Β πŸ””If you experience any difficulties before or after finalizing your order, please reach out to us through email at support@ciscoforall.com

SY0-701 CompTIA Security+ Free Practice Questions and Answers

in CompTia

CompTIA SY0-701 Security+ Exam Questions

Last updated on Nov 1, 2026.

1013 Questions & Answers

Continue with free SY0-701 CompTIA Security+ practice questions and answers. Review questions 16–20 and check your understanding. Select Reveal Solution after choosing your answer.

Question #16Topic: CompTIA Security+

A company has redundant switches but can afford only one ISP connection. What risk does this create?

  • A. The equipment MTBF is unknown
  • B. The ISP has no SLA
  • C. An RPO has not been determined
  • D. There is a single point of failure
Reveal Solution
Correct Answer: D
The single ISP connection remains a point whose failure can interrupt external connectivity.
Question #17Topic: CompTIA Security+

A team isolates an end-of-life server on a restricted VLAN reachable only by approved devices. Which two control types describe this approach? (Choose two.)

  • A. Managerial
  • B. Physical
  • C. Corrective
  • D. Detective
  • E. Compensating
  • F. Technical
  • G. Deterrent
Reveal Solution
Correct Answer: E and F
Network segmentation is a technical control, and it compensates for the risk of continuing to operate an end-of-life server.
Question #18Topic: CompTIA Security+

What is the term for risk that remains after security controls and mitigations have been applied?

  • A. Residual risk
  • B. Avoided risk
  • C. Inherent risk
  • D. Operational risk
Reveal Solution
Correct Answer: A
Residual risk is the remaining risk after controls have reduced the original exposure.
Question #19Topic: CompTIA Security+

Which option is an example of an MFA factor?

  • A. Something you exhibit
  • B. Something you have
  • C. Somewhere you are
  • D. Someone you know
Reveal Solution
Correct Answer: B
A possession factor is something the user has, such as a hardware token or registered device.
Question #20Topic: CompTIA Security+

A password policy failed to prevent compromise from easy-to-guess passwords. Which two changes would best reduce the likelihood of recurrence? (Choose two.)

  • A. Increase the minimum password length to 14 characters
  • B. Upgrade password hashing from MD5 to SHA-512
  • C. Increase the maximum password age to 120 days
  • D. Reduce the minimum password length to 10 characters
  • E. Reduce the minimum password age to zero days
  • F. Require at least one special character
Reveal Solution
Correct Answer: A and F
Longer passwords and a broader character set make guessing more difficult.
Get the Full Question Set

Get all 1013 questions and answers in the Premium PDF.

Order Premium PDF β†’

Cart (0)

  • Your cart is empty.