A company's website was defaced by an attacker. The security team has identified the vulnerability and patched it. What is the NEXT step to fully restore the website to its original state?

Disconnect the web server from the network.

Change all administrative passwords.

Restore the website from a clean backup.

Which of the following is an example of a directive control?

A backup system that restores data after an incident

A security camera that records activity

A firewall that blocks unauthorized traffic

A security policy that requires all employees to use multi-factor authentication

A security analyst suspects that an attacker may have breached the network. The analyst needs to determine whether any unauthorized activity has occurred. Which control should the analyst use to identify a potential breach?

Restore the servers from the most recent backup.

Enforce a new password complexity policy.

Apply the latest security patches to all servers.

Review the logs from the intrusion detection system (IDS).

CompTIASecurity+

Domain 1Objective 1

Security Controls SY0-701 Practice Questions (Page 2)

Part of the General security concepts domain, which accounts for 12% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

12%of the exam

Questions 6–10

6application · medium
A company's website was defaced by an attacker. The security team has identified the vulnerability and patched it. What is the NEXT step to fully restore the website to its original state?
Select an answer first
7foundation · easy
Which of the following is an example of a directive control?
Select an answer first
8application · medium
A company has implemented a system that monitors user activity and generates alerts when unusual behavior is detected. This system is an example of which type of control?
Select an answer first
9foundation · easy
An organization wants to ensure that data stored on laptops is unreadable if a device is stolen. Which type of control would BEST address this requirement?
Select an answer first
10application · medium
A security analyst suspects that an attacker may have breached the network. The analyst needs to determine whether any unauthorized activity has occurred. Which control should the analyst use to identify a potential breach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Security Controls SY0-701 Practice Questions (Page 2)

Questions 6–10

A company's website was defaced by an attacker. The security team has identified the vulnerability and patched it. What is the NEXT step to fully restore the website to its original state?

Which of the following is an example of a directive control?

A company has implemented a system that monitors user activity and generates alerts when unusual behavior is detected. This system is an example of which type of control?

An organization wants to ensure that data stored on laptops is unreadable if a device is stolen. Which type of control would BEST address this requirement?

A security analyst suspects that an attacker may have breached the network. The analyst needs to determine whether any unauthorized activity has occurred. Which control should the analyst use to identify a potential breach?

Keep studying — General security concepts