2025 COMPATIA Security + SYO 701 Actual Exam with All 90 Questions, 100% Correct Answers and Rationales

2025 COMPATIA Security + SYO 701 Actual Exam
with All 90 Questions, 100% Correct Answers and
Rationales
Question 1
Which security concept ensures that data is only accessible to authorized users?
A) Integrity
B) Confidentiality
C) Availability
D) Non-repudiation
Correct Answer: B) Confidentiality
Rationale: Confidentiality ensures data is protected from unauthorized access, aligning with the
CIA triad. Integrity ensures data accuracy, availability ensures access, and non-repudiation
proves actions.

Question 2
What type of attack involves overwhelming a server with traffic to disrupt service?
A) Phishing
B) Denial-of-Service (DoS)
C) Man-in-the-Middle (MitM)
D) SQL Injection
Correct Answer: B) Denial-of-Service (DoS)
Rationale: A DoS attack floods a target with traffic to deny legitimate access. Phishing steals
credentials, MitM intercepts data, and SQL injection targets databases.

Question 3
Which vulnerability is mitigated by regularly applying software updates?
A) Weak passwords
B) Known exploits
C) Social engineering
D) Misconfigured firewalls
Correct Answer: B) Known exploits
Rationale: Software updates (patches) fix known vulnerabilities exploited by attackers.
Passwords, social engineering, and firewalls require separate mitigations.

Question 4
What is the purpose of a firewall in a network?
A) Encrypt data
B) Filter traffic based on rules
C) Authenticate users
D) Detect malware
Correct Answer: B) Filter traffic based on rules
Rationale: Firewalls control network traffic using predefined rules. Encryption is for VPNs,
authentication for identity systems, and malware detection for antivirus.

,Question 5
Which encryption standard is commonly used to secure wireless networks?
A) WPA3
B) DES
C) MD5
D) RSA
Correct Answer: A) WPA3
Rationale: WPA3 (Wi-Fi Protected Access 3) is the current standard for securing wireless
networks. DES is outdated, MD5 is a hash, and RSA is for asymmetric encryption.

Question 6
What is a key benefit of multifactor authentication (MFA)?
A) Reduces hardware costs
B) Increases security by requiring multiple credentials
C) Simplifies user login
D) Prevents software vulnerabilities
Correct Answer: B) Increases security by requiring multiple credentials
Rationale: MFA enhances security by combining factors (e.g., password, token). It doesn’t
reduce costs, simplify login, or address software flaws.

Question 7
Which type of malware encrypts files and demands payment for decryption?
A) Worm
B) Trojan
C) Ransomware
D) Spyware
Correct Answer: C) Ransomware
Rationale: Ransomware locks files and demands ransom (e.g., WannaCry). Worms self-replicate,
trojans disguise, and spyware steals data.

Question 8
What is the primary function of an intrusion detection system (IDS)?
A) Block malicious traffic
B) Monitor and alert on suspicious activity
C) Encrypt network traffic
D) Authenticate users
Correct Answer: B) Monitor and alert on suspicious activity
Rationale: An IDS detects and alerts on potential threats. Blocking is for IPS, encryption for
VPNs, and authentication for access controls.

Question 9
Which protocol secures data transmission over the internet?
A) HTTP
B) FTP
C) TLS

, D) SNMP
Correct Answer: C) TLS
Rationale: Transport Layer Security (TLS) encrypts data (e.g., HTTPS). HTTP is unsecure, FTP
transfers files, and SNMP manages devices.

Question 10
What is a common mitigation for phishing attacks?
A) Firewall rules
B) User training
C) Patch management
D) Network segmentation
Correct Answer: B) User training
Rationale: Training users to recognize phishing emails is the most effective defense. Firewalls,
patches, and segmentation address other threats.

Question 11
Which security architecture component isolates sensitive data from the public internet?
A) VLAN
B) DMZ
C) VPN
D) NAC
Correct Answer: B) DMZ
Rationale: A demilitarized zone (DMZ) separates public-facing servers from internal networks.
VLANs segment internally, VPNs encrypt, and NAC controls access.

Question 12
What indicates a potential insider threat?
A) Unusual login times from an employee
B) Failed login attempts from an external IP
C) Increased network latency
D) Expired SSL certificate
Correct Answer: A) Unusual login times from an employee
Rationale: Anomalous behavior (e.g., odd hours) from an insider suggests a threat. External
attempts, latency, and certificates point elsewhere.

Question 13
Which tool is used to assess vulnerabilities in a network?
A) SIEM
B) Nessus
C) Wireshark
D) Nmap
Correct Answer: B) Nessus
Rationale: Nessus is a vulnerability scanner. SIEM analyzes logs, Wireshark captures packets,
and Nmap maps networks.

Question 14