CompTIA Security+ SY0-701 practice questions

Question 1

An organization is required to provide assurance that its controls are properly designed and operating effectively. Which of the following reports will best achieve the objective?

Accepted Answer

Independent audit

Answer

Red teaming

Answer

Penetration testing

Answer

Vulnerability assessment

Question 2

A company is aware of a given security risk related to a specific market segment. The business chooses not to accept responsibility and target their services to a different market segment. Which of the following describes this risk management strategy?

Accepted Answer

Avoid

Answer

Exemption

Answer

Exception

Answer

Transfer

Question 3

Which of the following security concepts is accomplished with the installation of a RADIUS server?

Accepted Answer

AAA

Answer

CIA

Answer

ACL

Answer

PEM

Question 4

A security analyst is reviewing logs and discovers the following: Which of the following should be used to best mitigate this type of attack?

Accepted Answer

Input sanitization

Answer

Secure cookies

Answer

Static code analysis

Answer

Sandboxing

Question 5

Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate endpoints?

Accepted Answer

To track the status of patching installations

Answer

To find shadow IT cloud deployments

Answer

To continuously the monitor hardware inventory

Answer

To hunt for active attackers in the network

Question 6

A security analyst needs to improve the company's authentication policy following a password audit. Which of the following should be included in the policy? (Select two).

Accepted Answer

Length

Accepted Answer

Complexity

Answer

Least privilege

Answer

Something you have

Answer

Security keys

Answer

Biometrics

Question 7

Which of the following activities are associated with vulnerability management? (Select two).

Accepted Answer

Reporting

Accepted Answer

Prioritization

Answer

Exploiting

Answer

Correlation

Answer

Containment

Answer

Tabletop exercise

Question 8

Which of the following elements of digital forensics should a company use if it needs to ensure the integrity of evidence?

Accepted Answer

Preservation

Answer

E-discovery

Answer

Acquisition

Answer

Containment

Question 9

A company evaluates several options that would allow employees to have remote access to the network. The security team wants to ensure the solution includes AAA to comply with internal security policies. Which of the following should the security team recommend?

Accepted Answer

IPSec with RADIUS

Answer

RDP connection with LDAPS

Answer

Web proxy for all remote traffic

Answer

Jump server with 802.1X

Question 10

Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?

Accepted Answer

Unidentified removable devices

Answer

Default network device credentials

Answer

Spear phishing emails

Answer

Impersonation of business units through typosquatting

CompTIA Security+ SY0-701 practice questions

Question stream

Discussion

Manage your cookie preferences

Loading subject practice

Loading Brainliest

Loading subject practice

CompTIA Security+ SY0-701 practice questions

Question stream

Discussion

Practice overview