Certifications

Security+ SY0-701 Practice Questions with Clear Explanations (Ethical)



 

Security+ Practice Questions (Ethical) with Clear Explanations — SY0-701

Ethical, original, and exam-style scenarios. Learn the “why” behind each answer, build judgment, and boost confidence—without touching dumps or shortcuts.

Official Security+ SY0-701 Page
Email Support

Table of Contents

  1. How to Use These Questions
  2. Domain 1 — Threats, Attacks & Vulnerabilities
  3. Domain 2 — Architecture & Design
  4. Domain 3 — Implementation (IAM, Crypto, Network)
  5. Domain 4 — Operations & Incident Response
  6. Domain 5 — Governance, Risk & Compliance (GRC)
  7. 30-Day Study Plan (Realistic)
  8. Cheat Sheets & Decision Tables
  9. Security+ Practice FAQ
  10. Get Security+ SY0-701 — Secure & Fast
  11. Attribution & Reuse Notice

How to Use These Questions

First, attempt each question without peeking. Then review the explanation and write a one-line takeaway in your notes. Finally, convert missed items into flashcards. Over time, your accuracy and speed will improve naturally.

Ethical pledge: These are original learning questions crafted to mirror the style and difficulty of SY0-701. They are not real exam items.

Domain 1 — Threats, Attacks & Vulnerabilities

Q1. A user reports a sudden MFA prompt flood. Shortly after, there’s a successful login from the same device. What happened?

  1. Credential stuffing with legacy auth
  2. MFA fatigue attack that finally gained approval
  3. SIM swap enabling SMS interception
  4. Session fixation on a public kiosk
Explanation: Repeated push prompts are a signature of “MFA fatigue.” The attacker spams until the user approves one. To mitigate, prefer phishing-resistant MFA, limit prompts, and add risk-based challenges.

Q2. After a phishing campaign, several accounts create new mailbox rules to auto-forward mail externally. What control should trigger first?

  1. End-user training emails
  2. Quarterly access reviews
  3. An alert on suspicious mailbox forwarding rules
  4. Annual password rotation
Explanation: Forwarding rules are a common persistence technique. A near-real-time alert helps responders contain exfiltration quickly.

Q3. A web app shows a unique token in the URL. Later, another user reuses that URL to access the previous session. Which flaw fits best?

  1. Command injection
  2. Insecure direct object reference / session leakage
  3. Buffer overflow
  4. XML entity expansion
Explanation: Session IDs in URLs can leak via logs, referrers, or shoulder-surfing. Use secure cookies, short lifetimes, and TLS everywhere.

Q4. Which scenario best indicates a supply-chain compromise?

  1. Admin sets a weak password
  2. Phishing email bypasses a filter
  3. Trusted software update adds a malicious DLL
  4. Rogue AP discovered in a branch office
Explanation: Malicious updates at the source are classic supply-chain risk. Validate signatures and consider allow-listing.

Domain 2 — Architecture & Design

Q5. You’re segmenting a flat network. Which first step reduces risk fastest with minimal disruption?

  1. Implement full zero trust in one sprint
  2. Create user, server, and guest VLANs with default-deny
  3. Deploy a new SIEM before any changes
  4. Purchase a second data center
Explanation: Simple segmentation delivers immediate value and clarifies traffic flows. Start small; then iterate.

Q6. A partner requires temporary access to a single internal API. Which design choice is most appropriate?

  1. Full site-to-site VPN to the core network
  2. Grant partner accounts domain-admin
  3. Reverse proxy in a DMZ with narrow allow-lists
  4. Expose the API directly to the internet
Explanation: A DMZ proxy reduces exposure and enables fine-grained controls and monitoring.

Q7. Which principle is central to zero trust?

  1. Encrypt data at rest only
  2. Verify explicitly and grant least privilege
  3. Allow by default inside the LAN
  4. Disable all remote work options
Explanation: Zero trust requires continuous evaluation of identity, device, and context—not a static inside/outside model.

Domain 3 — Implementation (IAM, Crypto, Network)

Q8. A team wants to store user passwords securely. Which statement is best?

  1. Encrypt passwords so admins can read them
  2. Hash without salt for speed
  3. Use salted hashing and keep a separate pepper
  4. Store in plain text but restrict access
Explanation: Salting defeats rainbow tables; pepper adds another secret. Never store passwords in recoverable form.

Q9. During a TLS handshake, why is asymmetric crypto used first?

  1. It is faster for bulk data
  2. It authenticates the server and sets up a session key
  3. It compresses files
  4. It rotates symmetric keys
Explanation: Asymmetric methods bootstrap trust and key exchange; then symmetric encryption handles the data stream efficiently.

Q10. Which control best enforces least privilege for admins?

  1. One shared local admin account
  2. Break-glass accounts, JIT elevation, and auditing
  3. Permanent global admin for convenience
  4. Unlogged sudo sessions
Explanation: Just-in-time access reduces standing privilege. Logging and approvals add accountability.

Q11. A remote worker connects over public Wi-Fi. Which combination is strongest?

  1. HTTP portal + SMS OTP
  2. Split-tunnel VPN + local admin rights
  3. Full-tunnel VPN + device posture + phishing-resistant MFA
  4. RDP open to the internet
Explanation: Encrypt all traffic, verify device health, and require strong MFA to reduce session theft.

Domain 4 — Operations & Incident Response

Q12. You see a sudden spike in outbound DNS from a single host. What is the best next step?

  1. Disable the SIEM rule
  2. Investigate the host and contain if needed
  3. Reboot the domain controller
  4. Ignore because DNS is normal
Explanation: DNS tunneling and beaconing are common. Pivot into EDR and netflow; quarantine if indicators match.

Q13. Which order reflects basic evidence volatility?

  1. Disk → RAM → Logs
  2. Logs → Disk → RAM
  3. RAM → Temp files → Disk → Remote logs
  4. Archive → Disk → RAM
Explanation: Capture volatile data first when feasible; then image disks; finally collect logs and archives.

Q14. After containing a malware outbreak, what proves systems are clean before go-live?

  1. Team consensus
  2. Disabling logging
  3. Validation against a golden baseline plus monitoring
  4. Extending admin rights temporarily
Explanation: Compare to known-good images, verify integrity, and monitor closely to avoid reinfection.

Domain 5 — Governance, Risk & Compliance (GRC)

Q15. Leadership asks for a risk treatment that removes exposure entirely. Which option fits?

  1. Mitigate
  2. Transfer
  3. Avoid
  4. Accept
Explanation: Avoidance stops the risky activity. It often impacts operations, so document trade-offs.

Q16. A card-processing app is being redesigned. Which statement aligns with PCI DSS concepts?

  1. Mix cardholder data with general traffic
  2. Segment and monitor the cardholder data environment
  3. Disable logging to protect privacy
  4. Ignore quarterly scans
Explanation: Segmentation reduces scope. Moreover, monitoring and periodic scans verify controls.

Mixed Scenario Set — Pulling It Together

Q17. A contractor’s unmanaged laptop connects to Wi-Fi and immediately accesses HR data. Which two controls would have helped most?

  1. Port mirroring and SPAN
  2. NAC posture checks and VLAN quarantine
  3. Disable TLS
  4. Guest SSID bridged to the LAN
Explanation: NAC enforces device health. A quarantine VLAN isolates untrusted endpoints until they meet policy.

Q18. You discover an expired TLS certificate on a public site. What is the correct action order?

  1. Reboot the web server; ignore the error
  2. Change the DNS record only
  3. Renew/replace the certificate, update bindings, and verify chain
  4. Disable HTTPS temporarily
Explanation: Users must not bypass warnings. Renew, install properly, and confirm trust with a chain check.

Q19. A developer proposes storing API keys in code for speed. Which safer alternative is best?

  1. Hard-code secrets but obfuscate
  2. Keep keys in a public repo for visibility
  3. Use a secrets manager with role-based access
  4. Email keys to the team weekly
Explanation: Secrets managers centralize control, enable rotation, and log access.

Q20. Which set most directly supports “defense in depth” for remote access?

  1. Public RDP + local admin + shared passwords
  2. VPN + MFA + least privilege + logs to SIEM
  3. Guest Wi-Fi bridged to servers
  4. SNMPv1 for all routers
Explanation: Layered controls reduce single points of failure and provide traceability.

30-Day Study Plan (Realistic)

Week 1 — Core Concepts

  • Threats and common attacks
  • Crypto basics: hashing vs encryption vs HMAC
  • Network segmentation and secure protocols
  • Daily: 10–15 original questions + review

Week 2 — Design & IAM

  • Zero trust, NAC, VPN concepts
  • Access models and MFA choices
  • Daily: 15 questions + 30-min lab note

Week 3 — IR & Ops

  • IR phases, SIEM triage, evidence basics
  • Two tabletops (phishing, malware)
  • Daily: 15 questions + playbook edit

Week 4 — GRC & Final Review

  • NIST/ISO ideas; risk register walkthrough
  • Two timed mixed sets (25 Q each)
  • One-page quick sheet: protocols, IAM, IR steps
Remember: Track mistakes, add flashcards, and revisit weak topics. Consistency beats cramming.

Cheat Sheets & Decision Tables

When to Use What (Quick Map)

Need Pick Why
Integrity + authenticity Digital signature or HMAC Verify origin and detect changes
Confidentiality in transit TLS/VPN concepts Encrypt and verify peer identity
Limit lateral movement VLANs + default deny Shrink blast radius
Unmanaged device NAC + quarantine Block access until compliant
Evidence integrity Chain of custody + hashing Maintain authenticity

Security+ Practice FAQ

How many questions should I do per day?

Start with 10–15. Then increase to 25 mixed questions as your speed improves.

Should I memorize answers?

No. Understand the reasoning. Because the exam is scenario-based, judgment matters more than recall.

How do I close weak gaps?

Track misses in a notebook. Next, read the explanation. Finally, build a flashcard and retest in 48 hours.

Get CompTIA Security+ SY0-701 — Secure & Fast

For a secure and fast path to your CompTIA Security+ SY0-701 certification, start here. Then follow ethical registration and preparation steps:


Get Security+ SY0-701 — Start Now

Ethics first: Use original practice, your own notes, and legitimate materials—no dumps and no proxies.

Attribution & Reuse Notice

You may copy or republish this article, provided you include proper attribution with the site name and URL:
CertGet — www.Certget.com.

© 2025 CertGet — All Rights Reserved.

 

error: Content is protected !!