CompTIA Security+ SY0-701 Exam 2026 – 190 Practice Questions
with Answers & Detailed Rationales, Threats & Vulnerabilities,
Security Architecture, Identity & Access Management, Risk
Management, Cryptography & Incident Response
Domain 1: General Security Concepts (12% — 23 Questions)
Question 1
A security administrator is documenting a control that discourages attackers by displaying
warning banners on login screens. Which control type does this represent?
A. Preventive
B. Detective
C. Deterrent
D. Corrective
Correct Answer: C
Explanation: A warning banner discourages attempts without physically stopping them; this
is the definition of a deterrent control.
Question 2
Which principle ensures that a user cannot later deny having performed a specific action?
A. Confidentiality
B. Integrity
C. Non-repudiation
D. Availability
Correct Answer: C
Explanation: Non-repudiation provides proof of origin and integrity, preventing a party from
denying an action, typically via digital signatures.
Question 3
A company wants to implement a system where users authenticate once and access multiple
applications without re-entering credentials. Which concept applies?
,A. Federation
B. Single Sign-On
C. Multifactor Authentication
D. Privileged Access Management
Correct Answer: B
Explanation: Single Sign-On (SSO) allows one authentication event to grant access to
multiple trusted applications within a single organization.
Question 4
An organization implements a security model that assumes no implicit trust, even inside the
network perimeter. Which concept is this?
A. Defense in depth
B. Zero Trust
C. Least privilege
D. Separation of duties
Correct Answer: B
Explanation: Zero Trust verifies every access request regardless of source location,
eliminating implicit trust based on network position.
Question 5
A company deploys a honeypot to detect attackers and study their techniques. This is an
example of which technology?
A. Deception
B. Disruption
C. Isolation
D. Segmentation
Correct Answer: A
Explanation: Deception technologies like honeypots lure attackers into controlled
environments to observe tactics and alert defenders.
Question 6
Which control category best describes a security awareness training program?
,A. Technical
B. Managerial
C. Operational
D. Physical
Correct Answer: B
Explanation: Managerial controls are administrative actions focused on managing risk and
personnel behavior, including training programs.
Question 7
A hash function produces a fixed-length output. Which property does this primarily support?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
Correct Answer: B
Explanation: Hashing supports integrity by producing a unique digest; any input change
alters the output, detecting tampering.
Question 8
In a public key infrastructure, what is the primary role of a certificate authority?
A. Encrypt all network traffic
B. Issue and sign digital certificates
C. Store private keys for users
D. Revoke access after termination
Correct Answer: B
Explanation: A CA validates identities and issues digitally signed certificates binding public
keys to entities.
Question 9
Which cryptographic technique hides data within another file to avoid detection?
A. Encryption
B. Hashing
, C. Steganography
D. Obfuscation
Correct Answer: C
Explanation: Steganography conceals the existence of data by embedding it within images,
audio, or other carrier files.
Question 10
A blockchain provides which security property by design?
A. Confidentiality
B. Immutability
C. Availability
D. Anonymity
Correct Answer: B
Explanation: Blockchain's distributed ledger and cryptographic chaining create tamper-
evident, immutable records.
Question 11
What does the AAA framework stand for?
A. Authentication, Authorization, Accounting
B. Access, Audit, Assessment
C. Authorization, Audit, Availability
D. Authentication, Access, Assurance
Correct Answer: A
Explanation: AAA encompasses Authentication (identity verification), Authorization
(permission granting), and Accounting (activity logging).
Question 12
A security team implements a change management process. Which primary security benefit
does this provide?
A. Faster incident response
B. Reduced risk of unintended outages or vulnerabilities
C. Increased encryption strength
D. Improved user productivity
with Answers & Detailed Rationales, Threats & Vulnerabilities,
Security Architecture, Identity & Access Management, Risk
Management, Cryptography & Incident Response
Domain 1: General Security Concepts (12% — 23 Questions)
Question 1
A security administrator is documenting a control that discourages attackers by displaying
warning banners on login screens. Which control type does this represent?
A. Preventive
B. Detective
C. Deterrent
D. Corrective
Correct Answer: C
Explanation: A warning banner discourages attempts without physically stopping them; this
is the definition of a deterrent control.
Question 2
Which principle ensures that a user cannot later deny having performed a specific action?
A. Confidentiality
B. Integrity
C. Non-repudiation
D. Availability
Correct Answer: C
Explanation: Non-repudiation provides proof of origin and integrity, preventing a party from
denying an action, typically via digital signatures.
Question 3
A company wants to implement a system where users authenticate once and access multiple
applications without re-entering credentials. Which concept applies?
,A. Federation
B. Single Sign-On
C. Multifactor Authentication
D. Privileged Access Management
Correct Answer: B
Explanation: Single Sign-On (SSO) allows one authentication event to grant access to
multiple trusted applications within a single organization.
Question 4
An organization implements a security model that assumes no implicit trust, even inside the
network perimeter. Which concept is this?
A. Defense in depth
B. Zero Trust
C. Least privilege
D. Separation of duties
Correct Answer: B
Explanation: Zero Trust verifies every access request regardless of source location,
eliminating implicit trust based on network position.
Question 5
A company deploys a honeypot to detect attackers and study their techniques. This is an
example of which technology?
A. Deception
B. Disruption
C. Isolation
D. Segmentation
Correct Answer: A
Explanation: Deception technologies like honeypots lure attackers into controlled
environments to observe tactics and alert defenders.
Question 6
Which control category best describes a security awareness training program?
,A. Technical
B. Managerial
C. Operational
D. Physical
Correct Answer: B
Explanation: Managerial controls are administrative actions focused on managing risk and
personnel behavior, including training programs.
Question 7
A hash function produces a fixed-length output. Which property does this primarily support?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
Correct Answer: B
Explanation: Hashing supports integrity by producing a unique digest; any input change
alters the output, detecting tampering.
Question 8
In a public key infrastructure, what is the primary role of a certificate authority?
A. Encrypt all network traffic
B. Issue and sign digital certificates
C. Store private keys for users
D. Revoke access after termination
Correct Answer: B
Explanation: A CA validates identities and issues digitally signed certificates binding public
keys to entities.
Question 9
Which cryptographic technique hides data within another file to avoid detection?
A. Encryption
B. Hashing
, C. Steganography
D. Obfuscation
Correct Answer: C
Explanation: Steganography conceals the existence of data by embedding it within images,
audio, or other carrier files.
Question 10
A blockchain provides which security property by design?
A. Confidentiality
B. Immutability
C. Availability
D. Anonymity
Correct Answer: B
Explanation: Blockchain's distributed ledger and cryptographic chaining create tamper-
evident, immutable records.
Question 11
What does the AAA framework stand for?
A. Authentication, Authorization, Accounting
B. Access, Audit, Assessment
C. Authorization, Audit, Availability
D. Authentication, Access, Assurance
Correct Answer: A
Explanation: AAA encompasses Authentication (identity verification), Authorization
(permission granting), and Accounting (activity logging).
Question 12
A security team implements a change management process. Which primary security benefit
does this provide?
A. Faster incident response
B. Reduced risk of unintended outages or vulnerabilities
C. Increased encryption strength
D. Improved user productivity
