A security administrator is configuring monitoring for a server that hosts a critical database. The administrator wants to be alerted immediately if the server's CPU usage exceeds 90% for more than 5 minutes, as this could indicate a performance issue or a potential denial-of-service attack. Which of the following is the MOST appropriate monitoring configuration?

Set up a performance monitor that logs CPU usage and review the logs weekly.

Configure a system health check that runs every hour and sends an email if the server is unresponsive.

Enable SNMP traps on the server and configure the network management system to poll every 30 minutes.

Set up an alert that triggers when the average CPU usage over a 5-minute period exceeds 90%.

What is the primary purpose of establishing a secure baseline for a computing resource?

To automatically patch all software vulnerabilities without requiring manual intervention

To ensure that all users have the same level of access to system resources

To replace the need for continuous monitoring by providing a one-time security assessment

To provide a known-good configuration that can be used to detect unauthorized changes and ensure consistent security

A network administrator is configuring a wireless network for a hospital. The network will be used by medical devices that do not support WPA3. The administrator needs to ensure the highest level of security possible while maintaining compatibility with these devices. Which of the following configurations should be used?

Use WPA2-Enterprise with 802.1X authentication.

Use WPA2 with a pre-shared key (PSK) and enable MAC address filtering.

Use WPA2 with a pre-shared key (PSK) and disable SSID broadcast.

Use WEP with a complex passphrase to ensure maximum compatibility.

A security administrator is hardening a fleet of Linux servers. The company has a strict change management policy, and any configuration change must be approved and documented. The administrator has identified several services that are not required and should be disabled. However, a critical application on one server depends on one of these services. Which of the following is the BEST course of action?

Disable the services on all servers except the one that requires the service, and document the exception.

Disable all identified services on all servers to ensure a consistent baseline.

Disable the services and then re-enable them if the application fails.

Keep the services enabled on all servers to avoid any potential disruption.

Which mobile device management (MDM) capability is most directly used to enforce a corporate security policy on employee-owned devices?

Remote wipe of a lost or stolen device

Battery optimization to extend device life

Camera resolution adjustment for better photos

Screen brightness adjustment to reduce eye strain

CompTIASecurity+

Domain 4Objective 1

Computing Resources SY0-701 Practice Questions (Page 4)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

7concepts

28%of the exam

Questions 16–20

16application · medium
A security administrator is configuring monitoring for a server that hosts a critical database. The administrator wants to be alerted immediately if the server's CPU usage exceeds 90% for more than 5 minutes, as this could indicate a performance issue or a potential denial-of-service attack. Which of the following is the MOST appropriate monitoring configuration?
Select an answer first
17foundation · easy
What is the primary purpose of establishing a secure baseline for a computing resource?
Select an answer first
18application · medium
A network administrator is configuring a wireless network for a hospital. The network will be used by medical devices that do not support WPA3. The administrator needs to ensure the highest level of security possible while maintaining compatibility with these devices. Which of the following configurations should be used?
Select an answer first
19expert · hard
A security administrator is hardening a fleet of Linux servers. The company has a strict change management policy, and any configuration change must be approved and documented. The administrator has identified several services that are not required and should be disabled. However, a critical application on one server depends on one of these services. Which of the following is the BEST course of action?
Select an answer first
20foundation · easy
Which mobile device management (MDM) capability is most directly used to enforce a corporate security policy on employee-owned devices?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Computing Resources SY0-701 Practice Questions (Page 4)

Questions 16–20

What is the primary purpose of establishing a secure baseline for a computing resource?

Which mobile device management (MDM) capability is most directly used to enforce a corporate security policy on employee-owned devices?

Keep studying — Security operations