Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 446–450 (page: 91)

Updated On: 26-Aug-2026

A company recently set up a system for employees to access their files remotely. However, the IT team has noticed that some employees are using personal devices to access the system.
Which of the following security techniques could help mitigate the risk of unauthorized connections by personal devices?

  1. Multifactor Authentication
  2. Conditional Access Policies
  3. Cloud Access Security Broker
  4. Data Loss Prevention

Answer(s): B

Explanation:

Conditional Access lets you enforce device-based requirements, such as requiring devices to be enrolled, compliant, or managed, before granting access. By blocking or limiting connections from unmanaged personal devices, it prevents unauthorized endpoints from reaching the company’s remote file system.



Which of the following security controls is a company implementing by deploying HIPS? (Choose two.)

  1. Directive
  2. Preventive
  3. Physical
  4. Corrective
  5. Compensating
  6. Detective

Answer(s): B,F

Explanation:

A host-based intrusion prevention system actively monitors and blocks malicious behavior on the endpoint (preventive control) while also alerting or logging suspicious events (detective control).



Which of the following is the best physical security measure that prevents unauthorized vehicles from entering a data center while still allowing foot traffic?

  1. Access control vestibules
  2. Fencing
  3. Video surveillance
  4. Retractable bollards

Answer(s): D

Explanation:

Retractable bollards provide a strong physical barrier to stop unauthorized vehicles while remaining low enough (or lowered) to let pedestrians pass freely, making them ideal for controlling vehicle access without impeding foot traffic.



Which of the following are the best methods for hardening end user devices? (Choose two.)

  1. Full disk encryption
  2. Group-level permissions
  3. Account lockout
  4. Endpoint protection
  5. Proxy server
  6. Segmentation

Answer(s): A,D

Explanation:

Full disk encryption ensures that all data on the device remains confidential if the device is lost or stolen. Endpoint protection (antivirus/EDR) continuously defends against malware, exploits, and other active threats,
directly hardening the device against attacks.



Which of the following policies outlines what employees can and cannot do on company-issued devices?

  1. Acceptable use
  2. Data classification
  3. Change management
  4. Business continuity

Answer(s): A

Explanation:

An acceptable use policy defines the permitted and prohibited behaviors for employees when using company-issued devices, ensuring clear guidelines on what activities are allowed.



Viewing page 91 of 198
Viewing questions 451 - 455 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!