In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the cloud customer?

Patching the underlying physical servers

Configuring access controls on their cloud resources

Securing the physical data center

What is the primary purpose of a host-based firewall on an endpoint device?

To filter incoming and outgoing network traffic on that specific device

To encrypt all data stored on the device

To detect and remove malware from the device

To provide remote access to the device

What is the primary purpose of network segmentation?

To improve network performance by reducing broadcast traffic

To isolate network traffic and limit the impact of a security breach

To simplify IP address management

To eliminate the need for firewalls

CompTIASecurity+

Domain 3Objective 2

Enterprise Infrastructure SY0-701 Practice Questions (Page 3)

Part of the Security architecture domain, which accounts for 18% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

18%of the exam

Questions 11–15

11foundation · easy
Which DLP technique is used to identify sensitive data based on its content, such as credit card numbers or social security numbers?
Select an answer first
12foundation · easy
Which network device is commonly used to enforce network segmentation by filtering traffic between different segments?
Select an answer first
13foundation · easy
In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the cloud customer?
Select an answer first
14foundation · easy
What is the primary purpose of a host-based firewall on an endpoint device?
Select an answer first
15foundation · easy
What is the primary purpose of network segmentation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Enterprise Infrastructure SY0-701 Practice Questions (Page 3)

Questions 11–15

Which DLP technique is used to identify sensitive data based on its content, such as credit card numbers or social security numbers?

Which network device is commonly used to enforce network segmentation by filtering traffic between different segments?

In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the cloud customer?

What is the primary purpose of a host-based firewall on an endpoint device?

What is the primary purpose of network segmentation?

Keep studying — Security architecture