log data from numerous systems to identify patterns or anomalies that span multiple hosts, enabling detection of coordinated or sophisticated attacks.



Which of the following would help reduce alert fatigue?

  1. Penetration testing
  2. Compensating controls
  3. Rule tuning
  4. Log aggregation

Answer(s): C

Explanation:

Adjusting and refining detection rules reduces false positives and irrelevant alerts, ensuring that security teams receive only meaningful notifications and thereby minimizing alert fatigue.



Which of the following options most efficiently maintains a system state in the event of a system failure?

  1. Hybrid cloud
  2. Cold site
  3. Full backup
  4. Load balancing

Answer(s): D

Explanation:

A load balancer distributes traffic across multiple, redundant systems and can automatically detect and reroute around a failed node. This active–active approach preserves the running system state and minimizes downtime far more efficiently than standby sites or periodic backups.



During a SQL update of a database, a temporary field used as part of the update sequence was modified by an attacker before the update completed in order to allow access to the system.
Which of the following best describes this type of vulnerability?

  1. Race condition
  2. Memory injection
  3. Malicious update
  4. Side loading

Answer(s): A

Explanation:

A race condition occurs when an attacker exploits the timing window between operations, modifying the temporary field before the update completes, to alter the intended logic and gain unauthorized access.



Viewing page 88 of 198
Viewing questions 436 - 440 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!