Which of the following is a common remediation strategy for a software vulnerability?

Applying a vendor-supplied patch

Which of the following is typically included in a vulnerability report?

A copy of the organization's security policy

A list of all employee passwords

A list of identified vulnerabilities and their severity

After a critical vulnerability was patched on a server, the security team needs to confirm that the remediation was successful. What is the most reliable method to validate the fix?

Wait for the next scheduled scan and compare the results

Re-run the vulnerability scanner against the server and confirm the finding is no longer present

Review the patch management logs to confirm the patch was installed

Check the vendor's website for a confirmation that the patch works

What is the primary purpose of vulnerability analysis?

To assign a severity score to each vulnerability

To patch all identified vulnerabilities immediately

To identify the presence of vulnerabilities in a system

To determine the potential impact and exploitability of vulnerabilities

A security team is conducting a vulnerability assessment of an internal application. They need to identify vulnerabilities that require valid user credentials to exploit. Which scanning approach should they use?

An authenticated scan using a valid user account

An unauthenticated scan from outside the network

A passive network scan to observe traffic

A port scan to identify open services

CompTIASecurity+

Domain 4Objective 3

Vulnerability Management SY0-701 Practice Questions (Page 2)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

5concepts

28%of the exam

Questions 6–10

6foundation · easy
Which of the following is a common remediation strategy for a software vulnerability?
Select an answer first
7foundation · easy
Which of the following is typically included in a vulnerability report?
Select an answer first
8application · medium
After a critical vulnerability was patched on a server, the security team needs to confirm that the remediation was successful. What is the most reliable method to validate the fix?
Select an answer first
9foundation · easy
What is the primary purpose of vulnerability analysis?
Select an answer first
10application · medium
A security team is conducting a vulnerability assessment of an internal application. They need to identify vulnerabilities that require valid user credentials to exploit. Which scanning approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.