CompTIA Security+ Certification - SY0-701 Exam Questions

QUESTION NO: 1
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the following architectures is best suited for this goal?

QUESTION NO: 2
A security administrator at a large company with standardized processes receives a request from an operations engineer for a major system migration. Which of the following should the administrator do first?

QUESTION NO: 3
An organization wants to improve the company's security authentication method for remote employees. Given the following requirements:
- Must work across SaaS and internal network applications
- Must be device manufacturer agnostic
- Must have offline capabilities
Which of the following would be the most appropriate authentication method?

QUESTION NO: 4
While a school district is performing state testing, a security analyst notices all internet services are unavailable. The analyst discovers that ARP poisoning is occurring on the network and then terminates access for the host. Which of the following is most likely responsible for this malicious activity?

QUESTION NO: 5
Which of the following scenarios is a warning sign specific to insider threats that should be included in a company's security awareness training?

QUESTION NO: 6
Which of the following solutions would most likely be used in the financial industry to mask sensitive data?

QUESTION NO: 7
A systems administrator is auditing all company servers to ensure. They meet the minimum security baseline While auditing a Linux server, the systems administrator observes the
/etc/shadow file has permissions beyond the baseline recommendation. Which of the following commands should the systems administrator use to resolve this issue?

QUESTION NO: 8
While a user reviews their email, a host gets infected by malware from an external hard drive plugged into the host. The malware steals all the user's credentials stored in the browser. Which of the following training topics should the user review to prevent this situation from reoccurring?

QUESTION NO: 9
Which of the following is the most likely to be included as an element of communication in a security awareness program?

QUESTION NO: 10
A company must ensure sensitive data at rest is rendered unreadable. Which of the following will the company most likely use?

QUESTION NO: 11
Client files can only be accessed by employees who need to know the information and have specified roles in the company. Which of the following best describes this security concept?

QUESTION NO: 12
A security engineer at a large company needs to enhance IAM to ensure that employees can only access corporate systems during their shifts. Which of the following access controls should the security engineer implement?

QUESTION NO: 13
Which of the following techniques would identify whether data has been modified in transit?

QUESTION NO: 14
A bank set up a new server that contains customers' PII. Which of the following should the bank use to make sure the sensitive data is not modified?

QUESTION NO: 15
A customer changes the underlying file structure of a new mobile phone to install a keylogger with administrator permissions. Which of the following does this best describe?