How do security standards differ from security policies?

Standards are developed by external bodies, while policies are internal

Standards are mandatory technical rules, while policies are high-level mandatory statements

Standards are optional, while policies are mandatory

Standards are step-by-step instructions, while policies are high-level

A company has a security standard that requires all employees to change their passwords every 90 days. The security team wants to verify that employees are complying with this standard. Which monitoring method would provide the most direct evidence?

Performing a network vulnerability scan

Reviewing password change logs from the identity management system

Reviewing the standard annually to ensure it is still relevant

Conducting a security awareness survey

What is the primary role of security policies in governing organizational security practices?

To provide optional suggestions for improving security

To establish mandatory rules and expectations for security behavior

To outline step-by-step instructions for specific tasks

To specify exact technical configurations for systems

A company has implemented a security standard that requires all servers to be patched within 30 days of a patch release. The security team wants to ensure this standard is being met. Which monitoring activity would provide the most direct evidence of compliance?

Conducting an annual security awareness training session

Reviewing the patch management system's compliance reports

Reviewing the standard annually to ensure it is still relevant

Performing a penetration test on the network

CompTIASecurity+

Domain 5Objective 1

Security Governance SY0-701 Practice Questions (Page 2)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

20%of the exam

Questions 6–10

6foundation · easy
How do security standards differ from security policies?
Select an answer first
7foundation · easy
Which document is the highest-level, mandatory statement of management's intent regarding security?
Select an answer first
8application · medium
A company has a security standard that requires all employees to change their passwords every 90 days. The security team wants to verify that employees are complying with this standard. Which monitoring method would provide the most direct evidence?
Select an answer first
9foundation · easy
What is the primary role of security policies in governing organizational security practices?
Select an answer first
10application · medium
A company has implemented a security standard that requires all servers to be patched within 30 days of a patch release. The security team wants to ensure this standard is being met. Which monitoring activity would provide the most direct evidence of compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.