CompTIA Security+ Certification - SY0-701 Exam Questions

QUESTION NO: 1
An organization completed a project to deploy SSO across all business applications last year.
Recently, the finance department selected a new cloud-based accounting software vendor. Which of the following should most likely be configured during the new software deployment?

QUESTION NO: 2
A user sends an email that includes a digital signature for validation. Which of the following security concepts would ensure a user cannot deny they sent the email?

QUESTION NO: 3
A security administrator documented the following records during an assessment of network services:

Two weeks later, the administrator performed a log review and noticed the records were changed as follows:

When consulting the service owner, the administrator validated that the new address was not part of the company network. Which of the following was the company most likely experiencing?

QUESTION NO: 4
A government agency requires publicly traded organizations to report cyber breaches within a designated time period. By law, these reports are made public. Which of the following could cause loss of existing and future business for an organization after reports are published?

QUESTION NO: 5
Which of the following threat actors is the most likely to be motivated by profit?

QUESTION NO: 6
Which of the following best describes the purpose of using deception technologies in a security strategy?

QUESTION NO: 7
An incident analyst finds several image files on a hard disk. The image files may contain geolocation coordinates. Which of the following best describes the type of information the analyst is trying to extract from the image files?

QUESTION NO: 8
An organization experiences a compromise in a cloud-hosted solution that contains customer information. Which of the following strategies will help determine the sensitivity level of the breach?

QUESTION NO: 9
An organization discovers its product's internal specifications were posted on internet forums and social media. Which of the following should the organization use to manage such incidents?

QUESTION NO: 10
A security architect is designing an environment in which certain systems must not be able to access the internet. Which of the following describes this configuration?

QUESTION NO: 11
Which of the following is the best process to follow before the disposal of solid state drives (SSDs) and hard disk drives (HDDs) to ensure data cannot be recovered?

QUESTION NO: 12
Which of the following best summarizes the reason for an AUP?