COMPTIA SECURITY+ SY0-701 CERTIFICATION EXAM 2026/2027 TEST BANK
COMPREHENSIVE PRACTICE QUESTIONS AND STUDY GUIDE
COMPLETE ACCURATE EXAM APPROVED QUESTIONS AND CORRECT DETAILED
ANSWERS WITH RATIONALES
SECTION 1: GENERAL SECURITY CONCEPTS (12% OF EXAM)
1. Which of the following best describes the primary purpose of the CIA triad in
information security?
• A. To ensure that data is stored in three separate geographic locations
• B. To provide a framework for balancing confidentiality, integrity, and availability
• C. To establish three distinct layers of network defense
• D. To mandate the use of three-factor authentication for all systems
Answer: B
Rationale: The CIA triad (Confidentiality, Integrity, Availability) is the foundational security
model that guides security controls and policies. Confidentiality ensures data is accessible
only to authorized parties, integrity ensures data is accurate and unaltered, and availability
ensures data is accessible when needed.
2. A security administrator implements a system that requires users to provide a
password and a fingerprint scan to access sensitive data. Which authentication factor
category does the fingerprint scan represent?
• A. Something you know
• B. Something you have
• C. Something you are
• D. Something you do
Answer: C
Rationale: Biometric factors such as fingerprints, retinal scans, and voice patterns fall
under "something you are," which is a characteristic of the user's physical being.
Passwords are "something you know," and smart cards or tokens are "something you have".
,3. An organization deploys a firewall to block unauthorized network traffic. Which type
of security control is this?
• A. Administrative control
• B. Technical control
• C. Physical control
• D. Operational control
Answer: B
Rationale: Technical controls (also called logical controls) are implemented through
hardware and software systems, such as firewalls, encryption, and access control lists.
Administrative controls include policies and procedures, while physical controls include
barriers and locks.
4. Which of the following security control functions is designed to stop a security
incident before it occurs?
• A. Detective
• B. Corrective
• C. Preventive
• D. Deterrent
Answer: C
Rationale: Preventive controls actively stop security incidents from occurring by blocking
threats or vulnerabilities. Examples include firewalls, intrusion prevention systems, and
access controls. Detective controls identify incidents after they occur, and corrective
controls restore systems after an incident.
5. A company implements a policy requiring all employees to complete annual
security awareness training. This is an example of which type of control?
• A. Technical control
• B. Physical control
, • C. Managerial control
• D. Detective control
Answer: C
Rationale: Managerial controls (also called administrative controls) involve policies,
procedures, and training programs that guide employee behavior. Security awareness
training is a classic example of a managerial control designed to reduce human-related
security risks.
6. Which zero trust principle requires that every access request be fully authenticated,
authorized, and encrypted before granting access?
• A. Assume breach
• B. Verify explicitly
• C. Least privilege
• D. Microsegmentation
Answer: B
Rationale: "Verify explicitly" is a core zero trust principle that mandates authentication and
authorization be performed for every access request, regardless of the source or location.
This eliminates implicit trust based on network location.
7. A security team discovers that an employee's account was used to delete critical
files. The employee denies performing the action. Which security principle would
prevent the employee from denying this action?
• A. Confidentiality
• B. Integrity
• C. Availability
• D. Non-repudiation
Answer: D
Rationale: Non-repudiation ensures that an action cannot be denied by the person who
performed it. This is typically achieved through digital signatures, audit logs, and other
mechanisms that provide proof of action.
, 8. Which of the following cryptographic solutions provides the highest assurance that
a message has not been altered during transmission?
• A. Symmetric encryption
• B. Asymmetric encryption
• C. Hashing
• D. Steganography
Answer: C
Rationale: Hashing produces a fixed-length digest of the data; any change to the data
results in a different hash value. This provides integrity verification by allowing the recipient
to compare the hash of the received message with the original hash.
9. A security analyst is reviewing the change management process. Which of the
following is the MOST important reason for maintaining a backout plan?
• A. To reduce the cost of the change
• B. To ensure the change can be reversed if issues occur
• C. To document the change for audit purposes
• D. To obtain approval from management
Answer: B
Rationale: A backout (rollback) plan is essential in change management to restore the
system to its previous state if the change causes unexpected problems or failures. This
ensures business continuity and minimizes disruption.
10. Which of the following best describes the purpose of a gap analysis in security
management?
• A. To identify vulnerabilities in network infrastructure
• B. To compare current security posture against desired security goals
• C. To measure the effectiveness of security controls
• D. To determine the financial impact of a security breach
COMPREHENSIVE PRACTICE QUESTIONS AND STUDY GUIDE
COMPLETE ACCURATE EXAM APPROVED QUESTIONS AND CORRECT DETAILED
ANSWERS WITH RATIONALES
SECTION 1: GENERAL SECURITY CONCEPTS (12% OF EXAM)
1. Which of the following best describes the primary purpose of the CIA triad in
information security?
• A. To ensure that data is stored in three separate geographic locations
• B. To provide a framework for balancing confidentiality, integrity, and availability
• C. To establish three distinct layers of network defense
• D. To mandate the use of three-factor authentication for all systems
Answer: B
Rationale: The CIA triad (Confidentiality, Integrity, Availability) is the foundational security
model that guides security controls and policies. Confidentiality ensures data is accessible
only to authorized parties, integrity ensures data is accurate and unaltered, and availability
ensures data is accessible when needed.
2. A security administrator implements a system that requires users to provide a
password and a fingerprint scan to access sensitive data. Which authentication factor
category does the fingerprint scan represent?
• A. Something you know
• B. Something you have
• C. Something you are
• D. Something you do
Answer: C
Rationale: Biometric factors such as fingerprints, retinal scans, and voice patterns fall
under "something you are," which is a characteristic of the user's physical being.
Passwords are "something you know," and smart cards or tokens are "something you have".
,3. An organization deploys a firewall to block unauthorized network traffic. Which type
of security control is this?
• A. Administrative control
• B. Technical control
• C. Physical control
• D. Operational control
Answer: B
Rationale: Technical controls (also called logical controls) are implemented through
hardware and software systems, such as firewalls, encryption, and access control lists.
Administrative controls include policies and procedures, while physical controls include
barriers and locks.
4. Which of the following security control functions is designed to stop a security
incident before it occurs?
• A. Detective
• B. Corrective
• C. Preventive
• D. Deterrent
Answer: C
Rationale: Preventive controls actively stop security incidents from occurring by blocking
threats or vulnerabilities. Examples include firewalls, intrusion prevention systems, and
access controls. Detective controls identify incidents after they occur, and corrective
controls restore systems after an incident.
5. A company implements a policy requiring all employees to complete annual
security awareness training. This is an example of which type of control?
• A. Technical control
• B. Physical control
, • C. Managerial control
• D. Detective control
Answer: C
Rationale: Managerial controls (also called administrative controls) involve policies,
procedures, and training programs that guide employee behavior. Security awareness
training is a classic example of a managerial control designed to reduce human-related
security risks.
6. Which zero trust principle requires that every access request be fully authenticated,
authorized, and encrypted before granting access?
• A. Assume breach
• B. Verify explicitly
• C. Least privilege
• D. Microsegmentation
Answer: B
Rationale: "Verify explicitly" is a core zero trust principle that mandates authentication and
authorization be performed for every access request, regardless of the source or location.
This eliminates implicit trust based on network location.
7. A security team discovers that an employee's account was used to delete critical
files. The employee denies performing the action. Which security principle would
prevent the employee from denying this action?
• A. Confidentiality
• B. Integrity
• C. Availability
• D. Non-repudiation
Answer: D
Rationale: Non-repudiation ensures that an action cannot be denied by the person who
performed it. This is typically achieved through digital signatures, audit logs, and other
mechanisms that provide proof of action.
, 8. Which of the following cryptographic solutions provides the highest assurance that
a message has not been altered during transmission?
• A. Symmetric encryption
• B. Asymmetric encryption
• C. Hashing
• D. Steganography
Answer: C
Rationale: Hashing produces a fixed-length digest of the data; any change to the data
results in a different hash value. This provides integrity verification by allowing the recipient
to compare the hash of the received message with the original hash.
9. A security analyst is reviewing the change management process. Which of the
following is the MOST important reason for maintaining a backout plan?
• A. To reduce the cost of the change
• B. To ensure the change can be reversed if issues occur
• C. To document the change for audit purposes
• D. To obtain approval from management
Answer: B
Rationale: A backout (rollback) plan is essential in change management to restore the
system to its previous state if the change causes unexpected problems or failures. This
ensures business continuity and minimizes disruption.
10. Which of the following best describes the purpose of a gap analysis in security
management?
• A. To identify vulnerabilities in network infrastructure
• B. To compare current security posture against desired security goals
• C. To measure the effectiveness of security controls
• D. To determine the financial impact of a security breach
