Objective 4.5
SY0-701Given a scenario, modify enterprise capabilities to enhance security
Objective 4.5 sits in Security Operations, which carries 28% of the Security+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.
Objective title verbatim from the official objectives. CompTIA exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An administrator configures email anti-spoofing so a receiver can verify which servers may send for the domain and confirm messages were unaltered in transit. Which two standards provide these checks? (Choose two.)
Correct.
Checked against learn.microsoft.com, September 2026Concept
Stopping forged senders leans on two independent checks: one that lists which mail servers are allowed to send for a domain, and one that cryptographically signs the message so tampering in transit shows up.
Why A and C
SPF names the servers authorized to send for a domain, and DKIM signs message elements so alteration in transit is detectable. Microsoft describes both as the checks that email anti-spoofing relies on.
Source
Microsoft Learn: Email authentication in Microsoft 365, checked September 2026Sender Policy Framework (SPF): Specifies the source email servers that are authorized to send mail for the domain. DomainKeys Identified Mail (DKIM): Uses a domain to digitally sign important elements of the message to ensure the message remains unaltered in transit.
Now you: objective 4.5 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An engineer must place a control between internal users and external servers where no direct connection is ever formed between the two hosts. Which firewall capability meets this?
Sample question 2 of 3
An analyst finds that a stateful firewall drops inbound DNS responses from external servers while outbound DNS is permitted. Which condition must hold for a response to pass?
Sample question 3 of 3
A user connects remotely with valid credentials, but the laptop's malware scan is months old. Network access control runs its checks. What access should the device receive?
That’s 3 of the full Security+ bank.
Keep going free: 10 questions per certification in bank practice, with no account.
Continue practicingRead the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.
More objectives in Security Operations
- 4.1 Given a scenario, apply common security techniques to computing resources
- 4.2 Explain the security implications of proper hardware, software, and data asset management
- 4.3 Explain various activities associated with vulnerability management
- 4.4 Explain security alerting and monitoring concepts and tools
- 4.6 Given a scenario, implement and maintain identity and access management
- 4.7 Explain the importance of automation and orchestration related to secure operations
- 4.8 Explain appropriate incident response activities
- 4.9 Given a scenario, use data sources to support an investigation