A security team wants to detect attackers who are using stolen credentials to access a fake database. They also want to gather intelligence about the attackers' methods. Which technology is best suited for this?

A firewall with intrusion prevention.

A honeypot database with fake records and monitoring.

An IDS that monitors network traffic.

A company wants to disrupt automated attacks that scan for open ports and attempt default credentials. Which technology is designed to waste the attacker's time and resources?

Intrusion prevention system (IPS)

An e-commerce company experiences frequent DDoS attacks that overwhelm their web servers. They need to maintain availability for legitimate customers while minimizing the impact of attacks. Which strategy is most effective?

Implement a honeypot to distract attackers.

Deploy a web application firewall (WAF) with rate limiting and use a CDN to absorb traffic.

Disable public access to the website during an attack.

Increase server capacity to handle any amount of traffic.

Which of the following is an example of a multi-factor authentication (MFA) method?

Using a password and a one-time code from an authenticator app

What is the purpose of disruption technology in cybersecurity?

To provide secure remote access

To actively disrupt or deter cyber threats

To passively monitor network traffic

CompTIASecurity+

Domain 1Objective 2

Fundamental Concepts SY0-701 Practice Questions (Page 3)

Part of the General security concepts domain, which accounts for 12% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

12%of the exam

Questions 11–15

11expert · hard
A security team wants to detect attackers who are using stolen credentials to access a fake database. They also want to gather intelligence about the attackers' methods. Which technology is best suited for this?
Select an answer first
12application · medium
A company wants to disrupt automated attacks that scan for open ports and attempt default credentials. Which technology is designed to waste the attacker's time and resources?
Select an answer first
13application · medium
An e-commerce company experiences frequent DDoS attacks that overwhelm their web servers. They need to maintain availability for legitimate customers while minimizing the impact of attacks. Which strategy is most effective?
Select an answer first
14foundation · easy
Which of the following is an example of a multi-factor authentication (MFA) method?
Select an answer first
15foundation · easy
What is the purpose of disruption technology in cybersecurity?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.