Free SY0-701 Exam Braindumps
CompTIA Security+ Questions 451–455 (page: 92)

Updated On: 26-Aug-2026

A developer receives this message when testing a new external website:
This site cannot be reached.
Which of the following logs would most likely help identify the root cause?

  1. Firewall
  2. IDS
  3. Application
  4. System

Answer(s): A

Explanation:

When a site is unreachable, the first step is to verify whether network traffic is being blocked. Firewall logs will show if connection attempts to the external site are being denied or dropped, pinpointing whether the firewall is preventing access.



Which of the following methods to secure data is most often used to protect data in transit?

  1. Encryption
  2. Obfuscation
  3. Permission restrictions
  4. Hashing

Answer(s): A

Explanation:

Encryption transforms data into ciphertext before transmission, ensuring that intercepted information remains unreadable to unauthorized parties and thus securing data in transit.



Which of the following does a user often agree to when logging in to a domain?

  1. AUP
  2. MAC
  3. EULA
  4. EAP

Answer(s): A

Explanation:

When users log in to a corporate domain, they’re typically presented with an acceptable use policy outlining the rules and responsibilities for system use before gaining access. This ensures they agree to organizational guidelines up front.



A Chief Information Security Officer wants to enhance security capabilities to block PH from being emailed or downloaded to unapproved external media.
Which of the following solutions will accomplish this goal?

  1. Deploying DLP software on servers and endpoints
  2. Configuring servers and endpoints to use a centralized web proxy
  3. Implementing secure protocols on servers and endpoints
  4. Installing EDR software on servers and endpoints

Answer(s): A

Explanation:

Data Loss Prevention (DLP) solutions inspect content in motion and at rest, across email, web uploads, removable media, and more, and enforce policies to block or quarantine protected health information (PHI) from being transmitted to unapproved destinations. By deploying DLP agents on both servers and endpoints, the organization gains granular control over where sensitive data can flow, effectively preventing PH from being emailed or copied to unauthorized external media.



After a breach at a data processing center, an administrator receives a notification that administrative passwords were leaked online.
Which of the following should be used to prevent this incident from occurring in the future?

  1. Password management
  2. Password complexity
  3. Password policy
  4. Password vault

Answer(s): D

Explanation:

A centralized password vault securely stores and manages privileged credentials, encrypting them at rest, controlling access, and enabling strong rotation policies, so administrative passwords are never exposed in plaintext and can’t be leaked online.



Viewing page 92 of 198
Viewing questions 456 - 460 out of 1013 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!