CompTIA : Security+

A help desk ticket asks a user for their password to “unlock payroll.” What is this?

• A. A legitimate break-glass procedure
• B. Social engineering
• C. A certificate pinning failure
• D. A VLAN hop

Which control is preventive rather than detective?

• A. A SIEM alert after a breach
• B. A deny-by-default firewall rule
• C. A post-incident report
• D. A monthly access review that happens after the quarter ends

Which TWO actions belong in an incident response process after confirmation?

• A. Contain the affected systems
• B. Preserve evidence according to policy
• C. Delete all logs so attackers cannot read them
• D. Post credentials in a public chat for speed

A laptop is stolen. Disk encryption was on. What risk is most reduced?

• A. Availability of the office Wi-Fi
• B. Confidentiality of data at rest on the disk
• C. Integrity of SaaS configurations in another tenant
• D. Physical safety of the building generators

Which authentication factor is “something you have”?

• A. A password
• B. A hardware OTP token
• C. Your mother’s middle name
• D. A favorite color

Developers store API keys in a public Git repository. What should happen first?

• A. Leave the keys; security through obscurity is enough
• B. Revoke and rotate the exposed keys
• C. Grant the keys AdministratorAccess so rotation is unnecessary
• D. Disable MFA on the related accounts

Which backup strategy best survives ransomware that encrypts primary file shares?

• A. A second folder on the same encrypted volume
• B. Offline or immutable backups tested for restore
• C. Emailing ZIP files to a personal account
• D. Disabling logs to save disk

Select TWO examples of least privilege.

• A. A support role that can reset passwords but not change billing
• B. Just-in-time elevation for production changes
• C. A shared root password on a sticky note
• D. Domain admin for every intern on day one

Demo item 9 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 10 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 11 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 12 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 13 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 14 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 15 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 16 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 17 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 18 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 19 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket

Demo item 20 for SY0-701: a change must be reversible within one hour. What should you require?

• A. Skip rollback because Security+ never fails
• B. A tested rollback path and a change window
• C. Delete backups first to save space
• D. Apply the change in production with no ticket