Comptia Security+ (SY0-601) Questions
and Correct Answers/ Latest Update /
Already Graded
CIA Triad
Ans: Confidentially, Integrity and Availability.
Least privilege /Need-to-know basis
Ans: Giving someone the most limited access required to so
they can perform their job.
Defence in Depth
Ans: Protecting a company's data with a series of protective
layers.
Annual Risk Assessment
Ans: A risk register where the financial director will look at all
of the risks associated with money and the IT manager will look
at all of the risks posed.
Annual Security Awareness Training
All rights reserved © 2025/ 2026 |
, Page |2
Ans: Where you are reminded about what you should be doing
on a daily basis to keep the company safe.
Change Advisory Board (CAB)
Ans: Assists with the prioritisation of changes.
Business Continuity Plan (BCP)
Ans: Contingency planning to keep the business up and
running when a disaster occurs, by identifying single points of
failure.
Firewall Rule
Ans: A rule in the firewall specifying if a connection is allowed
or denied.
Antivirus/Antimalware
Ans: Software or hardware that protects against or removes
malicious software.
Screen Saver
Ans: A feature that logs computers off when they are idle.
All rights reserved © 2025/ 2026 |
, Page |3
Screen Filter
Ans: A device which prevents people from viewing your screen,
while they are walking past.
Closed Circuit Television (CCTV)
Ans: Equipment used to record events through cameras and or
sensors.
Log Files
Ans: Text files that record events and times that occur.
Write-Once Read-Many Drive (WORM)
Ans: A hard drive that can only be written to once, but read
many times.
Fire Suppression System
Ans: An oxygen suppressant system that starves a fire to
prevent damage to equipment.
All rights reserved © 2025/ 2026 |
, Page |4
Disable User Accounts
Ans: When someones leaves a company, their account is
disabled and password changed immediately.
Operating System Hardening
Ans: The operating system is fully patched, all unused features
and services are disabled.
Identification (Access Controls)
Ans: An identifying piece of information such as a number or
list of characters.
Security Identifier (SID)
Ans: An identifier, that is tied to an account.
Authentication (Access Controls)
Ans: The person making the request, is who th ey say they are.
Authorisation (Access Controls)
Ans: The amount of access given to a user.
All rights reserved © 2025/ 2026 |