Free Preparation Discussions
MENU
CompTIA SY0-701 Exam Questions
- Topic 1: General Security Concepts: This topic covers various types of security controls, fundamental security concepts, the importance of change management processes in security, and the significance of using suitable cryptographic solutions.
- Topic 2: Threats, Vulnerabilities, and Mitigations: In this topic, you'll find discussions comparing threat actors and motivations, explaining common threat vectors and attack surfaces, and outlining different types of vulnerabilities. Moreover, the topic focuses on analyzing indicators of malicious activity in scenarios and exploring mitigation techniques used to secure enterprises against threats.
- Topic 3: Security Architecture: Here, you'll learn about security implications across different architecture models, applying security principles to secure enterprise infrastructure in scenarios, and comparing data protection concepts and strategies. The topic also delves into the importance of resilience and recovery in security architecture.
- Topic 4: Security Operations: This topic delves into applying common security techniques to computing resources, addressing security implications of proper hardware, software, and data asset management, managing vulnerabilities effectively, and explaining security alerting and monitoring concepts. It also discusses enhancing enterprise capabilities for security, implementing identity and access management, and utilizing automation and orchestration for secure operations.
- Topic 5: Security Program Management and Oversight: Finally, this topic discusses elements of effective security governance, the risk management process, third-party risk assessment, and management processes. Additionally, the topic focuses on security compliance requirements, types and purposes of audits and assessments, and implementing security awareness practices in various scenarios.
Free CompTIA SY0-701 Exam Actual Questions
Note: Premium Questions for SY0-701 were last updated On Mar. 02, 2026 (see below)
During a recent log review, an analyst discovers evidence of successful injection attacks. Which of the following will best address this issue?
Input validation (D)is the most effective way to preventinjection attacks, such asSQL injection, XSS, etc. It ensures that only correctly formatted and expected inputs are processed by the application.
This is clearly identified underDomain 2.3: Application security techniques, whereinput validationis listed as aprimary defense against injection attacks.
A company receives an alert that a network device vendor, which is widely used in the enterprise, has been banned by the government.
Which option best will the company's general counsel most likely be concerned with during a hardware refresh of these devices?
When the government bans a vendor, the primary concern for the company's general counsel is sanctions, which are legal restrictions that prohibit the purchase, use, import, or continued operation of products associated with restricted entities. Security+ SY0-701 stresses that compliance with government regulations and legal mandates is a critical oversight responsibility. Failure to comply may result in severe penalties, including fines, loss of contracting eligibility, and reputational damage.
During a hardware refresh, general counsel will ensure the organization is not violating federal trade sanctions, procurement laws, or export/import restrictions. Even if devices are already purchased, continued use may still violate the sanctions, creating legal liability.
Data sovereignty (B) relates to storage location requirements, not vendor bans. Cost of replacement (C) is an operational and financial concern, not a legal one. Loss of license (D) typically applies to software but is not the primary legal concern tied to a government-issued vendor ban.
Therefore, sanctions are the general counsel's primary focus.
Which of the following security concepts is being followed when implementing a product that offers protection against DDoS attacks?
Which of the following would help ensure a security analyst is able to accurately measure the overall risk to an organization when a new vulnerability is disclosed?
A full inventory of all hardware and software is essential for measuring the overall risk to an organization when a new vulnerability is disclosed, because it allows the security analyst to identify which systems are affected by the vulnerability and prioritize the remediation efforts. Without a full inventory, the security analyst may miss some vulnerable systems or waste time and resources on irrelevant ones.Documentation of system classifications, a list of system owners and their departments, and third-party risk assessment documentation are all useful for risk management, but they are not sufficient to measure the impact of a new vulnerability.:CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 1221; Risk Assessment and Analysis Methods: Qualitative and Quantitative3
During a security incident, the security operations team identified sustained network traffic from a malicious IP address:
10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization's network. Which of the following fulfills this request?
A firewall rule is a set of criteria that determines whether to allow or deny a packet to pass through the firewall. A firewall rule consists of several elements, such as the action, the protocol, the source address, the destination address, and the port number. The syntax of a firewall rule may vary depending on the type and vendor of the firewall, but the basic logic is the same. In this question, the security analyst is creating an inbound firewall rule to block the IP address 10.1.4.9 from accessing the organization's network. This means that the action should be deny, the protocol should be any (or ig for IP), the source address should be 10.1.4.9/32 (which means a single IP address), the destination address should be 0.0.0.0/0 (which means any IP address), and the port number should be any. Therefore, the correct firewall rule is:
access-list inbound deny ig source 10.1.4.9/32 destination 0.0.0.0/0
This rule will match any packet that has the source IP address of 10.1.4.9 and drop it. The other options are incorrect because they either have the wrong action, the wrong source address, or the wrong destination address. For example, option A has the source and destination addresses reversed, which means that it will block any packet that has the destination IP address of 10.1.4.9, which is not the intended goal. Option C has the wrong action, which is permit, which means that it will allow the packet to pass through the firewall, which is also not the intended goal. Option D has the same problem as option A, with the source and destination addresses reversed.
Reference=Firewall Rules -- CompTIA Security+ SY0-401: 1.2,Firewalls -- SY0-601 CompTIA Security+ : 3.3,Firewalls -- CompTIA Security+ SY0-501,Understanding Firewall Rules -- CompTIA Network+ N10-005: 5.5,Configuring Windows Firewall -- CompTIA A+ 220-1102 -- 1.6.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Ellsworth
9 days agoParis
16 days agoTeddy
25 days agoMalcolm
1 month agoJosephine
1 month agoDaniel
2 months agoHoa
2 months agoYolando
2 months agoCherry
2 months agoAnnmarie
3 months agoLindsey
3 months agoShawnna
3 months agoDesmond
3 months agoBlair
4 months agoMargurite
4 months agoBettina
4 months agoIndia
4 months agoVirgina
5 months agoLatanya
5 months agoWillard
5 months agoLoreta
5 months agoBrent
5 months agoZoila
6 months agoKatina
6 months agoKate
6 months agoRosendo
8 months agoLavonna
8 months agoJerry
8 months agoBarbra
9 months agoGearldine
9 months agoadam zampa
9 months agoyetodol
9 months agodejevi
9 months agojamini
9 months agoDerrick
9 months agojames
9 months agocameron
10 months agokeven
10 months agoGregg
10 months agoaliena
10 months agoSon
10 months agoMargery
10 months agoVanna
11 months agoTu
12 months agoValentin
12 months agoNaulen
1 year agoPrecious
1 year agoYolande
1 year agoSue
1 year agoMarjory
1 year agoNoel
1 year agoFiliberto
1 year agoAlesia
1 year agoHassie
1 year agoTresa
1 year agoLilli
1 year agoCherelle
1 year agoKaran
1 year agoCelestina
1 year agoAlton
1 year agoTamie
1 year agoCraig
1 year agoDorthy
1 year agoVenita
1 year agoKaran
1 year agoJesusita
1 year agoNathalie
1 year agoLelia
1 year agoBettina
1 year agoElfriede
1 year agoFernanda
2 years agoAshlyn
2 years agoMarget
2 years agoLaurel
2 years agoLera
2 years agoLorenza
2 years agoParis
2 years agoPura
2 years agoAriel
2 years agoJoye
2 years agoKeech
2 years agoMark james
2 years agoBrook
2 years agoHelina
2 years agoMark james
2 years agoChauncey
2 years agojohnes
2 years ago