A system administrator is setting up a new server and wants to reduce its vulnerability to attacks. Which action is an example of system hardening?

Connecting the server directly to the internet

Disabling unnecessary services and ports

Increasing the number of user accounts with administrative privileges

Installing additional software applications

A company has a large number of servers, some of which are critical to operations and some of which are less critical. The security team has a limited budget and needs to prioritize patch management efforts. Which approach is the most effective use of resources?

Defer patching all servers until a full testing cycle is completed for every patch.

Only patch servers that are exposed to the internet, and do not patch internal servers.

Prioritize patching critical servers first, then apply patches to less critical servers during the next maintenance window.

Apply patches to all servers in the order they are released, regardless of criticality.

Which of the following best describes the purpose of access control in a security context?

To encrypt data at rest and in transit

To monitor network traffic for suspicious activity

To restrict access to resources to only those who are authorized

To ensure that systems are patched with the latest updates

A company wants to ensure that only authorized users can access its internal file server. Which access control measure is most appropriate for this requirement?

Configuring the file server to use a public IP address

Disabling the file server's network interface

Increasing the file server's disk storage capacity

Implementing user authentication and authorization policies

What is the main purpose of patch management?

To monitor network traffic for intrusions

To enforce password complexity requirements

To fix known vulnerabilities and improve system security

To provide backup and recovery of critical data

CompTIASecurity+

Domain 2Objective 5

Mitigation Techniques SY0-701 Practice Questions (Page 3)

Part of the Threats, vulnerabilities, and mitigations domain, which accounts for 22% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

22%of the exam

Questions 11–15

11foundation · easy
A system administrator is setting up a new server and wants to reduce its vulnerability to attacks. Which action is an example of system hardening?
Select an answer first
12expert · hard
A company has a large number of servers, some of which are critical to operations and some of which are less critical. The security team has a limited budget and needs to prioritize patch management efforts. Which approach is the most effective use of resources?
Select an answer first
13foundation · easy
Which of the following best describes the purpose of access control in a security context?
Select an answer first
14foundation · easy
A company wants to ensure that only authorized users can access its internal file server. Which access control measure is most appropriate for this requirement?
Select an answer first
15foundation · easy
What is the main purpose of patch management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.