What is a key benefit of continuous compliance monitoring over periodic audits?

It provides real-time visibility into compliance status

It reduces the need for employee training

It guarantees that all compliance requirements are met

It eliminates the need for any security controls

Which practice supports privacy in compliance reporting?

Including all available personal data to provide a complete audit trail

Storing reports indefinitely for future reference

Minimizing the collection of personal data to only what is necessary for the report

Sharing reports with all employees to ensure transparency

A healthcare organization must demonstrate to an external auditor that its access-control policies are being enforced. The compliance team needs to produce evidence that user permissions are reviewed quarterly and that any excessive rights are revoked. Which approach best satisfies this requirement?

Implement a continuous monitoring tool that alerts on any permission change in real time.

Conduct an annual penetration test to identify excessive permissions and document the findings.

Ask the IT department to manually check permissions at the end of each year and email the results to the auditor.

Schedule automated quarterly user-access reviews that generate reports and require manager sign-off before revocation.

Which tool is commonly used to automate the monitoring of compliance with security policies?

Security information and event management (SIEM) system

Word processor for documenting policies

Spreadsheet application for storing audit results

Email client for sending compliance reports

An organization needs to monitor compliance with its internal policy that prohibits sharing customer data with third parties without approval. Which monitoring approach would be most effective?

Reviewing data transfer logs and alerting on any outbound transfer to an unapproved third party

Blocking all outbound email to external domains

Conducting a yearly survey of employees asking if they have shared data

Requiring employees to sign a non-disclosure agreement annually

CompTIASecurity+

Domain 5Objective 4

Security Compliance SY0-701 Practice Questions (Page 2)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

4concepts

20%of the exam

Questions 6–10

6foundation · easy
What is a key benefit of continuous compliance monitoring over periodic audits?
Select an answer first
7foundation · easy
Which practice supports privacy in compliance reporting?
Select an answer first
8application · medium
A healthcare organization must demonstrate to an external auditor that its access-control policies are being enforced. The compliance team needs to produce evidence that user permissions are reviewed quarterly and that any excessive rights are revoked. Which approach best satisfies this requirement?
Select an answer first
9foundation · easy
Which tool is commonly used to automate the monitoring of compliance with security policies?
Select an answer first
10application · medium
An organization needs to monitor compliance with its internal policy that prohibits sharing customer data with third parties without approval. Which monitoring approach would be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.