CompTIA Security+ SY0-701

A contractor connects through the corporate VPN. The security team still evaluates the device posture and requested resource before granting access. Which principle does this illustrate?

A payroll application stores passwords. Which design best limits damage if the password database is stolen?

A finance employee receives an urgent message to change a supplier's bank account. What is the best verification step?

A security analyst finds a critical vulnerability on an internet-facing server with active exploitation reported. What most directly supports prioritizing it ahead of a similar internal finding?

A team needs a service account to read one storage bucket during a nightly job. Which access design follows least privilege?

Ransomware is actively encrypting files on a workstation. The incident playbook authorizes network isolation while preserving evidence. Which action best fits that stage?

An organization has backups that a compromised administrator account can delete. Which improvement most directly reduces that recovery risk?

A business can tolerate losing at most 15 minutes of transaction data after an outage. Which target expresses this requirement?

A team replaces real customer identifiers with reversible random tokens and keeps the mapping in a protected service. What has it implemented?

A vendor provides a software bill of materials with a release. How does this help the customer's security team?

An analyst correlates identity-provider failures with endpoint alerts and firewall events. Which capability most directly supports this work?

A risk owner signs off on keeping a low-impact issue after reviewing remediation cost and monitoring requirements. Which risk response is being used?