A company is migrating its on-premises applications to a public cloud provider. The security team wants to ensure that only authorized users can access the cloud resources, and that all access is logged. Which cloud security control should the company implement?

A network access control list (ACL) that restricts IP addresses that can access the cloud resources.

A virtual private network (VPN) connection to the cloud provider.

Identity and access management (IAM) with multi-factor authentication (MFA) and detailed logging.

A data loss prevention (DLP) policy that prevents sensitive data from being uploaded to the cloud.

Which security monitoring tool is designed to detect and alert on suspicious network traffic patterns, but does not take action to block the traffic?

Intrusion prevention system (IPS)

Intrusion detection system (IDS)

What is the primary goal of Data Loss Prevention (DLP) systems?

To manage user access permissions

To prevent sensitive data from leaving the organization without authorization

CompTIASecurity+

Domain 3Objective 2

Enterprise Infrastructure SY0-701 Practice Questions (Page 1)

Part of the Security architecture domain, which accounts for 18% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

18%of the exam

Questions 1–5

1application · medium
A company is migrating its on-premises applications to a public cloud provider. The security team wants to ensure that only authorized users can access the cloud resources, and that all access is logged. Which cloud security control should the company implement?
Select an answer first
2foundation · easy
Which type of security control is a firewall rule that blocks inbound traffic on a specific port?
Select an answer first
3foundation · easy
Which security principle is best described as assigning each user or process the minimum permissions necessary to perform its required functions?
Select an answer first
4foundation · easy
Which security monitoring tool is designed to detect and alert on suspicious network traffic patterns, but does not take action to block the traffic?
Select an answer first
5foundation · easy
What is the primary goal of Data Loss Prevention (DLP) systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Enterprise Infrastructure SY0-701 Practice Questions (Page 1)

Questions 1–5

A company is migrating its on-premises applications to a public cloud provider. The security team wants to ensure that only authorized users can access the cloud resources, and that all access is logged. Which cloud security control should the company implement?

Which type of security control is a firewall rule that blocks inbound traffic on a specific port?

Which security principle is best described as assigning each user or process the minimum permissions necessary to perform its required functions?

Which security monitoring tool is designed to detect and alert on suspicious network traffic patterns, but does not take action to block the traffic?

What is the primary goal of Data Loss Prevention (DLP) systems?

Keep studying — Security architecture