A hospital uses an EHR system. A nurse needs to view patient records but should not be able to modify them. A doctor should be able to both view and modify records. What is the best way to enforce these permissions?

Give all staff the same permissions and rely on auditing.

Implement a honeypot to detect unauthorized modifications.

Use MFA for all users and allow full access after authentication.

Assign permissions based on job roles using RBAC.

What is the primary purpose of deception technology in cybersecurity?

To mislead attackers and detect their presence

CompTIASecurity+

Domain 1Objective 2

Fundamental Concepts SY0-701 Practice Questions (Page 6)

Part of the General security concepts domain, which accounts for 12% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

12%of the exam

Questions 26–30

26foundation · easy
After a user is authenticated, which process determines what resources and actions they are permitted to access?
Select an answer first
27application · medium
A hospital uses an EHR system. A nurse needs to view patient records but should not be able to modify them. A doctor should be able to both view and modify records. What is the best way to enforce these permissions?
Select an answer first
28application · medium
A security team wants to detect attackers who have already infiltrated the network. They plan to deploy a system that appears to be a vulnerable server but is actually isolated and monitored. What is this technique called?
Select an answer first
29foundation · easy
What is the primary purpose of deception technology in cybersecurity?
Select an answer first
30foundation · easy
Which of the following is a common tool used to implement accounting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Fundamental Concepts SY0-701 Practice Questions (Page 6)

Questions 26–30

After a user is authenticated, which process determines what resources and actions they are permitted to access?

A hospital uses an EHR system. A nurse needs to view patient records but should not be able to modify them. A doctor should be able to both view and modify records. What is the best way to enforce these permissions?

A security team wants to detect attackers who have already infiltrated the network. They plan to deploy a system that appears to be a vulnerable server but is actually isolated and monitored. What is this technique called?

What is the primary purpose of deception technology in cybersecurity?

Which of the following is a common tool used to implement accounting?

Keep studying — General security concepts