A company is implementing zero trust and wants to enforce least privilege. They need to ensure that users have access only to the resources necessary for their current role and that access is continuously verified. Which approach is most aligned with zero trust?

Use a VPN and trust users once they are connected.

Use dynamic access policies based on user, device, and location, and require re-authentication for sensitive actions.

Implement MFA only for external users.

Grant users permanent access to all resources after initial authentication.

A company suspects that an employee is accessing sensitive files outside of work hours. They need to determine who accessed what, when, and from where. Which control should they use?

Set up a VPN for remote access.

Use a honeypot to lure the employee.

Enable detailed audit logging on file servers and review the logs.

CompTIASecurity+

Domain 1Objective 2

Fundamental Concepts SY0-701 Practice Questions (Page 7)

Part of the General security concepts domain, which accounts for 12% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

12%of the exam

Questions 31–35

31expert · hard
A company is implementing zero trust and wants to enforce least privilege. They need to ensure that users have access only to the resources necessary for their current role and that access is continuously verified. Which approach is most aligned with zero trust?
Select an answer first
32foundation · easy
Which security process verifies the identity of a user or system before granting access?
Select an answer first
33application · medium
A company suspects that an employee is accessing sensitive files outside of work hours. They need to determine who accessed what, when, and from where. Which control should they use?
Select an answer first
34foundation · easy
Which security process involves tracking user activities and resource usage for auditing and accountability?
Select an answer first
35foundation · easy
Which of the following is an example of disruption technology?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Fundamental Concepts SY0-701 Practice Questions (Page 7)

Questions 31–35

A company is implementing zero trust and wants to enforce least privilege. They need to ensure that users have access only to the resources necessary for their current role and that access is continuously verified. Which approach is most aligned with zero trust?

Which security process verifies the identity of a user or system before granting access?

A company suspects that an employee is accessing sensitive files outside of work hours. They need to determine who accessed what, when, and from where. Which control should they use?

Which security process involves tracking user activities and resource usage for auditing and accountability?

Which of the following is an example of disruption technology?

Keep studying — General security concepts