Which activity is a typical step in the compliance reporting process?

Collecting evidence of control implementation and effectiveness

Training employees on security awareness

Conducting penetration tests to identify vulnerabilities

Deploying a new firewall to block unauthorized traffic

A company has been notified by a regulator that it is under investigation for a potential data breach. The company's compliance team must decide how to respond. The company has not yet confirmed whether a breach occurred. What is the most appropriate initial action?

Delete all logs that might indicate a breach

Conduct an internal investigation to determine if a breach occurred and gather evidence

Ignore the regulator's notice until the investigation is complete

Immediately notify all affected customers of a breach

What is the primary purpose of compliance reporting in a security program?

To assign blame for security incidents and determine disciplinary actions

To replace the need for regular security audits by providing a one-time snapshot of the security posture

To automatically enforce security policies by blocking non-compliant user actions in real time

To provide evidence to stakeholders that security controls are operating as intended and meeting regulatory requirements

A company is subject to a regulation that requires it to report any data breach to affected individuals. The company has just discovered a breach involving personal data. What is the most important privacy consideration when preparing the breach notification?

Limiting the notification to a small group of executives to avoid panic

Including enough detail for individuals to understand the risk and take protective action

Including the full names and social security numbers of all affected individuals

Delaying the notification until the investigation is complete

CompTIASecurity+

Domain 5Objective 4

Security Compliance SY0-701 Practice Questions (Page 4)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

4concepts

20%of the exam

Questions 16–20

16application · medium
A company is found to be in violation of a data protection regulation because it did not obtain proper consent before processing personal data. The regulator has ordered the company to stop processing the data. What is this consequence called?
Select an answer first
17foundation · easy
Which activity is a typical step in the compliance reporting process?
Select an answer first
18expert · hard
A company has been notified by a regulator that it is under investigation for a potential data breach. The company's compliance team must decide how to respond. The company has not yet confirmed whether a breach occurred. What is the most appropriate initial action?
Select an answer first
19foundation · easy
What is the primary purpose of compliance reporting in a security program?
Select an answer first
20application · medium
A company is subject to a regulation that requires it to report any data breach to affected individuals. The company has just discovered a breach involving personal data. What is the most important privacy consideration when preparing the breach notification?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.