CompTIA Security+ · SY0-701
Objective 2.5: Explain the purpose of mitigation techniques used to secure the enterprise
Practice questions for Security+ objective 2.5, “Explain the purpose of mitigation techniques used to secure the enterprise.” Every question is original, written to the SY0-701 exam objectives, and comes with a full explanation — answer them below to see instant grading.
This objective sits in Domain 2.0: Threats, Vulnerabilities, and Mitigations, which is about 22% of the exam — so mastering it moves your readiness score meaningfully.
1.An organization encrypts all data stored on laptops. A laptop is stolen, but the data is inaccessible to the thief. Which security property does this encryption protect?
2.A security administrator applies operating system and application patches within 48 hours of critical patches being released by vendors. Which mitigation technique is this, and what risk does it primarily address?
3.A financial services company's policy requires that systems storing cardholder data be completely decommissioned and replaced rather than repurposed for other functions. Which security concern does this policy PRIMARILY address?
4.A security engineer is reviewing the configuration of an internet-facing web application server. The server's HTTP response headers currently include: Server: Apache/2.4.51, X-Powered-By: PHP/8.0.12, and no Content-Security-Policy header is present. The engineer proposes removing the Server and X-Powered-By headers and adding a Content-Security-Policy header with a restrictive policy. A developer argues that these changes are unnecessary because the application has been penetration tested and no critical vulnerabilities were found. Which security principle does the engineer's proposal implement, and how does it address a limitation of the penetration test argument?
5.An organization implements mandatory security awareness training covering phishing recognition, password security, and social engineering tactics. Which mitigation category does this represent?
Practice every objective, adaptively
CertBench tracks your score on 2.5 and every other objective, then builds a daily plan that targets your weakest spots. Start with the free diagnostic.
Take the free diagnostic