CompTIA Security+ (SY0-701) — Practice Questions flashcards
6 of 75 questions free to study here · 21 topics · the whole deck is built into Willys
Multiple-choice practice questions, one best answer each, on controls, zero trust, cryptography and PKI, attacks and indicators, secure architecture, identity, incident response and risk.
Practice deck · part of CompTIA Security+ (SY0-701) · written against: Exam SY0-701 objectives; SY0-701 can still be sat in English until 11 June 2027, and SY0-801 launches on 17 November 2026 (as of October 2026). Updated 2026-10-10.
Study the free sample
6 questions from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.
Tap the card or press Space to flip
The 6 sample questions as a list
-
A ransomware gang copies a clinic's patient records and threatens to publish them unless paid. The clinic's systems keep running normally and no records were altered. Which security goal has been compromised?
A) Confidentiality
B) Non-repudiation
C) Availability
D) IntegrityA) ConfidentialitySecurity Concepts
The records were disclosed to an unauthorized party, which is a loss of confidentiality. Integrity would require the data to be changed, and availability was untouched because the systems kept running. -
The CFO receives a personalized email that references a real pending acquisition and asks her to open an attached 'term sheet'. Which attack BEST describes this?
A) Whaling
B) Watering hole attack
C) Smishing
D) VishingA) WhalingSocial Engineering
Whaling is spear phishing aimed at a senior executive. Vishing uses voice calls, smishing uses text messages, and a watering hole infects a site the victims visit. -
The SIEM shows exactly one failed login on each of 800 different accounts within ten minutes, all using the same password and the same source IP. Which attack is this?
A) Credential stuffing
B) Brute force
C) Rainbow table attack
D) Password sprayingD) Password sprayingPassword Attacks
Spraying tries one common password across many accounts, keeping each below its lockout threshold. Credential stuffing replays many different username and password pairs leaked from another site. -
The monitoring team polls routers with SNMPv2c, and an audit finds the community strings readable in packet captures. Which change BEST fixes this?
A) Move SNMP polling from UDP over to TCP
B) Change the community strings every month
C) Upgrade the devices to SNMPv3
D) Use SNMP traps instead of regular pollingC) Upgrade the devices to SNMPv3Secure Protocols
SNMPv3 adds user authentication, integrity and encryption. Versions 1 and 2c send community strings in cleartext, so rotating them only changes what an eavesdropper reads. -
Payroll records may be opened only by finance staff, from company-managed devices, during business hours. Which access control model does this policy describe?
A) Role-based access control
B) Mandatory access control
C) Attribute-based access control
D) Discretionary access controlC) Attribute-based access controlIdentity & Access
ABAC evaluates attributes of the subject, the device and the environment, such as time of day. RBAC grants access by job role alone and could not express the device and time conditions. -
Who should decide that an HR dataset is classified Confidential and approve who may access it?
A) Data processor
B) Data custodian
C) Security analyst
D) Data ownerD) Data ownerGovernance & Data
The data owner, usually a senior business manager, sets classification and approves access. The custodian, typically IT, implements the technical protections on the owner's behalf.
Unlock the whole deck
You are studying a free 6-question sample. All 75 questions of CompTIA Security+ (SY0-701) — Practice Questions, the other 4 CompTIA Security+ (SY0-701) decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.
In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.
More CompTIA Security+ (SY0-701) decks
← All CompTIA Security+ (SY0-701) decks, with the study guide and topic outline.
About these cards
Review status: Second-reader reviewed, with corrections applied.
Checked against:
- Written for SY0-701, which can still be sat in English until 11 June 2027; its successor, SY0-801, launches on 17 November 2026 (CompTIA's Security+ V7 and V8 pages, as of October 2026).
- Checked against the CompTIA Security+ SY0-701 exam objectives, version 6.0 (topic list only; no text copied); the incident response phases follow objective 4.8.
- Checked against NIST SP 800-207 Zero Trust Architecture, NIST SP 800-61 Rev. 3 (April 2025, which superseded Rev. 2) and NIST SP 800-86 (public domain) for zero trust roles, incident handling and evidence handling, and against the OWASP Cheat Sheet Series (CC BY-SA 4.0; reference only) for application attack fixes.
- Checked against RFC 3227 (order of volatility), RFC 6960 (OCSP), RFC 4033 (DNSSEC), RFC 3410 (SNMPv3), RFC 8907 (TACACS+) and RFC 7664 (Dragonfly, the basis of WPA3 SAE), NIST SP 800-34 Rev. 1 and SP 800-162 (public domain), and GDPR Article 4 for controller and processor (reference only).
These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.
CompTIA® and Security+® are registered trademarks of CompTIA, Inc. This product is not affiliated with or endorsed by CompTIA.
Use of these pages is covered by our Terms of Use.