Which of the following would best prepare a security team for a specific incident response scenario?
Correct Answer: D
ATabletop exercise (D)is adiscussion-based simulationof an incident scenario. It allows security teams towalk through procedures, responsibilities, and communicationsin alow-pressure environment, improving readiness without impacting operations. It is specifically designed toprepare teams for real-world incident handling.
SY0-701 Exam Question 287
A company wants to track modifications to the code used to build new virtual servers. Which of the following will the company most likely deploy?
Correct Answer: D
Detailed A version control tool, such as Git, tracks changes made to code, maintains history, and allows developers to manage and revert to earlier versions when needed. This ensures accountability and control over modifications. Reference: CompTIA Security+ SY0-701 Study Guide, Domain 3: Security Architecture, Section: "Version Control and Documentation".
SY0-701 Exam Question 288
Which of the following is the most important element when defining effective security governance?
Correct Answer: C
Effective security governance requires clear assignment of roles and responsibilities, such as owners, controllers, and custodians, to ensure accountability for security-related tasks and data management within the organization. This establishes clear lines of responsibility and authority, which is fundamental to governance frameworks. Reference: CompTIA Security+ SY0-701 Official Study Guide, Domain 5.1: " Assigning roles and responsibilities is fundamental to effective security governance. " Exam Objectives 5.1: "Explain the importance of organizational security policies, standards, and frameworks."
SY0-701 Exam Question 289
Which of the following security concepts is accomplished when granting access after an individual has logged into a computer network?
Correct Answer: A
Detailed Authorization refers to the process of granting or denying specific rights to a user after verifying their identity through authentication. Reference: CompTIA Security+ SY0-701 Study Guide, Domain 1: General Security Concepts, Section: "Authentication, Authorization, and Accounting (AAA)".
SY0-701 Exam Question 290
A business is expanding to a new country and must protect customers from accidental disclosure of specific national identity information. Which of the following should the security engineer update to best meet business requirements?
Correct Answer: C
The requirement is to prevent the accidental disclosure of national identity information-highly sensitive personal data. The best solution is DLP (Data Loss Prevention). DLP tools monitor, detect, and block unauthorized transmission or exposure of sensitive data across: Email Cloud storage Endpoints Networks Databases In Security+ SY0-701, DLP is specifically recommended for ensuring compliance with privacy regulations, including those related to national identifiers (e.g., Social Security numbers, national ID numbers). A SIEM (A) aggregates logs but does not prevent data leakage. SCAP (B) provides standardized security configuration assessments, unrelated to data protection. A WAF (D) helps protect web applications but does not prevent sensitive data exfiltration. Since the requirement focuses on preventing accidental disclosure, DLP is the only technology capable of detecting, labeling, blocking, and reporting attempts to move or expose sensitive national identity data. Therefore, the correct answer is C.
