CompTIA Security+ SY0-701
Practice CompTIA Security+ SY0-701 with 12 English questions, detailed explanations and related question links. Review security concepts, threats, architecture, operations and risk.
Set · 2026-11 practice questions
A help-desk caller pressures an employee to bypass identity checks because an executive is waiting. Which technique is most evident?
Questions & reviewAccuracy —
20 questions on this page
A help-desk caller pressures an employee to bypass identity checks because an executive is waiting. Which technique is most evident?
A company requires a password and a hardware security key. What is the main security benefit?
An account should read reports but never edit them. Which principle should guide its permissions?
Two employees must approve a high-value transfer. Which control is being used?
A server stores password verification data. Which design is preferable?
An application uses parameterized database queries. Which threat does this primarily mitigate?
A developer encodes untrusted text before inserting it into an HTML page. Which attack is this addressing?
A compromised workstation should not freely access payroll servers. Which architecture helps?
An organization protects stored laptop data against theft using encryption. What is a remaining requirement?
Which control helps detect unauthorized changes to a critical file?
A team aggregates logs from servers, firewalls and identity systems to correlate suspicious activity. Which capability fits?
A newly published flaw has no vendor patch yet. What should defenders consider first?
A vulnerability scanner reports a service version that is not installed. What should the analyst do?
After containing ransomware, why verify backups before restoration?
Which metric expresses the maximum targeted time to restore a service?
A business can tolerate losing at most 30 minutes of transaction data. Which objective captures this?
Why are forensic copies and evidence transfers documented?
A vendor needs temporary production access for a support task. Which option is best?
An assessor calculates annualized loss expectancy from a single-loss estimate of $20,000 and a frequency of 0.2 per year. What is the result?
A company accepts a documented low-impact risk because mitigation costs exceed the benefit. Which response is this?