RITY
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
QUESTION: 1
All of the following provide confidentiality protection as part of the underlying protocol
EXCEPT:
A. SSL.
B. SSH.
C. L2TP.
D. IPSeC.
Answer: C
QUESTION: 2
Which of the following allows an attacker to manipulate files by using the least
significant bit(s) to secretly embed data?
A. Steganography
B. Worm
C. Trojan horse
D. Virus
Answer: A
QUESTION: 3
Which of the following type of attacks would allow an attacker to capture HTTP requests
and send back a spoofed page?
A. Teardrop
B. TCP/IP hijacking
C. Phishing
D. Replay
Answer: B
QUESTION: 4
How should a company test the integrity of its backup data?
A. By conducting another backup
B. By using software to recover deleted files
C. By restoring part of the backup
RITY
PTIASY0-201
SECURITY
Page 1QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
,RITY
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
D. By reviewing the written procedures
Answer: C
QUESTION: 5
Which of following can BEST be used to determine the topology of a network and
discover unknown devices?
A. Vulnerability scanner
B. NIPS
C. Protocol analyzer
D. Network mapper
Answer: D
QUESTION: 6
When should a technician perform penetration testing?
A. When the technician suspects that weak passwords exist on the network
B. When the technician is trying to guess passwords on a network
C. When the technician has permission from the owner of the network
D. When the technician is war driving and trying to gain access
Answer: C
QUESTION: 7
An administrator has implemented a new SMTP service on a server. A public IP address
translates to the internal SMTP server. The administrator notices many sessions to the
server, and gets notification that the servers public IP address is now reported in a spam
real-time block list. Which of the following is wrong with the server?
A. SMTP open relaying is enabled.
B. It does not have a spam filter.
C. The amount of sessions needs to be limited.
D. The public IP address is incorrect.
Answer: A
RITY
PTIASY0-201
SECURITY
Page 2QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
,RITY
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
QUESTION: 8
Which of the following is MOST efficient for encrypting large amounts of data?
A. Hashing algorithms
B. Symmetric key algorithms
C. Asymmetric key algorithms
D. ECC algorithms
Answer: B
QUESTION: 9
Which of the following is a reason why a company should disable the SSID broadcast of
the wireless access points?
A. Rogue access points
B. War driving
C. Weak encryption
D. Session hijacking
Answer: B
QUESTION: 10
Which of the following BEST describes ARP?
A. Discovering the IP address of a device from the MAC address
B. Discovering the IP address of a device from the DNS name
C. Discovering the MAC address of a device from the IP address
D. Discovering the DNS name of a device from the IP address
Answer: C
QUESTION: 11
Which of the following would be BEST to use to apply corporate security settings to a
device?
A. A security patch
B. A security hotfix
C. An OS service pack
D. A security template
RITY
PTIASY0-201
SECURITY
Page 3QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
,RITY
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
Answer: D
QUESTION: 12
A small call center business decided to install an email system to facilitate
communications in the office. As part of the upgrade the vendor offered to supply anti-
malware software for a cost of $5,000 per year. The IT manager read there was a 90%
chance each year that workstations would be compromised if not adequately protected. If
workstations are compromised it will take three hours to restore services for the 30 staff.
Staff members in the call center are paid $90 per hour. If the anti-malware software is
purchased, which of the following is the expected net savings?
A. $900
B. $2,290
C. $2,700
D. $5,000b
Answer: B
QUESTION: 13
Which of the following is the main objective of steganography?
A. Message digest
B. Encrypt information
C. Hide information
D. Data integrity
Answer: C
QUESTION: 14
Which of the following would allow for secure key exchange over an unsecured network
without a pre-shared key?
A. 3DES
B. AES
C. DH-ECC
D. MD5
Answer: C
RITY
PTIASY0-201
SECURITY
Page 4QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
QUESTION: 1
All of the following provide confidentiality protection as part of the underlying protocol
EXCEPT:
A. SSL.
B. SSH.
C. L2TP.
D. IPSeC.
Answer: C
QUESTION: 2
Which of the following allows an attacker to manipulate files by using the least
significant bit(s) to secretly embed data?
A. Steganography
B. Worm
C. Trojan horse
D. Virus
Answer: A
QUESTION: 3
Which of the following type of attacks would allow an attacker to capture HTTP requests
and send back a spoofed page?
A. Teardrop
B. TCP/IP hijacking
C. Phishing
D. Replay
Answer: B
QUESTION: 4
How should a company test the integrity of its backup data?
A. By conducting another backup
B. By using software to recover deleted files
C. By restoring part of the backup
RITY
PTIASY0-201
SECURITY
Page 1QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
,RITY
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
D. By reviewing the written procedures
Answer: C
QUESTION: 5
Which of following can BEST be used to determine the topology of a network and
discover unknown devices?
A. Vulnerability scanner
B. NIPS
C. Protocol analyzer
D. Network mapper
Answer: D
QUESTION: 6
When should a technician perform penetration testing?
A. When the technician suspects that weak passwords exist on the network
B. When the technician is trying to guess passwords on a network
C. When the technician has permission from the owner of the network
D. When the technician is war driving and trying to gain access
Answer: C
QUESTION: 7
An administrator has implemented a new SMTP service on a server. A public IP address
translates to the internal SMTP server. The administrator notices many sessions to the
server, and gets notification that the servers public IP address is now reported in a spam
real-time block list. Which of the following is wrong with the server?
A. SMTP open relaying is enabled.
B. It does not have a spam filter.
C. The amount of sessions needs to be limited.
D. The public IP address is incorrect.
Answer: A
RITY
PTIASY0-201
SECURITY
Page 2QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
,RITY
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
QUESTION: 8
Which of the following is MOST efficient for encrypting large amounts of data?
A. Hashing algorithms
B. Symmetric key algorithms
C. Asymmetric key algorithms
D. ECC algorithms
Answer: B
QUESTION: 9
Which of the following is a reason why a company should disable the SSID broadcast of
the wireless access points?
A. Rogue access points
B. War driving
C. Weak encryption
D. Session hijacking
Answer: B
QUESTION: 10
Which of the following BEST describes ARP?
A. Discovering the IP address of a device from the MAC address
B. Discovering the IP address of a device from the DNS name
C. Discovering the MAC address of a device from the IP address
D. Discovering the DNS name of a device from the IP address
Answer: C
QUESTION: 11
Which of the following would be BEST to use to apply corporate security settings to a
device?
A. A security patch
B. A security hotfix
C. An OS service pack
D. A security template
RITY
PTIASY0-201
SECURITY
Page 3QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
,RITY
ND CORRECT
SY0-201
COMPTIA
QUIZ
ANSWERS
SECURITY
QUESTIONS
GRADE
SY0-201
AND
A+.pdfCOMPTIA
CORRECT
QUIZ QUESTIONS
ANSWERS
SECURITY
ANDGRADE
CORRECT
SY0-201
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
QUIZ
ANSWERS
QUESTIONS
GRADE ANDA+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
CORRECT ANSWERS GRADE A
SY0-201
Answer: D
QUESTION: 12
A small call center business decided to install an email system to facilitate
communications in the office. As part of the upgrade the vendor offered to supply anti-
malware software for a cost of $5,000 per year. The IT manager read there was a 90%
chance each year that workstations would be compromised if not adequately protected. If
workstations are compromised it will take three hours to restore services for the 30 staff.
Staff members in the call center are paid $90 per hour. If the anti-malware software is
purchased, which of the following is the expected net savings?
A. $900
B. $2,290
C. $2,700
D. $5,000b
Answer: B
QUESTION: 13
Which of the following is the main objective of steganography?
A. Message digest
B. Encrypt information
C. Hide information
D. Data integrity
Answer: C
QUESTION: 14
Which of the following would allow for secure key exchange over an unsecured network
without a pre-shared key?
A. 3DES
B. AES
C. DH-ECC
D. MD5
Answer: C
RITY
PTIASY0-201
SECURITY
Page 4QUIZ
of SY0-201
220COMPTIA
QUESTIONS
QUIZSECURITY
QUESTIONS
AND CORRECT
SY0-201
ANDANSWERS
CORRECT
QUIZ QUESTIONS
GRADE
ANSWERS
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
AND
GRADE
CORRECT
A+2026/2027!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ANSWERS GRADE A+2026/2027!!!!!!!!!!!!!!!!
