CompTIA Security+ QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
Domain 1: General Security Concepts (1.0) — Questions 1–12
1. Which principle states that users should be given only the access necessary to perform their job?
,A) Separation of duties
B) Least privilege
C) Defense in depth
D) Zero Trust
Answer: B
*Rationale:* Least privilege limits rights to the minimum required. Separation of duties splits critical tasks among
multiple people; defense in depth layers controls; Zero Trust is a broader "never trust, always verify" model.
2. A company requires two administrators to approve a wire transfer. Which concept is this?
A) Least privilege
B) Job rotation
C) Separation of duties
D) Mandatory vacation
Answer: C
*Rationale:* Splitting a sensitive task between two people prevents fraud by one individual. Job rotation and
mandatory vacation are detective/fraud-deterrent controls, not the same as splitting one transaction.
3. Which control type is a security guard?
,A) Preventive
B) Detective
C) Corrective
D) Compensating
Answer: A
*Rationale:* A guard deters and prevents physical access. Detective controls (e.g., CCTV review) identify events
after the fact.
4. Which of the following is a deterrent control?
A) Warning banner
B) Firewall
C) Backup restore
D) Log review
Answer: A
*Rationale:* A warning banner discourages attempts. Firewall = preventive, restore = corrective, log review =
detective.
5. In Zero Trust, what is the core concept?
, A) Trust internal network by default
B) Never trust, always verify
C) Only trust authenticated users forever
D) Trust based on IP address
Answer: B
*Rationale:* Zero Trust assumes no implicit trust based on network location and continuously verifies every
request.
6. Which is an example of multifactor authentication?
A) Password + PIN
B) Password + fingerprint
C) Two passwords
D) PIN + security question
Answer: B
*Rationale:* MFA requires different factor categories. Password and PIN are both "something you know";
fingerprint is "something you are."
7. A user's fingerprint is which authentication factor?
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
Domain 1: General Security Concepts (1.0) — Questions 1–12
1. Which principle states that users should be given only the access necessary to perform their job?
,A) Separation of duties
B) Least privilege
C) Defense in depth
D) Zero Trust
Answer: B
*Rationale:* Least privilege limits rights to the minimum required. Separation of duties splits critical tasks among
multiple people; defense in depth layers controls; Zero Trust is a broader "never trust, always verify" model.
2. A company requires two administrators to approve a wire transfer. Which concept is this?
A) Least privilege
B) Job rotation
C) Separation of duties
D) Mandatory vacation
Answer: C
*Rationale:* Splitting a sensitive task between two people prevents fraud by one individual. Job rotation and
mandatory vacation are detective/fraud-deterrent controls, not the same as splitting one transaction.
3. Which control type is a security guard?
,A) Preventive
B) Detective
C) Corrective
D) Compensating
Answer: A
*Rationale:* A guard deters and prevents physical access. Detective controls (e.g., CCTV review) identify events
after the fact.
4. Which of the following is a deterrent control?
A) Warning banner
B) Firewall
C) Backup restore
D) Log review
Answer: A
*Rationale:* A warning banner discourages attempts. Firewall = preventive, restore = corrective, log review =
detective.
5. In Zero Trust, what is the core concept?
, A) Trust internal network by default
B) Never trust, always verify
C) Only trust authenticated users forever
D) Trust based on IP address
Answer: B
*Rationale:* Zero Trust assumes no implicit trust based on network location and continuously verifies every
request.
6. Which is an example of multifactor authentication?
A) Password + PIN
B) Password + fingerprint
C) Two passwords
D) PIN + security question
Answer: B
*Rationale:* MFA requires different factor categories. Password and PIN are both "something you know";
fingerprint is "something you are."
7. A user's fingerprint is which authentication factor?
