An organization wants to monitor endpoints for malicious activity and automatically respond to threats. Which solution should be deployed?

Endpoint detection and response (EDR)

Which DNS filtering technique is commonly used to block access to a specific domain?

Enabling MAC address filtering on the switch

Adding the domain to a blocklist on the DNS server

Configuring the firewall to drop all UDP traffic

A company is experiencing a malware infection that uses DNS to communicate with a command-and-control server. The malware uses domain generation algorithms (DGAs) to create new domains frequently. The security team wants to block this communication. What is the most effective approach?

Block all outbound DNS traffic on the firewall.

Use an EDR solution to quarantine all infected endpoints.

Deploy an IDS to detect DGA traffic and alert the security team.

Implement DNS filtering with a threat intelligence feed that blocks DGA domains, and enable logging for analysis.

A school district wants to prevent students from accessing known malware distribution sites and phishing domains. They have a limited budget and need a solution that works across all devices, including personal devices on the guest Wi-Fi. What should they implement?

Use an IDS to detect and alert on DNS queries to malicious domains.

Deploy a firewall rule to block all outbound traffic to IP addresses of known malicious domains.

Install an EDR agent on every student device, including personal devices.

Configure DNS filtering on the school's DNS servers and apply it to all network traffic.

Which NAC configuration would be most appropriate for a guest device that does not meet the organization's security policy?

Block the device from any network access

Grant full network access to the device

Place the device in a quarantine network with limited access

Ignore the device and allow it to connect

CompTIASecurity+

Domain 4Objective 5

Enterprise Security SY0-701 Practice Questions (Page 1)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

28%of the exam

Questions 1–5

1foundation · easy
An organization wants to monitor endpoints for malicious activity and automatically respond to threats. Which solution should be deployed?
Select an answer first
2foundation · easy
Which DNS filtering technique is commonly used to block access to a specific domain?
Select an answer first
3expert · hard
A company is experiencing a malware infection that uses DNS to communicate with a command-and-control server. The malware uses domain generation algorithms (DGAs) to create new domains frequently. The security team wants to block this communication. What is the most effective approach?
Select an answer first
4application · medium
A school district wants to prevent students from accessing known malware distribution sites and phishing domains. They have a limited budget and need a solution that works across all devices, including personal devices on the guest Wi-Fi. What should they implement?
Select an answer first
5foundation · easy
Which NAC configuration would be most appropriate for a guest device that does not meet the organization's security policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.