CompTIA Security+ (SY0-701) practice test

An organization wants to verify both the integrity and the authenticity of a downloaded software update so recipients can confirm it came from the vendor and was not altered. Which mechanism provides this?

A security administrator wants to require users to provide a password and a code from an authenticator app before accessing a sensitive system. Which security concept is being implemented?

A company wants to separate its public-facing web servers from its internal corporate network so that a compromise of a web server does not directly expose internal systems. Which architecture should be implemented?

A security team wants to centrally collect, correlate, and analyze log data from servers, firewalls, and applications to detect security incidents in near real time. Which type of system should be deployed?

An organization is assessing a risk and decides to purchase a cyber insurance policy so a third party covers the financial loss if the risk materializes. Which risk management strategy is being used?

An attacker places a malicious wireless access point that broadcasts the same network name as a legitimate corporate network, hoping employees connect to it so traffic can be intercepted. Which attack is being carried out?

A security engineer needs to securely store user passwords in a database so that even if the database is stolen, the original passwords cannot be easily recovered, and identical passwords do not produce identical stored values. Which technique should be used?

A new employee is granted access only to the specific files and systems required to perform their job duties and nothing more. Which security principle does this practice follow?

A company experiences a security incident and the response team has just confirmed and scoped the breach. According to the standard incident response process, which phase typically comes immediately after detection and analysis?

An organization discovers malware that encrypts all files on infected systems and displays a message demanding payment in cryptocurrency to restore access. Which type of malware is this?

A security architect is designing a network where no user or device is automatically trusted, every access request is verified, and identity and device posture are continuously evaluated regardless of network location. Which model is being applied?

An organization must comply with a regulation that protects the privacy and security of patient health information in the United States. Which regulatory framework applies?

A penetration tester observes that an attacker registered a domain name that closely resembles a popular bank's domain, differing by one transposed letter, to capture credentials from users who mistype the address. Which attack is this?

Two parties who have never communicated before need to securely agree on a shared secret key over an untrusted network without ever transmitting the key itself. Which cryptographic method enables this?

A security analyst wants to deploy a decoy system that appears to be a valuable target in order to attract attackers, study their techniques, and divert them from production systems. Which technology should be used?

An administrator wants to control access to resources based on a user's job function, assigning permissions to defined roles and then placing users into those roles. Which access control model is being used?

A company wants to ensure that critical data can be recovered after a disaster and decides to keep three copies of data on two different media types with one copy stored offsite. Which backup strategy is being followed?

A security researcher discovers a software vulnerability that the vendor is unaware of and for which no patch yet exists, and attackers are already exploiting it. Which term describes this situation?

A security team wants to automate repetitive incident response actions, such as enriching alerts and isolating endpoints, by linking together security tools through predefined workflows called playbooks. Which type of platform provides this capability?