Free Access to CompTIA.SY0-701.v2026-08-17.q349 with Valid Practice Test (Page 7)

Question 26

A company purchased cyber insurance to address items listed on the risk register. Which of the following strategies does this represent?

A.Accept
B.Transfer
C.Mitigate
D.Avoid

Correct Answer: B

Explanation
Cyber insurance is a type of insurance that covers the financial losses and liabilities that result from cyberattacks, such as data breaches, ransomware, denial-of-service, phishing, or malware. Cyber insurance can help a company recover from the costs of restoring data, repairing systems, paying ransoms, compensating customers, or facing legal actions. Cyber insurance is one of the possible strategies that a company can use to address the items listed on the risk register. A risk register is a document that records the identified risks, their probability, impact, and mitigation strategies for a project or an organization. The four common risk mitigation strategies are:
* Accept: The company acknowledges the risk and decides to accept the consequences without taking any action to reduce or eliminate the risk. This strategy is usually chosen when the risk is low or the cost of mitigation is too high.
* Transfer: The company transfers the risk to a third party, such as an insurance company, a vendor, or a partner. This strategy is usually chosen when the risk is high or the company lacks the resources or expertise to handle the risk.
* Mitigate: The company implements controls or measures to reduce the likelihood or impact of the risk.
This strategy is usually chosen when the risk is moderate or the cost of mitigation is reasonable.
* Avoid: The company eliminates the risk by changing the scope, plan, or design of the project or the organization. This strategy is usually chosen when the risk is unacceptable or the cost of mitigation is too high.
By purchasing cyber insurance, the company is transferring the risk to the insurance company, which will cover the financial losses and liabilities in case of a cyberattack. Therefore, the correct answer is B.
Transfer. References = CompTIA Security+ Study Guide (SY0-701), Chapter 8: Governance, Risk, and Compliance, page 377. Professor Messer's CompTIA SY0-701 Security+ Training Course, Section 8.1: Risk Management, video: Risk Mitigation Strategies (5:37).

Question 27

A company is working with a vendor to perform a penetration test Which of the following includes an estimate about the number of hours required to complete the engagement?

A.SOW
B.BPA
C.SLA
D.NDA

Question 28

A security analyst scans a company's public network and discovers a host is running a remote desktop that can be used to access the production network. Which of the following changes should the security analyst recommend?

A.Changing the remote desktop port to a non-standard number
B.Setting up a VPN and placing the jump server inside the firewall
C.Using a proxy for web connections from the remote desktop server
D.Connecting the remote server to the domain and increasing the password length

Question 29

A network manager wants to protect the company's VPN by implementing multifactor authentication that uses:
. Something you know
. Something you have
. Something you are
Which of the following would accomplish the manager's goal?

A.Domain name, PKI, GeolP lookup
B.VPN IP address, company ID, facial structure
C.Password, authentication token, thumbprint
D.Company URL, TLS certificate, home address

Question 30

A security analyst needs to propose a remediation plan 'or each item in a risk register. The item with the highest priority requires employees to have separate logins for SaaS solutions and different password complexity requirements for each solution. Which of the following implementation plans will most likely resolve this security issue?

A.Creating a unified password complexity standard
B.Integrating each SaaS solution with the Identity provider
C.Securing access to each SaaS by using a single wildcard certificate
D.Configuring geofencing on each SaaS solution

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File