Skip to content
CramShare
PremiumPractice exam

CompTIA Security+ Study Guide with over 500 Practice Test Questions: Exam SY0-701 (Sybex Study Guid

COMP100 Computer Science — exam and revision material · Other

Updated today

Computer Science exam material, 32 pages. Originally published on StudyMerit.

Pages
32
Academic year
2025/2026
Language
English

What’s included

Preview 3 of 32 pages

See the first 3 pages exactly as they appear in the document.

Read page 1 as text

100% Valid and Newest Version SY0-701 Questions & Answers shared by Certleader https://www.certleader.com/SY0-701-dumps.html (0 Q&As) SY0-701 Dumps CompTIA Security+ Exam https://www.certleader.com/SY0-701-dumps.html The Leader of IT Certification visit - https://www.certleader.com Downloaded by Clement Kariuki (clementkariuki738@gmail.com) lOMoARcPSD|69697795

Read page 2 as text

100% Valid and Newest Version SY0-701 Questions & Answers shared by Certleader https://www.certleader.com/SY0-701-dumps.html (0 Q&As) NEW QUESTION 1 - (Exam Topic 1) A software company is analyzing a process that detects software vulnerabilities at the earliest stage possible. The goal is to scan the source looking for unsecure practices and weaknesses before the application is deployed in a runtime environment. Which of the following would BEST assist the company with this objective? A. Use fuzzing testing B. Use a web vulnerability scanner C. Use static code analysis D. Use a penetration-testing OS Answer: C Explanation: Using static code analysis would be the best approach to scan the source code looking for unsecure practices and weaknesses before the application is deployed in a runtime environment. This method involves analyzing the source code without actually running the software, which can identify security vulnerabilities that may not be detected by other testing methods. References: CompTIA Security+ Study Guide, Exam SY0-601, 4th Edition, Chapter 6: Risk Management, pp. 292-295 NEW QUESTION 2 - (Exam Topic 1) As part of annual audit requirements, the security team performed a review of exceptions to the company policy that allows specific users the ability to use USB storage devices on their laptops The review yielded the following results. • The exception process and policy have been correctly followed by the majority of users • A small number of users did not create tickets for the requests but were granted access • All access had been approved by supervisors. • Valid requests for the access sporadically occurred across multiple departments. • Access, in most cases, had not been removed when it was no longer needed Which of the following should the company do to ensure that appropriate access is not disrupted but unneeded access is removed in a reasonable time frame? A. Create an automated, monthly attestation process that removes access if an employee's supervisor denies the approval B. Remove access for all employees and only allow new access to be granted if the employee's supervisor approves the request C. Perform a quarterly audit of all user accounts that have been granted access and verify the exceptions with the management team D. Implement a ticketing system that tracks each request and generates reports listing which employees actively use USB storage devices Answer: A Explanation: According to the CompTIA Security+ SY0-601 documents, the correct answer option is A. Create an automated, monthly attestation process that removes access if an employee’s supervisor denies the approval12. This option ensures that appropriate access is not disrupted but unneeded access is removed in a reasonable time frame by requiring supervisors to approve or deny the exceptions on a regular basis. It also reduces the manual workload of the security team and improves the compliance with the company policy. NEW QUESTION 3 - (Exam Topic 1) A network engineer and a security engineer are discussing ways to monitor network operations. Which of the following is the BEST method? A. Disable Telnet and force SSH. B. Establish a continuous ping. C. Utilize an agentless monitor D. Enable SNMPv3 With passwords. Answer: C Explanation: An agentless monitor is the best method to monitor network operations because it does not require any software or agents to be installed on the devices being monitored, making it less intrusive and less likely to disrupt network operations. This method can monitor various aspects of network operations, such as traffic, performance, and security. CompTIA Security+ Study Guide, Sixth Edition (SY0-601), Chapter 4: Attacks, Threats, and Vulnerabilities, Monitoring and Detection Techniques, pg. 167-170. NEW QUESTION 4 - (Exam Topic 1) A Chief Information Officer is concerned about employees using company-issued laptops to steal data when accessing network shares. Which of the following should the company implement? A. DLP B. CASB C. HIDS D. EDR E. UEFI Answer: A Explanation: The company should implement Data Loss Prevention (DLP) to prevent employees from stealing data. References: CompTIA Security+ Study Guide: Exam SY0-601, Chapter 8 NEW QUESTION 5 - (Exam Topic 1) The Leader of IT Certification visit - https://www.certleader.com Downloaded by Clement Kariuki (clementkariuki738@gmail.com) lOMoARcPSD|69697795

Read page 3 as text

100% Valid and Newest Version SY0-701 Questions & Answers shared by Certleader https://www.certleader.com/SY0-701-dumps.html (0 Q&As) The Chief Executive Officer announced a new partnership with a strategic vendor and asked the Chief Information Security Officer to federate user digital identities using SAML-based protocols. Which of the following will this enable? A. SSO B. MFA C. PKI D. OLP Answer: A Explanation: Federating user digital identities using SAML-based protocols enables Single Sign-On (SSO), which allows users to log in once and access multiple applications without having to enter their credentials for each one. References: CompTIA Security+ Certification Exam Objectives 1.3: Explain authentication and access controls. CompTIA Security+ Study Guide, Sixth Edition, pages 41-42 NEW QUESTION 6 - (Exam Topic 1) A cybersecurity administrator needs to implement a Layer 7 security control on a network and block potential attacks. Which of the following can block an attack at Layer 7? (Select TWO). A. HIDS B. NIPS C. HSM D. WAF E. NAC F. NIDS G. Stateless firewall Answer: DF Explanation: A WAF (Web Application Firewall) and NIDS (Network Intrusion Detection System) are both examples of Layer 7 security controls. A WAF can block attacks at the application layer (Layer 7) of the OSI model by filtering traffic to and from a web server. NIDS can also detect attacks at Layer 7 by monitoring network traffic for suspicious patterns and behaviors. References: CompTIA Security+ Study Guide, pages 94-95, 116-118 NEW QUESTION 7 - (Exam Topic 1) A security analyst was deploying a new website and found a connection attempting to authenticate on the site's portal. While Investigating The incident, the analyst identified the following Input in the username field: Which of the following BEST explains this type of attack? A. DLL injection to hijack administrator services B. SQLi on the field to bypass authentication C. Execution of a stored XSS on the website D. Code to execute a race condition on the server Answer: B Explanation: The input "admin' or 1=1--" in the username field is an example of SQL injection (SQLi) attack. In this case, the attacker is attempting to bypass authentication by injecting SQL code into the username field that will cause the authentication check to always return true. References: CompTIA Security+ SY0-601 Exam Objectives: 3.1 Given a scenario, use appropriate software tools to assess the security posture of an organization. NEW QUESTION 8 - (Exam Topic 1) Which of the following BEST describes a technique that compensates researchers for finding vulnerabilities? A. Penetration testing B. Code review C. Wardriving D. Bug bounty Answer: D Explanation: A bug bounty is a technique that compensates researchers for finding vulnerabilities in software or systems. A bug bounty program is an initiative that offers rewards, usually monetary, to ethical hackers who report security flaws to the owners or developers of the software or system. Bug bounty programs are often used by companies such as Meta (formerly Facebook), Google, Microsoft, and others to improve the security of their products and services Bug bounty programs compensate researchers, often financially, for finding vulnerabilities in software, websites, or other technology. These programs provide an additional layer of security testing and incentivize researchers to report vulnerabilities instead of exploiting them. NEW QUESTION 9 - (Exam Topic 1) Which of the following should a technician consider when selecting an encryption method for data that needs to remain confidential for a specific length of time? The Leader of IT Certification visit - https://www.certleader.com Downloaded by Clement Kariuki (clementkariuki738@gmail.com) lOMoARcPSD|69697795

29 more pages after this

You’ve read 3 of 32. Unlock once and it stays in your library — and if the rest doesn’t match what you just read, you get a refund.

Others on this course also opened

$10.00

Yours permanently