CompTIA Security+ Certification Exam
(SY0-701 Series) Questions And Correct
Answers (Verified Answers) Plus
Rationales 2026 Q&A | Instant
Download Pdf
Question 1
A company wants to ensure that data transmitted over an untrusted network
cannot be read by attackers. Which security control should be implemented?
A. Data masking
B. Encryption
C. Tokenization
D. DLP
Answer: B. Encryption
Rationale: Encryption protects data in transit by converting plaintext into
ciphertext using cryptographic algorithms, making it unreadable to
unauthorized parties. Data masking and tokenization protect data at rest or in
specific contexts, while DLP focuses on preventing data exfiltration rather than
securing transmission confidentiality.
Question 2
Which of the following BEST describes the principle of least privilege?
A. Users should have admin rights for efficiency
B. Users should access only what they need to perform their job
,C. All users should share the same access level
D. Access should never be revoked once granted
Answer: B. Users should access only what they need to perform their job
Rationale: Least privilege ensures users are granted only the minimum
permissions necessary, reducing attack surface and limiting damage from
compromised accounts. Admin-level access for all users or static unrestricted
access significantly increases security risk.
Question 3
Which attack involves intercepting and altering communication between two
parties without their knowledge?
A. Phishing
B. Man-in-the-Middle
C. SQL Injection
D. Brute force
Answer: B. Man-in-the-Middle
Rationale: A Man-in-the-Middle (MITM) attack occurs when an attacker secretly
relays and possibly alters communication between two parties. The victim
believes they are communicating directly, while the attacker intercepts the data
stream.
Question 4
What is the primary purpose of a firewall?
A. Encrypt data
B. Monitor user behavior
C. Filter network traffic based on rules
D. Detect malware signatures
,Answer: C. Filter network traffic based on rules
Rationale: Firewalls enforce access control policies by allowing or blocking traffic
based on defined rulesets. While advanced firewalls may include IDS/IPS
features, their core function is traffic filtering.
Question 5
Which of the following is an example of multifactor authentication?
A. Password only
B. PIN and password
C. Password and fingerprint
D. Username and password
Answer: C. Password and fingerprint
Rationale: Multifactor authentication requires two or more different
authentication factors such as something you know (password) and something
you are (biometrics like fingerprint). PIN and password are both knowledge
factors, so they do not qualify.
Question 6
Which vulnerability is exploited in SQL injection attacks?
A. Weak encryption
B. Improper input validation
C. Open ports
D. Misconfigured firewall
Answer: B. Improper input validation
Rationale: SQL injection occurs when user input is not properly validated or
sanitized, allowing attackers to inject malicious SQL queries into backend
databases. Proper input validation prevents such unauthorized commands.
, Question 7
What is the main purpose of a SIEM system?
A. Encrypt cloud storage
B. Centralize log collection and analysis
C. Replace antivirus software
D. Manage user passwords
Answer: B. Centralize log collection and analysis
Rationale: Security Information and Event Management (SIEM) systems
aggregate logs from multiple sources and analyze them to detect suspicious
activity, support incident response, and ensure compliance.
Question 8
Which protocol is used for secure remote login?
A. FTP
B. Telnet
C. SSH
D. HTTP
Answer: C. SSH
Rationale: Secure Shell (SSH) provides encrypted communication for remote
administration. Telnet transmits data in plaintext, making it insecure.
Question 9
What type of malware encrypts files and demands payment for decryption?
A. Worm
B. Trojan
C. Ransomware
D. Rootkit
(SY0-701 Series) Questions And Correct
Answers (Verified Answers) Plus
Rationales 2026 Q&A | Instant
Download Pdf
Question 1
A company wants to ensure that data transmitted over an untrusted network
cannot be read by attackers. Which security control should be implemented?
A. Data masking
B. Encryption
C. Tokenization
D. DLP
Answer: B. Encryption
Rationale: Encryption protects data in transit by converting plaintext into
ciphertext using cryptographic algorithms, making it unreadable to
unauthorized parties. Data masking and tokenization protect data at rest or in
specific contexts, while DLP focuses on preventing data exfiltration rather than
securing transmission confidentiality.
Question 2
Which of the following BEST describes the principle of least privilege?
A. Users should have admin rights for efficiency
B. Users should access only what they need to perform their job
,C. All users should share the same access level
D. Access should never be revoked once granted
Answer: B. Users should access only what they need to perform their job
Rationale: Least privilege ensures users are granted only the minimum
permissions necessary, reducing attack surface and limiting damage from
compromised accounts. Admin-level access for all users or static unrestricted
access significantly increases security risk.
Question 3
Which attack involves intercepting and altering communication between two
parties without their knowledge?
A. Phishing
B. Man-in-the-Middle
C. SQL Injection
D. Brute force
Answer: B. Man-in-the-Middle
Rationale: A Man-in-the-Middle (MITM) attack occurs when an attacker secretly
relays and possibly alters communication between two parties. The victim
believes they are communicating directly, while the attacker intercepts the data
stream.
Question 4
What is the primary purpose of a firewall?
A. Encrypt data
B. Monitor user behavior
C. Filter network traffic based on rules
D. Detect malware signatures
,Answer: C. Filter network traffic based on rules
Rationale: Firewalls enforce access control policies by allowing or blocking traffic
based on defined rulesets. While advanced firewalls may include IDS/IPS
features, their core function is traffic filtering.
Question 5
Which of the following is an example of multifactor authentication?
A. Password only
B. PIN and password
C. Password and fingerprint
D. Username and password
Answer: C. Password and fingerprint
Rationale: Multifactor authentication requires two or more different
authentication factors such as something you know (password) and something
you are (biometrics like fingerprint). PIN and password are both knowledge
factors, so they do not qualify.
Question 6
Which vulnerability is exploited in SQL injection attacks?
A. Weak encryption
B. Improper input validation
C. Open ports
D. Misconfigured firewall
Answer: B. Improper input validation
Rationale: SQL injection occurs when user input is not properly validated or
sanitized, allowing attackers to inject malicious SQL queries into backend
databases. Proper input validation prevents such unauthorized commands.
, Question 7
What is the main purpose of a SIEM system?
A. Encrypt cloud storage
B. Centralize log collection and analysis
C. Replace antivirus software
D. Manage user passwords
Answer: B. Centralize log collection and analysis
Rationale: Security Information and Event Management (SIEM) systems
aggregate logs from multiple sources and analyze them to detect suspicious
activity, support incident response, and ensure compliance.
Question 8
Which protocol is used for secure remote login?
A. FTP
B. Telnet
C. SSH
D. HTTP
Answer: C. SSH
Rationale: Secure Shell (SSH) provides encrypted communication for remote
administration. Telnet transmits data in plaintext, making it insecure.
Question 9
What type of malware encrypts files and demands payment for decryption?
A. Worm
B. Trojan
C. Ransomware
D. Rootkit
