Free CompTIA SY0-701 Practice Questions & Answers 2026 Part1 | CompTIA Security+

A company hired an external consultant to assist with required system upgrades to a critical business application. A systems administrator needs to secure the consultant's access without sharing passwords to critical systems. Which of the following solutions should most likely be utilized?

Which of the following scenarios describes a possible business email compromise attack?

A penetration tester visits a client's website and downloads the site's content. Which of the following actions is the penetration tester performing?

Which of the following is die most important security concern when using legacy systems to provide production service?

A software development team asked a security administrator to recommend techniques that should be used to reduce the chances of the software being reverse engineered. Which of the following should the security administrator recommend?

A systems administrator needs to ensure the secure communication of sensitive data within the organization's private cloud. Which of the following is the best choice for the administrator to implement?

Which of the following best explains a concern with OS-based vulnerabilities? The best answer is A. An exploit will give an attacker access to system functions that span multiple applications. Operating system vulnerabilities are especially concerning because the OS sits underneath and supports many applications and services. If an attacker exploits an OS-level flaw, the impact can extend across the entire system and affect multiple applications, services, and security controls. This makes OS-based vulnerabilities particularly serious because compromise at the operating system level can provide broad control over: system processes memory and storage access user accounts and privileges network services multiple installed applications Why the other options are incorrect: B . The OS vendor's patch cycle is not frequent enough to mitigate the large number of threats.This is not a universal or defining concern with OS-based vulnerabilities. C . Most users trust the core operating system features and may not notice if the system has been compromised.This may be true in some situations, but it is not the best explanation of the inherent risk of OS vulnerabilities. D . Exploitation of an operating system vulnerability is typically easier than any other vulnerability.This is too absolute and not generally true. From a Security+ standpoint, OS vulnerabilities are especially dangerous because they can affect the foundational functions of the system and potentially impact many applications at once, making A the best answer.

Which ZT tenet is based on the notion that malicious actors reside inside and outside the network?

Which of the following should an internal auditor check for first when conducting an audit of the organization's risk management program?

Which of the following techniques would attract the attention of a malicious attacker in an insider threat scenario?

An organization’s internet-facing website was compromised when an attacker exploited a buffer overflow. Which of the following should the organization deploy to best protect against similar attacks in the future?

A systems administrator would like to create a point-in-time backup of a virtual machine. Which of the following should the administrator use?

An auditor discovered multiple insecure ports on some servers. Other servers were found to have legacy protocols enabled. Which of the following tools did the auditor use to discover these issues?

A company requires hard drives to be securely wiped before sending decommissioned systems to recycling. Which of the following best describes this policy?

Which of the following is a risk of conducting a vulnerability assessment?

Which of the following phases of the incident response process attempts to minimize disruption?

A security analyst at an organization observed several user logins from outside the organization's network. The analyst determined that these logins were not performed by individuals within the organization. Which of the following recommendations would reduce the likelihood of future attacks? (Choose two.)

A company is in the process of migrating to cloud-based services. The company's IT department has limited resources for migration and ongoing support.

Which of the following methods would most likely be used to identify legacy systems?

A security administrator would like to protect data on employees' laptops. Which of the following encryption techniques should the security administrator use?

A hosting provider needs to prove that its security controls have been in place over the last six months and have sufficiently protected customer data. Which of the following would provide the best proof that the hosting provider has met the requirements?

A company wants to implement MFA. Which of the following enables the additional factor while using a smart card?

During a recent company safety stand-down, the cyber-awareness team gave a presentation on the importance of cyber hygiene. One topic the team covered was best practices for printing centers. Which of the following describes an attack method that relates to printing centers?

Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?

Which of the following best describes a social engineering attack that uses a targeted electronic messaging campaign aimed at a Chief Executive Officer?

Which of the following is a benefit of vendor diversity?

Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?

A security analyst developed a script to automate a trivial and repeatable task. Which of the following best describes the benefits of ensuring other team members understand how the script works?

An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which of the following best describes the type of information the analyst is trying to extract from the image files?

A user, who is waiting for a flight at an airport, logs in to the airline website using the public Wi-Fi, ignores a security warning and purchases an upgraded seat. When the flight lands, the user finds unauthorized credit card charges. Which of the following attacks most likely occurred?

Which of the following is a common, passive reconnaissance technique employed by penetration testers in the early phases of an engagement?

An audit reveals that cardholder database logs are exposing account numbers inappropriately.

A user would like to install software and features that are not available with a smartphone's default software. Which of the following would allow the user to install unauthorized software and enable new features?

A security investigation revealed that malicious software was installed on a server using a server administrator's credentials. During the investigation, the server administrator explained that Telnet was regularly used to log in.Which of the following most likely occurred?

A coffee shop owner wants to restrict internet access to only paying customers by prompting them for a receipt number. Which of the following is the best method to use given this requirement?

Which of the following would enable a data center to remain operational through a multiday power outage?

Various company stakeholders meet to discuss roles and responsibilities in the event of a security breach affecting offshore offices. Which of the following is this an example of?

Which of the following attacks exploits a potential vulnerability as a result of using weak cryptographic algorithms?

Which of the following is a possible factor for MFA?

A security analyst is reviewing logs and discovers the following: Which of the following should be used lo best mitigate this type of attack?

Which of the following phases of an incident response involves generating reports?

An organization plans to expand its operations internationally and needs to keep data at the new location secure. The organization wants to use the most secure architecture model possible. Which of the following models offers the highest level of security?

A company has yearly engagements with a service provider. The general terms and conditions are the same for all engagements. The company wants to simplify the process and revisit the general terms every three years.

Which of the following is used to add extra complexity before using a one-way data transformation algorithm?

Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of the following would best mitigate this type of attack?

Which of the following is the stage in an investigation when forensic images are obtained?

A company is developing a critical system for the government and storing project information on a fileshare. Which of the following describes how this data will most likely be classified? (Choose two.)