A company's IT team has a monthly maintenance window to apply patches to servers. However, a critical vulnerability was announced yesterday, and an exploit is already being used in the wild. What should the IT team do?

Implement a workaround, such as disabling the vulnerable service, and wait for the next maintenance window.

Apply the patch immediately to all systems, even if it means downtime.

Wait for the next monthly maintenance window to apply the patch.

Apply the patch only to systems that are directly exposed to the internet.

Which of the following is a primary security benefit of implementing network segmentation?

It increases network speed by reducing the number of switches

It automatically encrypts all traffic within each segment

It reduces the attack surface by isolating sensitive systems from less trusted areas

It eliminates the need for firewalls

A security administrator wants to limit the spread of malware between two departments that share a single large network. Which technique is most directly designed to achieve this goal?

Enabling MAC filtering on all switches

Deploying a single intrusion prevention system at the internet edge

Increasing the DHCP lease time for all clients

Implementing network segmentation to create separate broadcast domains

What is the primary goal of configuration enforcement?

To monitor user activity for policy violations

To ensure systems are configured according to security standards

To encrypt all data stored on the system

To provide backup and recovery of system data

CompTIASecurity+

Domain 2Objective 5

Mitigation Techniques SY0-701 Practice Questions (Page 1)

Part of the Threats, vulnerabilities, and mitigations domain, which accounts for 22% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

22%of the exam

Questions 1–5

1application · easy
A company is deploying new Linux servers for a web application. The security team has a checklist that includes disabling unnecessary services, removing default accounts, and configuring the firewall. Which concept does this checklist primarily represent?
Select an answer first
2application · medium
A company's IT team has a monthly maintenance window to apply patches to servers. However, a critical vulnerability was announced yesterday, and an exploit is already being used in the wild. What should the IT team do?
Select an answer first
3foundation · easy
Which of the following is a primary security benefit of implementing network segmentation?
Select an answer first
4foundation · easy
A security administrator wants to limit the spread of malware between two departments that share a single large network. Which technique is most directly designed to achieve this goal?
Select an answer first
5foundation · easy
What is the primary goal of configuration enforcement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.