What is the primary purpose of conducting simulated phishing exercises as part of security awareness training?

To test the organization's email server security controls

To measure the effectiveness of the spam filter

To reinforce users' ability to recognize and avoid phishing attempts

To identify employees who should be terminated for security violations

A security analyst is investigating a potential insider threat. A user has been accessing files outside their normal work hours and downloading them to a USB drive. The analyst has confirmed the behavior is unusual but is not sure if it is malicious. The user is a senior executive. What should the analyst do?

Immediately disable the user's account and escalate to management

Continue monitoring the user's activity and gather more evidence before taking action

Report the behavior to law enforcement immediately

Confront the user and ask for an explanation

Which user behavior is most likely to indicate a potential security threat that should be investigated?

A user accessing the same files they normally use during business hours

A user changing their password after forgetting it

A user receiving a large number of emails from a known vendor

A user logging in from a new device and immediately downloading a large volume of sensitive data

What is the primary reason for having a formal incident reporting procedure?

To assign blame to the employee who caused the incident

To ensure incidents are reported consistently and promptly

To avoid involving law enforcement

To document incidents for marketing purposes

Which tool is commonly used for security monitoring to collect and analyze logs from multiple sources?

SIEM (Security Information and Event Management)

CompTIASecurity+

Domain 5Objective 6

Security Awareness SY0-701 Practice Questions (Page 2)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

5concepts

20%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of conducting simulated phishing exercises as part of security awareness training?
Select an answer first
7expert · hard
A security analyst is investigating a potential insider threat. A user has been accessing files outside their normal work hours and downloading them to a USB drive. The analyst has confirmed the behavior is unusual but is not sure if it is malicious. The user is a senior executive. What should the analyst do?
Select an answer first
8foundation · easy
Which user behavior is most likely to indicate a potential security threat that should be investigated?
Select an answer first
9foundation · easy
What is the primary reason for having a formal incident reporting procedure?
Select an answer first
10foundation · easy
Which tool is commonly used for security monitoring to collect and analyze logs from multiple sources?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.