CompTIA SY0-701 Practice Exams
Last updated on Oct 22,2026- Exam Code: SY0-701
- Exam Name: CompTIA Security+
- Certification Provider: CompTIA
- Latest update: Oct 22,2026
A security analyst scans a company’s public network and discovers a host is running a remote desktop that can be used to access the production network.
Which of the following changes should the security analyst recommend?
- A . Changing the remote desktop port to a non-standard number
- B . Setting up a VPN and placing the jump server inside the firewall
- C . Using a proxy for web connections from the remote desktop server
- D . Connecting the remote server to the domain and increasing the password length
A company is concerned about weather events causing damage to the server room and downtime.
Which of the following should the company consider?
- A . Clustering servers
- B . Geographic dispersion
- C . Load balancers
- D . Off-site backups
Which of the following describes an executive team that is meeting in a board room and testing the company’s incident response plan?
- A . Continuity of operations
- B . Capacity planning
- C . Tabletop exercise
- D . Parallel processing
Which of the following best describes why me SMS DIP authentication method is more risky to implement than the TOTP method?
- A . The SMS OTP method requires an end user to have an active mobile telephone service and SIM card.
- B . Generally. SMS OTP codes are valid for up to 15 minutes while the TOTP time frame is 30 to 60 seconds
- C . The SMS OTP is more likely to be intercepted and lead to unauthorized disclosure of the code than the TOTP method.
- D . The algorithm used to generate on SMS OTP code is weaker than the one used to generate a TOTP code
An organization implemented cloud-managed IP cameras to monitor building entry points and sensitive areas. The service provider enables direct TCP/IP connection to stream live video footage from each camera. The organization wants to ensure this stream is encrypted and authenticated.
Which of the following protocols should be implemented to best meet this objective?
- A . SSH
- B . SRTP
- C . S/MIME
- D . PPTP
An organization wants to limit potential impact to its log-in database in the event of a breach.
Which of the following options is the security team most likely to recommend?
- A . Tokenization
- B . Hashing
- C . Obfuscation
- D . Segmentation
A group of developers has a shared backup account to access the source code repository.
Which of the following is the best way to secure the backup account if there is an SSO failure?
- A . RAS
- B . EAP
- C . SAML
- D . PAM
Which of the following is the most effective way to protect an application server running software that is no longer supported from network threats?
- A . Air gap
- B . Barricade
- C . Port security
- D . Screen subnet
Which of the following activities should a systems administrator perform to quarantine a potentially infected system?
- A . Move the device into an air-gapped environment.
- B . Disable remote log-in through Group Policy.
- C . Convert the device into a sandbox.
- D . Remote wipe the device using the MDM platform.
Which of the following environments utilizes a subset of customer data and is most likely to be used
An IT manager is putting together a documented plan describing how the organization will keep operating in the event of a global incident.
Which of the following plans is the IT manager creating?
- A . Business continuity
- B . Physical security
- C . Change management
- D . Disaster recovery