SY0-701 Question 188

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C3

  Compensating controls are alternative measures implemented when primary controls (e.g., patching, upgrading) cannot be applied. Here: The legacy server cannot be updated (e.g., due to end-of-life OS or application dependencies). Network segmentation (isolating it in a private VLAN) compensates for the lack of direct security updates by limiting exposure.

• Chose D1

  The correct answer is D. Preventive. Segmenting a critical legacy server into a private network is a preventive security control. Preventive controls are designed to stop security incidents before they occur by reducing the attack surface or limiting unauthorized access. Network segmentation isolates the server, restricting access to only authorized users or systems, thereby preventing potential threats from reaching it.

• Chose C2

  I go with C