SY0-701 Question #132: Real Exam Question with Answer & Explanation

The correct answer is D: Compensating controls. Compensating controls are alternative security measures that are implemented when the primary controls are not feasible, cost-effective, or sufficient to mitigate the risk. In this case, the organization used compensating controls to protect the legacy system from potential attac

Submitted by fatema_kw· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

An organization disabled unneeded services and placed a firewall in front of a business-critical legacy system. Which of the following best describes the actions taken by the organization?

Options

AException
BSegmentation
CRisk transfer
DCompensating controls

Explanation

Compensating controls are alternative security measures that are implemented when the primary controls are not feasible, cost-effective, or sufficient to mitigate the risk. In this case, the organization used compensating controls to protect the legacy system from potential attacks by disabling unneeded services and placing a firewall in front of it. This reduced the attack surface and the likelihood of exploitation.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice Browse All SY0-701 Questions