Which information is most important to include when reporting a security incident?

The employee's annual performance review score

The date and time the incident was discovered

An organization is updating its security awareness program. The goal is to provide employees with clear, actionable guidance on how to handle sensitive information and avoid common threats. Which of the following would be the most effective way to deliver this guidance?

Send a monthly email newsletter with security tips

Create a series of short, scenario-based training modules with practical examples

Require employees to sign a one-time acceptable use policy

Publish a 50-page security policy document on the intranet

A security team is designing an incident reporting process. They want to encourage employees to report suspicious activities without fear of retaliation. Which element is most important to include in the process?

An anonymous reporting channel and a clear non-retaliation policy

A requirement that employees report incidents only to their direct supervisor

A public recognition program for employees who report incidents

A strict policy that punishes employees who fail to report incidents

Which technique is commonly used in phishing attacks to make fraudulent emails appear legitimate?

Sending emails only to users who have previously reported phishing attempts

Using a domain name that closely resembles a trusted company's domain

Encrypting all email content with the recipient's public key

Using only official corporate email servers to send messages

An employee receives an email with an attachment that they were not expecting. The email claims to be from a vendor, but the sender's address looks slightly off. The employee is unsure if it is legitimate. What should the employee do?

Delete the email immediately and forget about it

Reply to the email to ask the sender if they sent it

Open the attachment to check if it is a legitimate invoice

Forward the email to the IT security team and do not open the attachment

CompTIASecurity+

Domain 5Objective 6

Security Awareness SY0-701 Practice Questions (Page 3)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

5concepts

20%of the exam

Questions 11–15

11foundation · easy
Which information is most important to include when reporting a security incident?
Select an answer first
12application · medium
An organization is updating its security awareness program. The goal is to provide employees with clear, actionable guidance on how to handle sensitive information and avoid common threats. Which of the following would be the most effective way to deliver this guidance?
Select an answer first
13expert · hard
A security team is designing an incident reporting process. They want to encourage employees to report suspicious activities without fear of retaliation. Which element is most important to include in the process?
Select an answer first
14foundation · easy
Which technique is commonly used in phishing attacks to make fraudulent emails appear legitimate?
Select an answer first
15application · medium
An employee receives an email with an attachment that they were not expecting. The email claims to be from a vendor, but the sender's address looks slightly off. The employee is unsure if it is legitimate. What should the employee do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.