Free Access to CompTIA.SY0-701.v2025-08-18.q266 with Valid Practice Test (Page 6)

Question 21

An administrator wants to perform a risk assessment without using proprietary company information. Which of the following methods should the administrator use to gather information?

A.Network scanning
B.Penetration testing
C.Open-source intelligence
D.Configuration auditing

Question 22

Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated:
"I'm in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address." Which of the following are the best responses to this situation? (Choose two).

A.Cancel current employee recognition gift cards.
B.Add a smishing exercise to the annual company training.
C.Issue a general email warning to the company.
D.Have the CEO change phone numbers.
E.Conduct a forensic investigation on the CEO's phone.
F.Implement mobile device management.

Question 23

A help desk employee receives a call from someone impersonating the Chief Executive Officer.
The caller asks for assistance with resetting a password. Which of the following best describes this event?

A.Blackmail
B.Misinformation
C.Hacktivism
D.Vishing

Question 24

Which of the following would be the best way to handle a critical business application that is running on a legacy server?

A.Segmentation
B.Isolation
C.Hardening
D.Decommissioning

Correct Answer: C

Explanation
A legacy server is a server that is running outdated or unsupported software or hardware, which may pose security risks and compatibility issues. A critical business application is an application that is essential for the operation and continuity of the business, such as accounting, payroll, or inventory management. A legacy server running a critical business application may be difficult to replace or upgrade, but it should not be left unsecured or exposed to potential threats.
One of the best ways to handle a legacy server running a critical business application is to harden it. Hardening is the process of applying security measures and configurations to a system to reduce its attack surface and vulnerability. Hardening a legacy server may involve steps such as:
Applying patches and updates to the operating system and the application, if available Removing or disabling unnecessary services, features, or accounts Configuring firewall rules and network access control lists to restrict inbound and outbound traffic Enabling encryption and authentication for data transmission and storage Implementing logging and monitoring tools to detect and respond to anomalous or malicious activity Performing regular backups and testing of the system and the application Hardening a legacy server can help protect the critical business application from unauthorized access, modification, or disruption, while maintaining its functionality and availability. However, hardening a legacy server is not a permanent solution, and it may not be sufficient to address all the security issues and challenges posed by the outdated or unsupported system. Therefore, it is advisable to plan for the eventual decommissioning or migration of the legacy server to a more secure and modern platform, as soon as possible.
References: CompTIA Security+ SY0-701 Certification Study Guide, Chapter 3: Architecture and Design, Section 3.2: Secure System Design, Page 133 1; CompTIA Security+ Certification Exam Objectives, Domain
3: Architecture and Design, Objective 3.2: Explain the importance of secure system design, Subobjective:
Legacy systems 2

Question 25

A company must ensure sensitive data at rest is rendered unreadable. Which of the following will the company most likely use?

A.Hashing
B.Tokenization
C.Encryption
D.Segmentation

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File