1
CompTIA Security+ (SY0-701)
Advanced Practice Examination
v2.0: Comprehensive 150-
Question Bank Covering General
Security Concepts,
Threats/Vulnerabilities/Mitigatio
ns, Security Architecture, Security
Operations, and Security
Program Management with
Detailed Rationales for
Cybersecurity Professionals a well
detailed one written
and graded A+ upgraded
, 2
Domain 1: General Security Concepts (12%)
Question 1
A security administrator is implementing a defense-in-depth strategy for a financial institution.
Which of the following BEST describes the fundamental principle of this approach?
A) Installing a single comprehensive security solution to cover all threats
B) Using multiple layers of security controls so that if one fails, others remain effective
C) Focusing exclusively on perimeter security to block all external threats
D) Relying solely on encryption for all data protection needs
-” detailed answer 100 % correct :-”B
Rationale: Defense-in-depth uses multiple layers of security controls so that if one layer fails,
others continue to provide protection. This layered approach ensures redundancy and resilience
against various attack vectors.
Question 2
Which of the following security control categories is BEST described as involving policies,
procedures, and guidelines that guide security decisions?
A) Technical controls
B) Physical controls
C) Managerial controls
D) Operational controls
-” detailed answer 100 % correct :-”C
Rationale: Managerial controls address security design and implementation through policies,
procedures, and guidelines. They establish the framework for security governance and decision-
making.
, 3
Question 3
An organization is implementing a zero trust architecture. Which of the following principles is
the FOUNDATIONAL requirement of a zero trust implementation?
A) All internal traffic is trusted by default
B) Users are authenticated once and granted persistent access
C) Every access request is continuously verified regardless of network location
D) External traffic requires multi-factor authentication but internal traffic does not
-” detailed answer 100 % correct :-”C
Rationale: Zero trust architecture eliminates implicit trust and requires continuous verification
for every access request, regardless of whether the request originates from inside or outside
the network perimeter. The core principle is "never trust, always verify."
Question 4
A security analyst is reviewing the CIA triad. Which component is primarily concerned with
ensuring that data is ACCURATE and TRUSTWORTHY?
A) Confidentiality
B) Integrity
C) Availability
D) Authentication
-” detailed answer 100 % correct :-”B
Rationale: Integrity ensures that data is accurate, complete, and has not been tampered with.
This is typically achieved through hashing, digital signatures, and access controls.
Question 5
Which of the following is an example of a PREVENTATIVE security control?
A) Security information and event management (SIEM) alerts
B) Intrusion detection system (IDS)
C) Firewall rules restricting unauthorized traffic
D) Data backup and recovery procedures
-” detailed answer 100 % correct :-”C
, 4
Rationale: Firewall rules that restrict unauthorized traffic are preventative controls—they
actively block threats before they can cause harm. Detective controls (IDS, SIEM alerts) identify
issues after they occur, while corrective controls (backups) remediate damage.
Question 6
What is the primary purpose of NON-REPUDIATION in a security context?
A) To prevent unauthorized access to systems
B) To make it difficult or impossible to deny that someone has performed an action
C) To ensure data is available when needed
D) To encrypt data in transit
-” detailed answer 100 % correct :-”B
Rationale: Non-repudiation ensures that an individual cannot deny having performed a
particular action. This is typically achieved through digital signatures and audit logs.
Question 7
Which of the following security concepts ensures that a system or data is ACCESSIBLE when
needed by authorized users?
A) Confidentiality
B) Integrity
C) Availability
D) Accountability
-” detailed answer 100 % correct :-”C
Rationale: Availability ensures that systems and data are accessible to authorized users when
needed. This is typically achieved through redundancy, failover systems, and disaster recovery
planning.
Question 8
A security administrator is configuring access controls and wants to ensure that the PRINCIPLE
OF LEAST PRIVILEGE is enforced. Which action aligns with this principle?
A) Granting all users administrative privileges to simplify management
B) Assigning users only the permissions necessary to perform their job functions
CompTIA Security+ (SY0-701)
Advanced Practice Examination
v2.0: Comprehensive 150-
Question Bank Covering General
Security Concepts,
Threats/Vulnerabilities/Mitigatio
ns, Security Architecture, Security
Operations, and Security
Program Management with
Detailed Rationales for
Cybersecurity Professionals a well
detailed one written
and graded A+ upgraded
, 2
Domain 1: General Security Concepts (12%)
Question 1
A security administrator is implementing a defense-in-depth strategy for a financial institution.
Which of the following BEST describes the fundamental principle of this approach?
A) Installing a single comprehensive security solution to cover all threats
B) Using multiple layers of security controls so that if one fails, others remain effective
C) Focusing exclusively on perimeter security to block all external threats
D) Relying solely on encryption for all data protection needs
-” detailed answer 100 % correct :-”B
Rationale: Defense-in-depth uses multiple layers of security controls so that if one layer fails,
others continue to provide protection. This layered approach ensures redundancy and resilience
against various attack vectors.
Question 2
Which of the following security control categories is BEST described as involving policies,
procedures, and guidelines that guide security decisions?
A) Technical controls
B) Physical controls
C) Managerial controls
D) Operational controls
-” detailed answer 100 % correct :-”C
Rationale: Managerial controls address security design and implementation through policies,
procedures, and guidelines. They establish the framework for security governance and decision-
making.
, 3
Question 3
An organization is implementing a zero trust architecture. Which of the following principles is
the FOUNDATIONAL requirement of a zero trust implementation?
A) All internal traffic is trusted by default
B) Users are authenticated once and granted persistent access
C) Every access request is continuously verified regardless of network location
D) External traffic requires multi-factor authentication but internal traffic does not
-” detailed answer 100 % correct :-”C
Rationale: Zero trust architecture eliminates implicit trust and requires continuous verification
for every access request, regardless of whether the request originates from inside or outside
the network perimeter. The core principle is "never trust, always verify."
Question 4
A security analyst is reviewing the CIA triad. Which component is primarily concerned with
ensuring that data is ACCURATE and TRUSTWORTHY?
A) Confidentiality
B) Integrity
C) Availability
D) Authentication
-” detailed answer 100 % correct :-”B
Rationale: Integrity ensures that data is accurate, complete, and has not been tampered with.
This is typically achieved through hashing, digital signatures, and access controls.
Question 5
Which of the following is an example of a PREVENTATIVE security control?
A) Security information and event management (SIEM) alerts
B) Intrusion detection system (IDS)
C) Firewall rules restricting unauthorized traffic
D) Data backup and recovery procedures
-” detailed answer 100 % correct :-”C
, 4
Rationale: Firewall rules that restrict unauthorized traffic are preventative controls—they
actively block threats before they can cause harm. Detective controls (IDS, SIEM alerts) identify
issues after they occur, while corrective controls (backups) remediate damage.
Question 6
What is the primary purpose of NON-REPUDIATION in a security context?
A) To prevent unauthorized access to systems
B) To make it difficult or impossible to deny that someone has performed an action
C) To ensure data is available when needed
D) To encrypt data in transit
-” detailed answer 100 % correct :-”B
Rationale: Non-repudiation ensures that an individual cannot deny having performed a
particular action. This is typically achieved through digital signatures and audit logs.
Question 7
Which of the following security concepts ensures that a system or data is ACCESSIBLE when
needed by authorized users?
A) Confidentiality
B) Integrity
C) Availability
D) Accountability
-” detailed answer 100 % correct :-”C
Rationale: Availability ensures that systems and data are accessible to authorized users when
needed. This is typically achieved through redundancy, failover systems, and disaster recovery
planning.
Question 8
A security administrator is configuring access controls and wants to ensure that the PRINCIPLE
OF LEAST PRIVILEGE is enforced. Which action aligns with this principle?
A) Granting all users administrative privileges to simplify management
B) Assigning users only the permissions necessary to perform their job functions
