A company needs to track user activity for compliance and to detect insider threats. They want to correlate login events with file access and data exfiltration attempts. Which approach is most effective?

Rely on user training to prevent insider threats.

Use a honeypot to detect insider threats.

Implement centralized logging and a SIEM system.

Enable logging on the firewall only.

A law firm needs to prove that a partner approved a contract and that the approval cannot be denied later. Which control should they implement?

Log the partner's login and approval in the system.

Encrypt the contract with the partner's public key.

Use a digital signature with the partner's private key.

Require the partner to use MFA.

A company is experiencing a brute-force attack on their VPN. They want to disrupt the attack without affecting legitimate users. Which strategy is most effective?

Increase the password complexity requirements.

Disable the VPN service temporarily.

Use a honeypot to attract the attackers.

Implement account lockout policies and rate limiting.

Which of the following is a common strategy to improve the availability of a critical service?

Applying digital signatures to software updates

Implementing redundant servers in a failover cluster

CompTIASecurity+

Domain 1Objective 2

Fundamental Concepts SY0-701 Practice Questions (Page 5)

Part of the General security concepts domain, which accounts for 12% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

12%of the exam

Questions 21–25

21foundation · easy
Which security goal is primarily concerned with preventing unauthorized disclosure of sensitive information?
Select an answer first
22expert · hard
A company needs to track user activity for compliance and to detect insider threats. They want to correlate login events with file access and data exfiltration attempts. Which approach is most effective?
Select an answer first
23application · medium
A law firm needs to prove that a partner approved a contract and that the approval cannot be denied later. Which control should they implement?
Select an answer first
24expert · hard
A company is experiencing a brute-force attack on their VPN. They want to disrupt the attack without affecting legitimate users. Which strategy is most effective?
Select an answer first
25foundation · easy
Which of the following is a common strategy to improve the availability of a critical service?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.