CompTIA SY0-701 Practice Exams
Last updated on Oct 22,2026- Exam Code: SY0-701
- Exam Name: CompTIA Security+
- Certification Provider: CompTIA
- Latest update: Oct 22,2026
A spoofed identity was detected for a digital certificate.
Which of the following are the type of unidentified key and the certificate mat could be in use on the company domain?
- A . Private key and root certificate
- B . Public key and expired certificate
- C . Private key and self-signed certificate
- D . Public key and wildcard certificate
A security audit of an organization revealed that most of the IT staff members have domain administrator credentials and do not change the passwords regularly.
Which of the following solutions should the security learn propose to resolve the findings in the most complete way?
- A . Creating group policies to enforce password rotation on domain administrator credentials
- B . Reviewing the domain administrator group, removing all unnecessary administrators, and rotating all passwords
- C . Integrating the domain administrator’s group with an IdP and requiring SSO with MFA for all access
- D . Securing domain administrator credentials in a PAM vault and controlling access with role-based access control
A systems administrator is auditing all company servers to ensure. They meet the minimum security baseline While auditing a Linux server, the systems administrator observes the /etc/shadow file has permissions beyond the baseline recommendation.
Which of the following commands should the systems administrator use to resolve this issue?
- A . chmod
- B . grep
- C . dd
- D . passwd
A hacker gained access to a system via a phishing attempt that was a direct result of a user clicking a suspicious link. The link laterally deployed ransomware, which laid dormant for multiple weeks, across the network.
Which of the following would have mitigated the spread?
- A . IPS
- B . IDS
- C . WAF
- D . UAT
Which of the following is die most important security concern when using legacy systems to provide production service?
- A . Instability
- B . Lack of vendor support
- C . Loss of availability
- D . Use of insecure protocols
A website user is locked out of an account after clicking an email link and visiting a different website Web server logs show the user’s password was changed, even though the user did not change the password.
Which of the following is the most likely cause?
- A . Cross-sue request forgery
- B . Directory traversal
- C . ARP poisoning
- D . SQL injection
A bank set up a new server that contains customers’ Pll.
Which of the following should the bank use to make sure the sensitive data is not modified?
- A . Full disk encryption
- B . Network access control
- C . File integrity monitoring
- D . User behavior analytics
A business received a small grant to migrate its infrastructure to an off-premises solution.
Which of the following should be considered first?
- A . Security of cloud providers
- B . Cost of implementation
- C . Ability of engineers
- D . Security of architecture
A business received a small grant to migrate its infrastructure to an off-premises solution.
Which of the following should be considered first?
- A . Security of cloud providers
- B . Cost of implementation
- C . Ability of engineers
- D . Security of architecture
Which of the following aspects of the data management life cycle is most directly impacted by local and international regulations?
- A . Destruction
- B . Certification
- C . Retention
- D . Sanitization