SY0-701 CompTIA Security+ Free Practice Questions and Answers

Remote employees need secure access to company resources while avoiding interception of their traffic. Which solution is most appropriate?

• A. Proxy server
• B. Next-generation firewall
• C. Virtual private network (VPN)
• D. Security zone

A public e-commerce site accepts PDF uploads from customers. What should a security analyst recommend to detect malicious files at the network gateway?

• A. Use attack signatures in an IDS
• B. Enable malware detection through a unified threat management (UTM) device
• C. Limit affected servers with a load balancer
• D. Block command injection with a WAF

A security analyst writes a script to automate a simple, repeatable task. Why should other team members understand how the script works?

• A. To reduce implementation cost
• B. To identify complexity
• C. To remediate technical debt
• D. To prevent a single point of failure

Which two steps are appropriate when hardening a server before deployment? (Choose two.)

• A. Disable default accounts
• B. Add the server to the asset inventory
• C. Remove unnecessary services
• D. Document default passwords
• E. Send server logs to the SIEM
• F. Join the server to the corporate domain

Human resources needs to track multiple revisions to an IT contractor agreement. Which process should it use?

• A. Version validation
• B. Version changes
• C. Version updates
• D. Version control