SEC+ SY0-701 V7 Security architecture Runs in your browser · no setup Preview · not independently reviewed

Harden an exposed application

Evaluate firewall rules and apply least privilege without breaking the service.

Estimated10 min

DifficultyAdvanced

Points7

Content record

Preview · not independently reviewed

Mapped to CompTIA SY0-701 objectives · Internal validation 2026-08-12 · Available as preview practice, but a named independent subject-matter expert has not yet verified the question and answer key.

Community review →

4.5Given a scenario, modify enterprise capabilities to enhance security. 3.2Given a scenario, apply security principles to secure enterprise infrastructure.

Show review record and official sources

Method: Mapped to SY0-701 enterprise infrastructure and firewall objectives; least-privilege rules reviewed.

Current-profile check: 2026-08-12 · Next review due 2026-12-15

Inspect the evidence

Use only the information provided to complete the tasks.

Current rules (top to bottom)

table

#	Source	Destination	Service	Action
10	Internet	Load balancer	TCP 443	Allow
20	Internet	APP subnet	TCP 22	Allow
30	Load balancer	APP subnet	TCP 8443	Allow
40	APP subnet	DB-01	TCP 5432	Allow
50	Any	Any	Any	Allow

Required flows

list

›Customers → load balancer over HTTPS
›Load balancer → application servers over TCP 8443
›Application servers → PostgreSQL on DB-01
›Administrators → application servers over SSH through the jump host 10.20.5.10

Complete the response

Partial credit is available for matching, ordering, and multi-select tasks.

multi select

Select the TWO rules that must be removed or replaced immediately.

2 pts

Rule 10 — Internet to load balancer on 443 Rule 20 — Internet to APP subnet on 22 Rule 30 — Load balancer to APP subnet on 8443 Rule 40 — APP subnet to DB-01 on 5432 Rule 50 — Any to any on any service

Need a hint?

Evaluate each option independently against the scenario evidence instead of treating the list as one decision.

Show another hint

Choose only options that directly satisfy the prompt; being generally true is not enough.

single choice

Which replacement for rule 20 best preserves administrative access?

2 pts

10.20.5.10 → APP subnet, TCP 22, allow Corporate LAN → APP subnet, any service, allow APP subnet → 10.20.5.10, TCP 22, allow Internet → APP subnet, TCP 22, allow with logging

Need a hint?

Restate the exact outcome or failure the prompt asks about before comparing choices.

Show another hint

Eliminate choices that solve a nearby problem, change more than requested, or do not fit the evidence.

matching

Place each component in the most appropriate security zone.

3 pts

Public load balancer → Application servers → Database server →

Need a hint?

Start with the row and choice that have the most distinctive purpose, then use that pair to narrow the rest.

Show another hint

For each remaining pair, explain the relationship in one sentence before selecting it.

Ready to check your work?Submit to finish this session and review your feedback. Extra practice is optional.

Persistent progress

Attempt history

Every submission is retained. Starting another attempt never replaces or unlocks the previous one.

No attempts yet

Your first submitted score and detailed answer review will appear here.

Community quality control

Question or answer look wrong?

Proposals and votes help staff prioritize review. They never change the scoring key automatically.

Full review queue →

No community corrections yet

Be the first to flag unclear wording, an answer-key issue, or a source that needs another look.

Propose a correction

Preview · not independently reviewed

Inspect the evidence

Complete the response

Review your result

Attempt history

Question or answer look wrong?