CompTIA Security+ SY0-701 Practice Exam (300
Questions) 2026/2027 – Verified Q&As with
Detailed Rationales (Test Bank Bundle - 81
Questions)
---
**QUESTION 1:**
An organization is implementing a new web application firewall. This is an example of which type of
security control?
A) Administrative control
B) Technical control
C) Physical control
D) Deterrent control
> 🎯 **CORRECT ANSWER:** B) Technical control
> 💡 **CLINICAL RATIONALE:** WAF is a hardware/software technical control.
---
**QUESTION 2:**
Which of the following best describes the principle of least privilege?
A) All users have full access
B) Users get minimal necessary permissions
C) All users are admins
D) Access based on seniority
> 🎯 **CORRECT ANSWER:** B) Users get minimal necessary permissions
> 💡 **CLINICAL RATIONALE:** Limits damage from errors or compromise.
---
,**QUESTION 3:**
A user receives a deceptive email that appears to come from their bank. This is an example of which
type of attack?
A) Phishing
B) Vishing
C) Smishing
D) Tailgating
> 🎯 **CORRECT ANSWER:** A) Phishing
> 💡 **CLINICAL RATIONALE:** Email-based social engineering attack.
---
**QUESTION 4:**
Which of the following is a symmetric encryption algorithm?
A) RSA
B) AES
C) ECC
D) DSA
> 🎯 **CORRECT ANSWER:** B) AES
> 💡 **CLINICAL RATIONALE:** AES uses a shared secret key.
---
**QUESTION 5:**
The process of converting plaintext into ciphertext is called:
A) Decryption
B) Encoding
C) Encryption
D) Hashing
> 🎯 **CORRECT ANSWER:** C) Encryption
> 💡 **CLINICAL RATIONALE:** Encryption scrambles data for confidentiality.
, ---
**QUESTION 6:**
Which type of malware is self-replicating and spreads over a network?
A) Virus
B) Trojan
C) Worm
D) Spyware
> 🎯 **CORRECT ANSWER:** C) Worm
> 💡 **CLINICAL RATIONALE:** Worms propagate without user action.
---
**QUESTION 7:**
A SYN flood attack is a type of:
A) DoS attack
B) Brute force attack
C) Spoofing attack
D) Man-in-the-middle attack
> 🎯 **CORRECT ANSWER:** A) DoS attack
> 💡 **CLINICAL RATIONALE:** SYN flood exhausts server resources.
---
**QUESTION 8:**
Which protocol is used for secure remote access to a server?
A) Telnet
B) SSH
C) FTP
D) HTTP
Questions) 2026/2027 – Verified Q&As with
Detailed Rationales (Test Bank Bundle - 81
Questions)
---
**QUESTION 1:**
An organization is implementing a new web application firewall. This is an example of which type of
security control?
A) Administrative control
B) Technical control
C) Physical control
D) Deterrent control
> 🎯 **CORRECT ANSWER:** B) Technical control
> 💡 **CLINICAL RATIONALE:** WAF is a hardware/software technical control.
---
**QUESTION 2:**
Which of the following best describes the principle of least privilege?
A) All users have full access
B) Users get minimal necessary permissions
C) All users are admins
D) Access based on seniority
> 🎯 **CORRECT ANSWER:** B) Users get minimal necessary permissions
> 💡 **CLINICAL RATIONALE:** Limits damage from errors or compromise.
---
,**QUESTION 3:**
A user receives a deceptive email that appears to come from their bank. This is an example of which
type of attack?
A) Phishing
B) Vishing
C) Smishing
D) Tailgating
> 🎯 **CORRECT ANSWER:** A) Phishing
> 💡 **CLINICAL RATIONALE:** Email-based social engineering attack.
---
**QUESTION 4:**
Which of the following is a symmetric encryption algorithm?
A) RSA
B) AES
C) ECC
D) DSA
> 🎯 **CORRECT ANSWER:** B) AES
> 💡 **CLINICAL RATIONALE:** AES uses a shared secret key.
---
**QUESTION 5:**
The process of converting plaintext into ciphertext is called:
A) Decryption
B) Encoding
C) Encryption
D) Hashing
> 🎯 **CORRECT ANSWER:** C) Encryption
> 💡 **CLINICAL RATIONALE:** Encryption scrambles data for confidentiality.
, ---
**QUESTION 6:**
Which type of malware is self-replicating and spreads over a network?
A) Virus
B) Trojan
C) Worm
D) Spyware
> 🎯 **CORRECT ANSWER:** C) Worm
> 💡 **CLINICAL RATIONALE:** Worms propagate without user action.
---
**QUESTION 7:**
A SYN flood attack is a type of:
A) DoS attack
B) Brute force attack
C) Spoofing attack
D) Man-in-the-middle attack
> 🎯 **CORRECT ANSWER:** A) DoS attack
> 💡 **CLINICAL RATIONALE:** SYN flood exhausts server resources.
---
**QUESTION 8:**
Which protocol is used for secure remote access to a server?
A) Telnet
B) SSH
C) FTP
D) HTTP
