A company uses a cloud storage service to host static website content. The storage bucket is configured with a public read policy. A security analyst discovers that the bucket contains sensitive internal documents that were accidentally uploaded. Which of the following is the MOST effective mitigation?

Remove the public read policy and require authenticated access.

Move the sensitive documents to a different bucket with a private policy.

Enable logging on the bucket to monitor access.

Use a content delivery network (CDN) to cache the content.

A company discovers that a third-party software library used in their mobile app contains a known vulnerability that allows remote code execution. The library is no longer maintained by the vendor. Which of the following is the MOST appropriate mitigation?

Sign the library with a code-signing certificate.

Replace the library with a maintained alternative that provides similar functionality.

Implement a web application firewall (WAF) to block exploit attempts.

Disable the library's features that are not used by the app.

A server running an outdated version of an operating system is exposed to the internet. A vulnerability scanner identifies a critical privilege escalation vulnerability in the OS kernel. Which of the following is the MOST appropriate immediate action?

Apply the vendor's security patch to the OS.

Change the server's local administrator password.

Move the server behind a firewall.

Disable the vulnerable kernel module.

CompTIASecurity+

Domain 2Objective 3

Vulnerabilities SY0-701 Practice Questions (Page 5)

Part of the Threats, vulnerabilities, and mitigations domain, which accounts for 22% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

22%of the exam

Questions 21–25

21expert · hard
A company uses a cloud storage service to host static website content. The storage bucket is configured with a public read policy. A security analyst discovers that the bucket contains sensitive internal documents that were accidentally uploaded. Which of the following is the MOST effective mitigation?
Select an answer first
22application · medium
A company discovers that a third-party software library used in their mobile app contains a known vulnerability that allows remote code execution. The library is no longer maintained by the vendor. Which of the following is the MOST appropriate mitigation?
Select an answer first
23application · medium
A server running an outdated version of an operating system is exposed to the internet. A vulnerability scanner identifies a critical privilege escalation vulnerability in the OS kernel. Which of the following is the MOST appropriate immediate action?
Select an answer first
24foundation · easy
A user with limited privileges exploits a flaw in the operating system to gain administrator-level access. Which type of OS vulnerability is this?
Select an answer first
25foundation · easy
A security researcher discovers a flaw in the low-level software that controls a device's hardware components. This flaw could allow an attacker to execute arbitrary code with high privileges. Which type of vulnerability is this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Vulnerabilities SY0-701 Practice Questions (Page 5)

Questions 21–25

A company discovers that a third-party software library used in their mobile app contains a known vulnerability that allows remote code execution. The library is no longer maintained by the vendor. Which of the following is the MOST appropriate mitigation?

A server running an outdated version of an operating system is exposed to the internet. A vulnerability scanner identifies a critical privilege escalation vulnerability in the OS kernel. Which of the following is the MOST appropriate immediate action?

A user with limited privileges exploits a flaw in the operating system to gain administrator-level access. Which type of OS vulnerability is this?

A security researcher discovers a flaw in the low-level software that controls a device's hardware components. This flaw could allow an attacker to execute arbitrary code with high privileges. Which type of vulnerability is this?

Keep studying — Threats, vulnerabilities, and mitigations