CompTIA Security+ SY0-701

Question1 / 20

Set · 2026-11 practice questions

A help-desk caller pressures an employee to bypass identity checks because an executive is waiting. Which technique is most evident?

Select one

Report an error

The exam and question are included automatically.

Questions & reviewAccuracy —
CorrectIncorrectUnanswered
20 questions on this page
  1. A help-desk caller pressures an employee to bypass identity checks because an executive is waiting. Which technique is most evident?

  2. A company requires a password and a hardware security key. What is the main security benefit?

  3. An account should read reports but never edit them. Which principle should guide its permissions?

  4. Two employees must approve a high-value transfer. Which control is being used?

  5. A server stores password verification data. Which design is preferable?

  6. An application uses parameterized database queries. Which threat does this primarily mitigate?

  7. A developer encodes untrusted text before inserting it into an HTML page. Which attack is this addressing?

  8. A compromised workstation should not freely access payroll servers. Which architecture helps?

  9. An organization protects stored laptop data against theft using encryption. What is a remaining requirement?

  10. Which control helps detect unauthorized changes to a critical file?

  11. A team aggregates logs from servers, firewalls and identity systems to correlate suspicious activity. Which capability fits?

  12. A newly published flaw has no vendor patch yet. What should defenders consider first?

  13. A vulnerability scanner reports a service version that is not installed. What should the analyst do?

  14. After containing ransomware, why verify backups before restoration?

  15. Which metric expresses the maximum targeted time to restore a service?

  16. A business can tolerate losing at most 30 minutes of transaction data. Which objective captures this?

  17. Why are forensic copies and evidence transfers documented?

  18. A vendor needs temporary production access for a support task. Which option is best?

  19. An assessor calculates annualized loss expectancy from a single-loss estimate of $20,000 and a frequency of 0.2 per year. What is the result?

  20. A company accepts a documented low-impact risk because mitigation costs exceed the benefit. Which response is this?

Exam comments