CompTIA Security+ SY0-501

Which security principle grants only the permissions required for a task?

Which combination provides two different authentication factor types?

What is a cryptographic hash primarily used to verify?

An organization restricts access to payroll records so only authorized staff can read them. Which security objective is addressed most directly?

A recipient verifies a downloaded file's hash against a trusted published hash. Which property is being checked most directly?

A digital signature on a document can help a recipient establish which combination of properties?

A security camera records entries into a restricted server room. Which control function is its recording primarily providing?

A company cannot install a required patch immediately and temporarily isolates the affected system behind stricter access controls. How is the temporary alternative best described?

An employee receives a convincing text message asking them to sign in through a link controlled by an attacker. What is this attack called?

A user receives repeated unexpected MFA approval prompts after an attacker obtains the user's password. What is the most appropriate response?

A web application builds SQL by concatenating untrusted input. Which mitigation most directly addresses SQL injection?

An attacker places JavaScript in a comment that later executes in other users' browsers. Which vulnerability is demonstrated?

An application allows a signed-in user to download another user's invoice by changing an invoice ID in the URL. Which missing control is most relevant?

A network is divided so a compromise of a guest Wi-Fi client does not directly expose payroll servers. Which technique supports this design?

Which statement best reflects a zero trust approach?

A user authenticates with a password and a hardware security key. Which description is correct?

A service account needs database read access for one application and no interactive login. Which configuration best follows least privilege?

Why should password hashes normally use a unique salt for each password?

A company wants to protect a private key from direct export while allowing approved cryptographic operations. Which technology best fits?

A browser reports that a server certificate has expired. What should an administrator do?