What is the PRIMARY purpose of a detective control?

To prevent security incidents from occurring

To restore systems after a security incident

To discourage potential attackers from attempting violations

To identify and respond to security breaches after they occur

A new CISO wants to establish a security governance framework. The CISO needs to define the overall security strategy and assign accountability. Which control should be implemented FIRST?

Hire a penetration testing firm.

Install CCTV cameras in the server room.

Develop a comprehensive security policy.

A small business needs to establish a formal framework for its security program. The owner wants to define high-level expectations for employee behavior and assign responsibility for daily security tasks. Which set of documents should be created FIRST?

A security policy and a set of standard operating procedures.

A firewall rule set and an intrusion prevention system configuration.

A backup tape rotation schedule and a log review checklist.

A set of security awareness posters and email reminders.

CompTIASecurity+

Domain 1Objective 1

Security Controls SY0-701 Practice Questions (Page 6)

Part of the General security concepts domain, which accounts for 12% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

12%of the exam

Questions 26–30

26foundation · easy
What is the PRIMARY purpose of a detective control?
Select an answer first
27foundation · easy
An organization creates a document that defines acceptable use of company resources and the consequences of violations. Which type of control is this?
Select an answer first
28application · medium
A new CISO wants to establish a security governance framework. The CISO needs to define the overall security strategy and assign accountability. Which control should be implemented FIRST?
Select an answer first
29application · medium
A small business needs to establish a formal framework for its security program. The owner wants to define high-level expectations for employee behavior and assign responsibility for daily security tasks. Which set of documents should be created FIRST?
Select an answer first
30application · medium
A company wants to reduce the risk of tailgating at its main entrance. The security team installs a turnstile that allows only one person to pass at a time. This is an example of which type of control?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Security Controls SY0-701 Practice Questions (Page 6)

Questions 26–30

What is the PRIMARY purpose of a detective control?

An organization creates a document that defines acceptable use of company resources and the consequences of violations. Which type of control is this?

A new CISO wants to establish a security governance framework. The CISO needs to define the overall security strategy and assign accountability. Which control should be implemented FIRST?

A small business needs to establish a formal framework for its security program. The owner wants to define high-level expectations for employee behavior and assign responsibility for daily security tasks. Which set of documents should be created FIRST?

A company wants to reduce the risk of tailgating at its main entrance. The security team installs a turnstile that allows only one person to pass at a time. This is an example of which type of control?

Keep studying — General security concepts