An organization wants to implement a more secure access control method for its remote employees. Currently, employees use only a username and password. The organization wants to add a second factor that is something the user has. Which of the following should the organization implement?

A one-time passcode (OTP) generated by a mobile authenticator app.

A security question, such as 'What is your mother's maiden name?'.

A longer password with complexity requirements.

What is the primary purpose of a Security Information and Event Management (SIEM) system?

To manage user identities and access

To block malicious network traffic in real time

To collect and analyze log data from multiple sources to detect security incidents

In which access control model does the owner of a resource have the discretion to grant or deny access to other users?

Role-based access control (RBAC)

Attribute-based access control (ABAC)

Discretionary access control (DAC)

Which endpoint security solution is specifically designed to detect and block malicious software on a device?

Intrusion detection system (IDS)

A company is moving its customer database to a cloud provider. The database contains personally identifiable information (PII). The company wants to ensure that the data is protected both at rest and in transit. Which combination of controls should the company implement?

Use a VPN to connect to the cloud provider, and rely on the VPN for encryption.

Use a network access control list (ACL) to restrict access to the database to specific IP addresses.

Encrypt the database using the cloud provider's encryption at rest, and use TLS for all connections to the database.

Implement a data loss prevention (DLP) policy that blocks unauthorized access to the database.

CompTIASecurity+

Domain 3Objective 2

Enterprise Infrastructure SY0-701 Practice Questions (Page 2)

Part of the Security architecture domain, which accounts for 18% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

18%of the exam

Questions 6–10

6application · medium
An organization wants to implement a more secure access control method for its remote employees. Currently, employees use only a username and password. The organization wants to add a second factor that is something the user has. Which of the following should the organization implement?
Select an answer first
7foundation · easy
What is the primary purpose of a Security Information and Event Management (SIEM) system?
Select an answer first
8foundation · easy
In which access control model does the owner of a resource have the discretion to grant or deny access to other users?
Select an answer first
9foundation · easy
Which endpoint security solution is specifically designed to detect and block malicious software on a device?
Select an answer first
10expert · hard
A company is moving its customer database to a cloud provider. The database contains personally identifiable information (PII). The company wants to ensure that the data is protected both at rest and in transit. Which combination of controls should the company implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.