Which of the following is a common method used to enforce authorization in a system?

Role-based access control (RBAC)

A company wants to implement zero trust for remote access to internal applications. They need to verify the identity of users and ensure that their devices meet security requirements before granting access. Which approach is most aligned with zero trust?

Use a honeypot to detect unauthorized access attempts.

Use a firewall with allowlists for IP addresses.

Use a single sign-on (SSO) solution without MFA.

Use a VPN with MFA and device compliance checks.

A government agency stores classified documents. They need to ensure that only users with the appropriate clearance can read the documents, and that any unauthorized modification is detected. They also want to verify the identity of users before granting access. Which combination of controls is most appropriate?

Use discretionary access control (DAC) with user-set permissions, rely on backups, and use passwords.

Use role-based access control (RBAC) with roles, use a honeypot, and use MFA.

Use mandatory access control (MAC) with labels, implement file integrity monitoring (FIM), and require smart card authentication.

Use attribute-based access control (ABAC) with clearance attributes, use a checksum, and use biometrics.

Which of the following is a common technique used to verify the integrity of a downloaded file?

Checking the file's creation date

Reviewing the file's access permissions

Comparing its SHA-256 hash to the published value

Encrypting the file with a public key

CompTIASecurity+

Domain 1Objective 2

Fundamental Concepts SY0-701 Practice Questions (Page 2)

Part of the General security concepts domain, which accounts for 12% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

12%of the exam

Questions 6–10

6foundation · easy
Which security goal is primarily concerned with ensuring that systems and data are accessible to authorized users when needed?
Select an answer first
7foundation · easy
Which of the following is a common method used to enforce authorization in a system?
Select an answer first
8expert · hard
A company wants to implement zero trust for remote access to internal applications. They need to verify the identity of users and ensure that their devices meet security requirements before granting access. Which approach is most aligned with zero trust?
Select an answer first
9expert · hard
A government agency stores classified documents. They need to ensure that only users with the appropriate clearance can read the documents, and that any unauthorized modification is detected. They also want to verify the identity of users before granting access. Which combination of controls is most appropriate?
Select an answer first
10foundation · easy
Which of the following is a common technique used to verify the integrity of a downloaded file?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Fundamental Concepts SY0-701 Practice Questions (Page 2)

Questions 6–10

Which security goal is primarily concerned with ensuring that systems and data are accessible to authorized users when needed?

Which of the following is a common method used to enforce authorization in a system?

A company wants to implement zero trust for remote access to internal applications. They need to verify the identity of users and ensure that their devices meet security requirements before granting access. Which approach is most aligned with zero trust?

Which of the following is a common technique used to verify the integrity of a downloaded file?

Keep studying — General security concepts