FirstTry

Objective 2.5

SY0-701

Explain the purpose of mitigation techniques used to secure the enterprise

Objective 2.5 sits in Threats, Vulnerabilities, and Mitigations, which carries 22% of the Security+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-5Threats, Vulnerabilities, and Mitigations

A security team implementing a Zero Trust approach for VM access wants decisions based on more than network location alone. Which combination of factors should drive access decisions?

Firewall rule priority order and protocolRule priority and protocol are NSG evaluation mechanics, not access decision factors.
Device, identity, and assurance signalsCorrect · your answerCorrect: matches the device, identity, and assurance-based access model described.
Subnet membership and VLAN tag assignmentSubnet and VLAN membership reflect network segmentation, not identity or device trust.
Source IP address and destination port onlyIP and port alone represent traditional network-location-based filtering, the opposite of Zero Trust.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Zero trust access control replaces implicit trust based on network location with claims about the device and user requesting access.

Why B

Zero Trust architectures gate access using device and identity trust claims, along with assurance signals, rather than relying on where the request originates on the network.

Source

Give Conditional Access to resources based on device, identity, assurance, network location, and more.

Microsoft Learn: Azure network security best practices, checked July 2026
#access-control

Now you: objective 2.5 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-5Threats, Vulnerabilities, and Mitigations

Malware keeps executing on kiosk workstations that run a fixed set of applications. The security team wants any unauthorized executable blocked. Which mitigation fits?

Sample question 2 of 3

2-5Threats, Vulnerabilities, and Mitigations

Decommissioned drives held top-secret research and will leave the company for disposal. Policy requires the data unrecoverable by laboratory techniques and the drives never reusable. Which sanitization category applies?

Sample question 3 of 3

2-5Threats, Vulnerabilities, and Mitigations

A new application server ships with file sharing, a web service, and SNMP utilities the application does not need. What should the administrator do with them?

That’s 3 of the full Security+ bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Threats, Vulnerabilities, and Mitigations