Loading demo links...
Showing 1–10 of 10 questions
HOTSPOT
Select the appropriate attack and remediation from each drop-down list to label the corresponding attack with its remediation.
INSTRUCTIONS
Not all attacks and remediation actions will be used.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
Answer is in the explanation below.
Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated:
?I?m in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address.?
Which of the following are the best responses to this situation? (Choose two).
Select all that apply, then click Submit answer.
Cancel current employee recognition gift cards.
Add a smishing exercise to the annual company training.
Issue a general email warning to the company.
Have the CEO change phone numbers.
Conduct a forensic investigation on the CEO's phone.
Implement mobile device management.
During the onboarding process, an employee needs to create a password for an intranet account. The password must include ten characters, numbers, and letters, and two special characters. Once the password is created, the company will grant the employee access to other company-owned websites based on the intranet profile. Which of the following access management concepts is the company most likely using to safeguard intranet accounts and grant access to multiple sites based on a user's intranet account? (Select two).
Select all that apply, then click Submit answer.
Federation
Identity proofing
Password complexity
Default password changes
Password manager
Open authentication
Which of the following must be considered when designing a high-availability network? (Select two).
Select all that apply, then click Submit answer.
Ease of recovery
Ability to patch
Physical isolation
Responsiveness
Attack surface
Extensible authentication
A security engineer is implementing FDE for all laptops in an organization. Which of the following are the most important for the engineer to consider as part of the planning process? (Select two).
Select all that apply, then click Submit answer.
Key escrow
TPM presence
Digital signatures
Data tokenization
Public key management
Certificate authority linking
While troubleshooting a firewall configuration, a technician determines that a ?deny any? policy should be added to the bottom of the ACL. The technician updates the policy, but the new policy causes several company servers to become unreachable. Which of the following actions would prevent this issue?
Select an option, then click Submit answer.
Documenting the new policy in a change request and submitting the request to change management
Testing the policy in a non-production environment before enabling the policy in the production network
Disabling any intrusion prevention signatures on the 'deny any* policy prior to enabling the new policy
Including an 'allow any1 policy above the 'deny any* policy
Which of the following describes a security alerting and monitoring tool that collects system, application, and network logs from multiple sources in a centralized system?
Select an option, then click Submit answer.
SIEM
DLP
IDS
SNMP
Which of the following is used to validate a certificate when it is presented to a user?
Select an option, then click Submit answer.
OCSP
CSR
CA
CRC
Which of the following would be best suited for constantly changing environments?
Select an option, then click Submit answer.
RTOS
Containers
Embedded systems
SCADA
A newly identified network access vulnerability has been found in the OS of legacy loT devices. Which of the following would best mitigate this vulnerability quickly?
Select an option, then click Submit answer.
Insurance
Patching
Segmentation
Replacement
Thinking of taking the CompTIA Security+ (SY0-701) exam? This free CompTIA practice test is the place to start. The 10 questions come free from the full 183-question Study4Pass practice set — a quick, honest check of where you stand. The free sample includes 5 single-answer, 4 multiple-answer and 1 interactive questions — the same mix of formats you will meet in the full set. The set follows the real exam’s spread of topics: General Security Concepts, Threats, Vulnerabilities, and Mitigations, Security Architecture and Security Operations. The CompTIA SY0-701 Exam, also known as CompTIA Security+ Exam 2024, is designed to assess the knowledge and skills required to perform core security functions and pursue an IT security career.
The target audience of the CompTIA SY0-701 Exam includes IT professionals seeking to validate their skills in cybersecurity, such as security administrators, systems administrators, network administrators, and IT auditors. There are no formal prerequisites for the CompTIA SY0-701 Exam, but it is recommended to have CompTIA Network+ certification and at least two years of experience in IT with a…
Work through the questions one at a time and read every explanation, even for the ones you get right — the reasoning behind an answer is what the real exam tests. If one area keeps costing you marks, you have found exactly what to revise before exam day.
Think of the result as a map, not a verdict. The questions you miss point straight at the topics that need work, and the explanations tell you why the correct option wins. Candidates who loop through that cycle — practise, review the reasoning, re-test — walk into the real exam having already seen their weak spots and fixed them.
Inside the full SY0-701 practice set:
There is no clock and no account needed. Answer each question, check the result, and read the explanation before moving on. For anything that still feels unclear, Ask AI is built into this AI-Enabled practice test — it explains the concept behind the question so the next one like it gets easier. When the free sample feels comfortable, the full set of 183 questions adds timed Exam Simulation, topic-by-topic training, and flagged-question review — the closest thing to exam day you can get before the real thing.
Yes. Every question on this page — all 10 of them — is free to use, and you never need to create an account to try them.
The full Study4Pass set for SY0-701 has 183 practice questions. This page gives you 10 of them free so you can judge the quality and difficulty first.
Yes. Check any question to reveal the correct answer and its explanation, and use Ask AI whenever you want the underlying concept explained step by step.
No — these are practice questions built to match the SY0-701 domains and difficulty level, so you can prepare for the real exam with confidence.
