CompTIA SY0-701 Practice Exams
Last updated on Oct 22,2026- Exam Code: SY0-701
- Exam Name: CompTIA Security+
- Certification Provider: CompTIA
- Latest update: Oct 22,2026
The Chief Information Security Officer of an organization needs to ensure recovery from ransomware would likely occur within the organization’s agreed-upon RPOs end RTOs.
Which of the following backup scenarios would best ensure recovery?
- A . Hourly differential backups stored on a local SAN array
- B . Dally full backups stored on premises in magnetic offline media
- C . Daly differential backups maintained by a third-party cloud provider
- D . Weekly full backups with daily incremental stored on a NAS drive
Which of the following considerations is the most important for an organization to evaluate as it establishes and maintains a data privacy program?
- A . Reporting structure for the data privacy officer
- B . Request process for data subject access
- C . Role as controller or processor
- D . Physical location of the company
Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gambling and is being blocked.
Which of the following changes would allow users to access the site?
- A . Creating a firewall rule to allow HTTPS traffic
- B . Configuring the IPS to allow shopping
- C . Tuning the DLP rule that detects credit card data
- D . Updating the categorization in the content filter
Which of the following is a primary security concern for a company setting up a BYOD program?
- A . End of life
- B . Buffer overflow
- C . VM escape
- D . Jailbreaking
Which of the following best describes the practice of researching laws and regulations related to information security operations within a specific industry?
- A . Compliance reporting
- B . GDPR
- C . Due diligence
- D . Attestation
A technician needs to apply a high-priority patch to a production system.
Which of the following steps should be taken first?
- A . Air gap the system.
- B . Move the system to a different network segment.
- C . Create a change control request.
- D . Apply the patch to the system.
Which of the following enables the use of an input field to run commands that can view or manipulate data?
- A . Cross-site scripting
- B . Side loading
- C . Buffer overflow
- D . SQL injection
A client demands at least 99.99% uptime from a service provider’s hosted security services.
Which of the following documents includes the information the service provider should return to the client?
- A . MOA
- B . SOW
- C . MOU
- D . SLA
Which of the following should be used to ensure a device is inaccessible to a network-connected resource?
- A . Disablement of unused services
- B . Web application firewall
- C . Host isolation
- D . Network-based IDS
A company must ensure sensitive data at rest is rendered unreadable.
Which of the following will the company most likely use?
- A . Hashing
- B . Tokenization
- C . Encryption
- D . Segmentation