A security team wants to detect potential insider threats by identifying unusual access patterns, such as employees accessing files they do not normally use or logging in at odd hours. Which monitoring approach would be most effective for this purpose?

Deploy a network intrusion detection system (NIDS) to monitor inbound traffic

Enable verbose logging on all file servers and review logs weekly

Require all employees to use multi-factor authentication

Implement a user and entity behavior analytics (UEBA) tool that establishes baselines and alerts on deviations

A company recently experienced a spear-phishing attack where several employees clicked a link in an email that appeared to come from the CEO. The email used the CEO's actual name and a subject line referencing a real project. The security team wants to reduce the likelihood of similar successful attacks. Which approach would be most effective?

Conduct regular phishing simulations and provide immediate feedback to users who fall for them

Implement a spam filter that quarantines all emails with external senders

Send a company-wide email warning employees about phishing attacks

Disable all links in emails and require users to copy and paste URLs into a browser

An organization wants to improve its security awareness by providing employees with clear instructions on how to report security incidents. Which of the following would be the most effective way to ensure employees know how to report?

Include the reporting procedure in the employee handbook

Create a simple, memorable reporting process and communicate it through multiple channels

Provide a detailed flowchart of the reporting process

Require employees to report incidents to their direct supervisor only

A company has a high rate of employees falling for phishing emails. The security team wants to implement a training program that will have a lasting impact. Which combination of actions would be most effective?

Send a weekly email with examples of phishing emails

Implement a technical control that blocks all external emails

Conduct an annual training session and post security posters around the office

Run phishing simulations quarterly and provide targeted training to users who fail

A company is implementing a new security awareness program. The security team wants to teach employees how to identify phishing emails. Which training method would be most effective for this purpose?

Post a poster in the break room with phishing examples

Show employees a list of common phishing indicators and ask them to memorize it

Send a one-time email with tips on how to spot phishing emails

Provide interactive training that includes examples of real phishing emails and quizzes

CompTIASecurity+

Domain 5Objective 6

Security Awareness SY0-701 Practice Questions (Page 1)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

5concepts

20%of the exam

Questions 1–5

1application · medium
A security team wants to detect potential insider threats by identifying unusual access patterns, such as employees accessing files they do not normally use or logging in at odd hours. Which monitoring approach would be most effective for this purpose?
Select an answer first
2application · medium
A company recently experienced a spear-phishing attack where several employees clicked a link in an email that appeared to come from the CEO. The email used the CEO's actual name and a subject line referencing a real project. The security team wants to reduce the likelihood of similar successful attacks. Which approach would be most effective?
Select an answer first
3application · medium
An organization wants to improve its security awareness by providing employees with clear instructions on how to report security incidents. Which of the following would be the most effective way to ensure employees know how to report?
Select an answer first
4application · medium
A company has a high rate of employees falling for phishing emails. The security team wants to implement a training program that will have a lasting impact. Which combination of actions would be most effective?
Select an answer first
5application · medium
A company is implementing a new security awareness program. The security team wants to teach employees how to identify phishing emails. Which training method would be most effective for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.