A security team has a script that parses logs and extracts indicators of compromise. The script is used in daily operations. Which practice is most important for maintaining the script's effectiveness?

Keep the script unchanged to ensure stability.

Store the script in a shared folder with no version control.

Run the script only when a security incident occurs.

Regularly review and update the script to handle changes in log formats and new threat intelligence sources.

A security operations center (SOC) wants to improve its response time to common alerts. Which use case is most appropriate for automation?

Escalating every alert to the incident response team for investigation

Manually reviewing each alert to determine if it is a false positive

Automatically isolating an infected endpoint from the network upon detection of a known malicious process

Waiting for a senior analyst to decide the appropriate response for each alert

A security analyst is evaluating which routine tasks to automate. Which scenario is most suitable for automation to improve security operations efficiency?

Investigating a novel, never-before-seen malware strain that requires deep manual analysis

Conducting an interview with a user to determine the root cause of a reported phishing email

Reviewing and approving a complex exception to the organization's firewall policy

Parsing and correlating thousands of daily firewall logs to identify failed login attempts

Why is it important to regularly update security scripts?

To make them more complex and difficult to understand

To ensure they remain effective against new threats and changes in the environment

To remove all error handling and comments

To increase the time it takes to run them

CompTIASecurity+

Domain 4Objective 7

Automation and Orchestration SY0-701 Practice Questions (Page 4)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

28%of the exam

Questions 16–20

16application · medium
A security team has a script that parses logs and extracts indicators of compromise. The script is used in daily operations. Which practice is most important for maintaining the script's effectiveness?
Select an answer first
17foundation · easy
A security operations center (SOC) wants to improve its response time to common alerts. Which use case is most appropriate for automation?
Select an answer first
18foundation · easy
A security analyst is evaluating which routine tasks to automate. Which scenario is most suitable for automation to improve security operations efficiency?
Select an answer first
19foundation · easy
Which tool is commonly used for automating security operations by allowing the creation of playbooks and workflows?
Select an answer first
20foundation · easy
Why is it important to regularly update security scripts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.