CompTIA SY0-701 Exam Prep
CompTIA Security+ (Page 30 )

Updated On: 7-Sep-2026

A company is developing a critical system for the government and storing project information on a fileshare.
Which of the following describes how this data will most likely be classified? (Choose two.)

  1. Private
  2. Confidential
  3. Public
  4. Operational
  5. Urgent
  6. Restricted

Answer(s): B,F

Explanation:

Since the company is developing a critical system for the government, project information would likely be classified as Confidential to prevent unauthorized access and maintain secrecy, and Restricted to limit access strictly to authorized personnel only, given the sensitivity and importance of government-related work.



Which of the following activities is included in the post-incident review phase?

  1. Determining the root cause of the incident
  2. Developing steps to mitigate the risks of the incident
  3. Validating the accuracy of the evidence collected during the investigation
  4. Reestablishing the compromised system’s configuration and settings

Answer(s): A

Explanation:

During the post-incident review, the team analyzes the incident to understand its root cause. This phase is focused on learning from the incident, identifying vulnerabilities, and implementing improvements to prevent similar future incidents.



Which of the following attacks exploits a potential vulnerability as a result of using weak cryptographic algorithms?

  1. Password cracking
  2. On-path
  3. Digital signing
  4. Side-channel

Answer(s): A

Explanation:

Weak cryptographic algorithms make it easier for attackers to crack passwords by using techniques such as brute-force or dictionary attacks.
When encryption algorithms are weak, they produce predictable patterns or can be processed faster, allowing attackers to break the encryption and recover sensitive information, such as passwords, more easily.



Which of the following is a preventive physical security control?

  1. Video surveillance system
  2. Bollards
  3. Alarm system
  4. Motion sensors

Answer(s): B

Explanation:

Bollards are physical barriers that prevent unauthorized vehicle access to certain areas, helping to protect a facility by physically blocking entry. Unlike detection-focused controls like video surveillance, alarms, and motion sensors, bollards serve as a proactive, preventive measure by stopping threats before they can reach the facility.



Which of the following is most likely to be used as a just-in-time reference document within a security operations center?

  1. Change management policy
  2. Risk profile
  3. Playbook
  4. SIEM profile

Answer(s): C

Explanation:

A playbook provides step-by-step procedures for responding to specific types of security incidents, making it an essential just-in-time reference during active incidents. SOC analysts rely on playbooks to quickly access instructions and guidance for consistent and effective response actions.



Viewing page 30 of 198
Viewing questions 146 - 150 out of 985 questions


Post your Comments and Discuss CompTIA SY0-701 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!