What is the first step a user should take when they notice unusual system behavior, such as a program running that they did not start?

Report the observation to the security team or help desk

Ignore it and continue working, as it may be a normal update

Immediately shut down the computer to stop the activity

Try to delete the program manually

A security analyst is configuring monitoring to detect potential data exfiltration. The analyst wants to identify when a large amount of data is transferred to an external location. Which monitoring technique would be most effective?

Monitor outbound network traffic for unusual data volumes

Monitor inbound network traffic for suspicious packets

An organization wants to ensure that employees know how to protect sensitive information when working remotely. Which guidance should be provided?

Share files via personal email for convenience

Use personal devices for work to avoid carrying company devices

Use only company-issued devices and avoid public Wi-Fi without a VPN

Disable the screen lock to make it easier to access the device

An employee receives a suspicious email that appears to be from a colleague, asking them to click a link to view a document. The employee is unsure if the email is legitimate. What should the employee do?

Delete the email and forget about it

Forward the email to the colleague to ask if they sent it

Report the email to the security team and do not click the link

Click the link to see if the document is legitimate

What is the recommended action for a user who receives a suspicious email asking for sensitive information?

Report the email to the security team and do not respond

Click the link to see if it is legitimate

Reply to the email to ask for verification

Forward the email to all colleagues to warn them

CompTIASecurity+

Domain 5Objective 6

Security Awareness SY0-701 Practice Questions (Page 4)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

5concepts

20%of the exam

Questions 16–20

16foundation · easy
What is the first step a user should take when they notice unusual system behavior, such as a program running that they did not start?
Select an answer first
17application · medium
A security analyst is configuring monitoring to detect potential data exfiltration. The analyst wants to identify when a large amount of data is transferred to an external location. Which monitoring technique would be most effective?
Select an answer first
18application · medium
An organization wants to ensure that employees know how to protect sensitive information when working remotely. Which guidance should be provided?
Select an answer first
19application · medium
An employee receives a suspicious email that appears to be from a colleague, asking them to click a link to view a document. The employee is unsure if the email is legitimate. What should the employee do?
Select an answer first
20foundation · easy
What is the recommended action for a user who receives a suspicious email asking for sensitive information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.