CompTIA SY0-701 Practice Exams
Last updated on Oct 22,2026- Exam Code: SY0-701
- Exam Name: CompTIA Security+
- Certification Provider: CompTIA
- Latest update: Oct 22,2026
Which of the following is best used to detect fraud by assigning employees to different roles?
- A . Least privilege
- B . Mandatory vacation
- C . Separation of duties
- D . Job rotation
A systems administrator creates a script that validates OS version, patch levels, and installed applications when users log in.
Which of the following examples best describes the purpose of this script?
- A . Resource scaling
- B . Policy enumeration
- C . Baseline enforcement
- D . Guardrails implementation
Which of the following involves an attempt to take advantage of database misconfigurations?
- A . Buffer overflow
- B . SQL injection
- C . VM escape
- D . Memory injection
The security operations center is researching an event concerning a suspicious IP address A security analyst looks at the following event logs and discovers that a significant portion of the user accounts have experienced faded log-In attempts when authenticating from the same IP address:
Which of the following most likely describes attack that took place?
- A . Spraying
- B . Brute-force
- C . Dictionary
- D . Rainbow table
A user would like to install software and features that are not available with a smartphone’s default software.
Which of the following would allow the user to install unauthorized software and enable new features?
- A . SOU
- B . Cross-site scripting
- C . Jailbreaking
- D . Side loading
A user would like to install software and features that are not available with a smartphone’s default software.
Which of the following would allow the user to install unauthorized software and enable new features?
- A . SOU
- B . Cross-site scripting
- C . Jailbreaking
- D . Side loading
An IT security team is concerned about the confidentiality of documents left unattended in MFPs.
Which of the following should the security team do to mitigate the situation?
- A . Educate users about the importance of paper shredder devices.
- B . Deploy an authentication factor that requires ln-person action before printing.
- C . Install a software client m every computer authorized to use the MFPs.
- D . Update the management software to utilize encryption.
Which of the following types of vulnerabilities is primarily caused by improper use and management of cryptographic certificates?
- A . Misconfiguration
- B . Resource reuse
- C . Insecure key storage
- D . Weak cipher suites
A small business uses kiosks on the sales floor to display product information for customers. A security team discovers the kiosks use end-of-life operating systems.
Which of the following is the security team most likely to document as a security implication of the current architecture?
- A . Patch availability
- B . Product software compatibility
- C . Ease of recovery
- D . Cost of replacement
An administrator at a small business notices an increase in support calls from employees who receive a blocked page message after trying to navigate to a spoofed website.
Which of the following should the administrator do?
- A . Deploy multifactor authentication.
- B . Decrease the level of the web filter settings
- C . Implement security awareness training.
- D . Update the acceptable use policy