CompTIA SY0-701 Security+ Exam Questions
1013 Questions & Answers
Practice free SY0-701 Security+ questions and answers covering vulnerability management, mobile security, incident response and system hardening. Select Reveal Solution after choosing your answer.
After a vulnerability scan, an administrator finds that a reported vulnerability is not actually present on the scanned systems. What does this represent?
Reveal Solution
A false positive occurs when a scan reports a vulnerability that is not present.
A penetration test shows that an attacker could flood network switches’ MAC address tables. Which control best mitigates this attack?
Reveal Solution
Port security limits which MAC addresses can use a switch port, helping prevent MAC table flooding.
A smartphone user wants to remove manufacturer restrictions so unauthorized software and additional features can be installed. Which process enables this?
Reveal Solution
Jailbreaking removes restrictions imposed by the device manufacturer or operating system, allowing unsupported changes and apps.
Which incident-response phase includes producing reports and documenting lessons from the incident?
Reveal Solution
The lessons-learned phase reviews the incident, documents findings, and produces reports to improve future response.
Which method is most likely to help an organization identify legacy systems with known weaknesses?
Reveal Solution
Vulnerability scans identify known weaknesses and outdated software, helping teams locate legacy systems.