Description
For learners studying for CompTIA Security+ SY0-701 (V7)
What you'll learn
Practice pack content
Domain 1 - General Security Concepts
Domain 2 – Threats, Vulnerabilities, and Mitigations
Domain 3 – Security Architecture
Domain 4 – Security Operations
Domain 5 – Security Program Management and Oversight
Final Exam Simulators
Exam Study Guide
Interactive Flashcards
Try 3 Security+ SY0-701 practice questions
Choose an answer, explore the explanation, and see why the other options are less suitable. Three short scenarios. No sign-in required.
1. Temporary privileged access
An external engineer needs elevated access to one production server during a two-hour maintenance window. Which solution best limits access to the approved period while keeping actions attributable to that engineer?
Answer and full explanation
Correct answer: B — Time-limited PAM access for a named account.
Why B is correct
Privileged access management (PAM) with just-in-time permissions limits elevated access to the approved maintenance window. Restricting the grant to the required server limits its scope. A named account connects the session to the engineer, while session logging provides a record of activity. Expiring the grant after two hours removes the temporary privileges without waiting for a later review. MFA can add a sign-in check, but it does not replace controls over permission scope and duration.
Why the other options are less suitable
- A — Monthly access review: A named account and MFA help identify and authenticate the engineer. A monthly review does not enforce the two-hour access limit, so privileges can remain after the task ends.
- C — Shared administrator account: Rotating the password reduces the risk of later reuse. Sharing the credential alone does not reliably attribute each action to a person or automatically enforce the approved window.
- D — VPN and MFA: These controls protect and authenticate remote access. A permanent administrator role still leaves privileges available beyond the maintenance task.
Key takeaway: Match access to the person, the task and the time required. Authentication alone does not limit authorization.
Read two more sample questions
2. Recovery priorities
A business impact analysis states that an order-processing service must resume within four hours of an outage and may lose no more than 15 minutes of committed order data. Which pair correctly records these stated recovery limits?
Answer and full explanation
Correct answer: C — RTO of four hours and RPO of 15 minutes.
Why C is correct
The recovery time objective (RTO) describes the target time for restoring a service after disruption. Here, the business allows four hours to bring order processing back. The recovery point objective (RPO) describes the acceptable amount of data loss measured in time. Losing no more than the latest 15 minutes of orders therefore requires a 15-minute RPO. These are recovery targets; the organization must still implement and test arrangements that can meet them.
Why the other options are less suitable
- A — The values are reversed: This sets a 15-minute service-restoration target but allows four hours of lost data. That exceeds the stated data-loss tolerance.
- B — Data-loss tolerance is too large: The four-hour RTO matches the service requirement. A four-hour RPO would allow far more lost order data than the business accepts.
- D — Restoration target is unnecessarily tighter: A 15-minute RPO matches the data requirement. A 15-minute RTO could satisfy the four-hour limit if achieved, but it does not express the stated four-hour restoration target.
Key takeaway: RTO concerns how quickly the service returns. RPO concerns how much recent data the business can afford to lose.
3. A pattern in sign-in attempts
An investigation finds that an attacker tried the same common password against hundreds of employee accounts, making only one attempt per account before waiting. Which attack best matches this pattern?
Answer and full explanation
Correct answer: A — Password spraying.
Why A is correct
Password spraying uses one or a small number of likely passwords across many accounts. The defining clue is that the same candidate password is tried broadly instead of many candidates being tried against one account. Spacing attempts can help an attacker avoid per-account lockout thresholds. It does not guarantee that the attack will evade detection. Correlating failed sign-ins across accounts can reveal the wider pattern.
Why the other options are less suitable
- B — Focused brute-force guessing: This tries many possible passwords against a particular account. The scenario instead describes one common password being tried across many accounts.
- C — Credential stuffing: This tests username-password pairs obtained from a previous compromise, often taking advantage of password reuse. The scenario gives a shared password guess, not a collection of stolen pairs.
- D — Session-token replay: This reuses a captured token or other authentication material. It does not describe guessing a common password separately against hundreds of accounts.
Key takeaway: Look at how attempts are distributed: a few passwords across many accounts points to spraying.
Preview complete
You have tried all three samples
Review the explanations or try the samples again. This short preview covers only a small part of the exam objectives.
Your sample score resets when this page reloads.
Your practice pack includes
More ways to make each study session count
Focus on a topic, practise under a time limit, or return to the supporting resources before your next attempt.
Domain-based practice
Timed practice sets
Study guide
Flashcards
Requirements
- Familiarity with networking, operating systems and basic IT terminology will help you follow the practice scenarios.
- If cybersecurity concepts are new to you, use the practice alongside introductory study and practical exercises.
- You will need an internet-connected device, a current web browser and an ExamsDigest account for course access.
Know the exam you’re studying for
These details describe CompTIA’s official Security+ SY0-701 exam.
What our students say
"I passed my CompTIA Security+ certification exam today. The ExamsDigest practice exams helped me understand the question format and identify the topics I needed to review before exam day. Thank you!"
James
✓ Verified Review
"The practice questions covered a wide range of topics and helped me find my weak areas quickly."
Marry
✓ Verified Review
"I tried Dion before finding ExamsDigest. The explanations here were much clearer and helped me understand why each answer was correct instead of simply memorizing questions."
Michael
✓ Verified Review
Your questions, answered.
Which exam version does this product cover?
This product is identified for CompTIA Security+ SY0-701 (V7). Match that code to your intended exam before purchasing. A different exam version requires its own coverage check.
Can I focus on one topic at a time?
Do I need a complete video course first?
How should I use my practice results?
Does this purchase include the official certification exam?
Can I get a refund if the product is not right for me?
30-day conditional refund policy
Eligible requests must be made within 30 calendar days, with no more than 20% of any included simulator completed. The purchase must not already be refunded or under a payment dispute or chargeback. Other provisions apply; mandatory consumer rights remain unaffected.
Useful links for your preparation
