Loading demo links...
Showing 1–10 of 10 questions
HOTSPOT
You are security administrator investigating a potential infection on a network.
Click on each host and firewall. Review all logs to determine which host originated the Infecton and then deny each remaining hosts clean or infected.
Answer is in the explanation below.
A technician is hardening a newly provisioned server before it enters production. Which of the following are baseline hardening actions? (Choose two.)
Select all that apply, then click Submit answer.
Disabling unused services and open ports
Changing default administrator credentials
Granting all standard users local admin rights
Disabling system logging to save disk space
Connecting the server directly to the internet for patching
Setting every account password to never expire
A company has begun labeling all laptops with asset inventory stickers and associating them with employee IDs. Which of the following security benefits do these actions provide? (Choose two.)
Select all that apply, then click Submit answer.
If a security incident occurs on the device, the correct employee can be notified.
The security team will be able to send user awareness training to the appropriate device.
The security team will be able to send user awareness training to the appropriate device. User awareness training is a type of security education that aims to improve the knowledge and behavior of users regarding security threats and best practices. The security team can send user awareness training to the appropriate device by using the email address, username, or IP address of the device, not the asset inventory sticker or the employee ID.
Users can be mapped to their devices when configuring software MFA tokens.
Users can be mapped to their devices when configuring software MFA tokens. Software MFA tokens are a type of multi-factor authentication that uses a software application to generate a one-time password or a push notification for verifying the identity of a user. Users can be mapped to their devices when configuring software MFA tokens by using the device ID, phone number, or email address of the device, not the asset inventory sticker or the employee ID.
User-based firewall policies can be correctly targeted to the appropriate laptops.
User-based firewall policies can be correctly targeted to the appropriate laptops. User-based firewall policies are a type of firewall rules that apply to specific users or groups of users, regardless of the device or location they use to access the network. User-based firewall policies can be correctly targeted to the appropriate laptops by using the username, domain, or certificate of the user, not the asset inventory sticker or the employee ID.
When conducting penetration testing, the security team will be able to target the desired laptops.
When conducting penetration testing, the security team will be able to target the desired laptops. Penetration testing is a type of security assessment that simulates a real-world attack on a network or system to identify and exploit vulnerabilities. When conducting penetration testing, the security team will be able to target the desired laptops by using the IP address, hostname, or MAC address of the laptop, not the asset
inventory sticker or the employee ID. Reference = CompTIA Security+ Study Guide (SY0-701), Chapter 1: General Security Concepts, page 17. Professor Messer?s CompTIA SY0-701 Security+ Training Course, Section 1.4: Asset Management, video: Asset Inventory (6:12). 
Company data can be accounted for when the employee leaves the organization.
Which of the following must be considered when designing a high-availability network? (Choose two).
Select all that apply, then click Submit answer.
Ease of recovery
Ability to patch
Physical isolation
Responsiveness
Attack surface
Extensible authentication
Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? (Select two).
Select all that apply, then click Submit answer.
Fencing
Video surveillance
Badge access
Access control vestibule
Sign-in sheet
Sensor
Which of the following provides the BEST protection for sensitive information and data stored in cloud-based services but still allows for full functionality and searchability of data within the cloud- based services?
Select an option, then click Submit answer.
Data encryption
Data masking
Anonymization
Tokenization
A software development manager wants to ensure the authenticity of the code created by the company. Which of the following options is the most appropriate?
Select an option, then click Submit answer.
Testing input validation on the user input fields
Performing code signing on company-developed software
Performing static code analysis on the software
Ensuring secure cookies are use
A cloud architect wants to prevent an attacker who compromises one application server from reaching the database tier that sits on the same virtual network. Which of the following design changes BEST achieves this goal?
Select an option, then click Submit answer.
Microsegmentation with per-workload security policies
A larger subnet address range
Network address translation on the database tier
An additional load balancer in front of the application servers
A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO's report?
Select an option, then click Submit answer.
Insider threat
Hacktivist
Nation-state
Organized crime
A web application was breached through a login form that let attackers inject database commands into a query. Which of the following controls would MOST effectively prevent this class of attack?
Select an option, then click Submit answer.
Parameterized queries
A web application firewall
Input length limits
Database encryption at rest
This page gives you a working sample of the Study4Pass practice set for CompTIA Security+ (SY0-801), the current version of the Security+ certification. Ten questions are free below — 5 single-answer, 4 multiple-answer and 1 interactive — taken from the full set of 203 questions, so the mix of formats and difficulty matches what paying members practise with. The set is balanced across the same five domains CompTIA examines: General Security Concepts, Threats, Vulnerabilities and Mitigations, Security Architecture, Security Operations, and Security Program Management and Oversight.
SY0-801 is built for people doing real security work — SOC analysts, security and systems administrators, and network staff who own security tasks. Treat this sample as a diagnostic, not a quiz to beat: answer cold, read every explanation, and note which domain each miss belongs to. Two misses in Security Operations means something different from two misses in cryptography, and your study time should follow the misses.
Every explanation in the set is written to teach the decision, not just name the answer — on the real exam the same concept returns wearing different clothes, and reasoning is what transfers. If one topic keeps costing you marks here, drill it in Topic Training inside the full set before you move on.
Inside the full SY0-801 practice set:
Answer each question before you look anything up — guessing honestly is what makes the result useful. Then open the answer: the correct option is marked and a full explanation walks through the reasoning, including why the tempting wrong options fail. If an explanation raises more questions than it settles, press Ask AI: this practice test is AI-enabled, and the assistant will re-teach the concept behind the question in plain language. There is no timer and no signup on this page. When the free set feels easy, the full 203-question set adds a timed Exam Simulation, per-domain Topic Training and a flagged-question review so you can rehearse under real exam pressure.
Yes. The 10 questions on this page cost nothing, need no account, and include the answer and explanation for every question.
203 questions, all original to Study4Pass and mapped to the five Security+ domains in the same proportions as the real exam blueprint.
Yes — each question reveals its correct answer and a written explanation immediately, and Ask AI can unpack the underlying concept in simpler language whenever an explanation leaves you unsure.
No. They are practice questions written for this set to mirror the real exam's topics, style and difficulty — using them is legitimate preparation, not a copy of the live test.
