What is the primary goal of anomaly detection in security monitoring?

To block all traffic from unknown IP addresses

To identify unusual patterns or behaviors that deviate from the norm

To replace the need for signature-based detection

A system administrator notices that a server's CPU utilization has been consistently at 100% for the past 30 minutes, while memory usage is normal. The administrator checks the running processes and finds a process named 'svchost.exe' using 80% CPU. Which action should the administrator take FIRST?

Investigate which service is running under the 'svchost.exe' process.

Increase the server's CPU allocation.

Kill the 'svchost.exe' process immediately.

Reboot the server to clear the high CPU usage.

CompTIASecurity+

Domain 4Objective 4

Alerting and Monitoring SY0-701 Practice Questions (Page 7)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

28%of the exam

Questions 31–33

31foundation · easy
Which network monitoring tool is primarily used to capture and inspect the actual contents of individual packets traversing a network segment?
Select an answer first
32foundation · easy
What is the primary goal of anomaly detection in security monitoring?
Select an answer first
33application · medium
A system administrator notices that a server's CPU utilization has been consistently at 100% for the past 30 minutes, while memory usage is normal. The administrator checks the running processes and finds a process named 'svchost.exe' using 80% CPU. Which action should the administrator take FIRST?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Alerting and Monitoring SY0-701 Practice Questions (Page 7)

Questions 31–33

Which network monitoring tool is primarily used to capture and inspect the actual contents of individual packets traversing a network segment?

What is the primary goal of anomaly detection in security monitoring?

A system administrator notices that a server's CPU utilization has been consistently at 100% for the past 30 minutes, while memory usage is normal. The administrator checks the running processes and finds a process named 'svchost.exe' using 80% CPU. Which action should the administrator take FIRST?

Keep studying — Security operations