CompTIA Security+ (SY0-701) Practice Exam
General Security Concepts
Test your knowledge of fundamental cybersecurity principles, security controls, authentication and authorization concepts, zero trust, change management, and cryptographic solutions.
Topics Covered:
-
Security control categories and types
-
CIA Triad
-
Authentication, Authorization, and Accounting
-
Non-repudiation
-
Zero Trust Architecture
-
Gap Analysis
-
Physical security controls
-
Deception and disruption technologies
-
Change management
-
Cryptography fundamentals
-
Symmetric and asymmetric encryption
-
Hashing and salting
-
Digital signatures
-
Public Key Infrastructure (PKI)
-
Certificates
-
Key stretching
Threats, Vulnerabilities & Mitigations
Evaluate your ability to identify threat actors, attack vectors, vulnerabilities, malicious activity, and appropriate security mitigation techniques.
Topics Covered:
-
Threat actors and motivations
-
Nation-state actors
-
Hacktivists
-
Organized crime
-
Insider threats
-
Shadow IT
-
Social engineering
-
Phishing and spear phishing
-
Whaling and vishing
-
Smishing
-
Malware
-
Ransomware
-
Password attacks
-
Network attacks
-
Application attacks
-
Vulnerability types
-
Misconfiguration
-
Zero-day vulnerabilities
-
Indicators of malicious activity
-
Vulnerability scanning
-
Patch management
-
Endpoint security
-
Network segmentation
-
Application allowlisting
-
Mitigation techniques
Security Architecture
Challenge your understanding of secure infrastructure design, cloud security, virtualization, data protection, resilience, and enterprise security architecture.
Topics Covered:
-
Security architecture models
-
On-premises infrastructure
-
Cloud architecture
-
Hybrid environments
-
Infrastructure as a Service (IaaS)
-
Platform as a Service (PaaS)
-
Software as a Service (SaaS)
-
Virtualization
-
Containers
-
IoT and embedded systems
-
Industrial control systems
-
Operational Technology (OT)
-
Network segmentation
-
Secure network design
-
Zero Trust architecture
-
Data classification
-
Data sovereignty
-
Data protection
-
Data encryption
-
Data loss prevention (DLP)
-
Resilience and redundancy
-
Disaster recovery
-
Backup strategies
-
High availability
Security Operations
Assess your practical knowledge of security monitoring, incident response, vulnerability management, identity management, security tools, and operational security processes.
Topics Covered:
-
Security monitoring
-
Security Information and Event Management (SIEM)
-
Endpoint Detection and Response (EDR)
-
Extended Detection and Response (XDR)
-
Log analysis
-
Network monitoring
-
Vulnerability management
-
Vulnerability scanning
-
Penetration testing
-
Incident response
-
Incident response processes
-
Digital forensics
-
Evidence handling
-
Chain of custody
-
Identity and Access Management (IAM)
-
Authentication methods
-
Multifactor authentication (MFA)
-
Single Sign-On (SSO)
-
Federation
-
Privileged Access Management (PAM)
-
Access control models
-
Account management
-
Security hardening
-
Secure configuration
-
Application security
-
Mobile security
-
Wireless security
-
Email security
-
Automation and orchestration
Security Program Management & Oversight
Measure your understanding of governance, risk management, compliance, policies, business continuity, security awareness, and third-party risk management.
Topics Covered:
-
Security governance
-
Organizational policies
-
Standards and procedures
-
Risk management
-
Risk identification
-
Risk analysis
-
Risk treatment
-
Risk transfer
-
Risk acceptance
-
Risk avoidance
-
Business Impact Analysis (BIA)
-
Recovery Time Objective (RTO)
-
Recovery Point Objective (RPO)
-
Mean Time to Repair (MTTR)
-
Mean Time Between Failures (MTBF)
-
Disaster recovery planning
-
Business continuity
-
Incident response policies
-
Third-party risk
-
Vendor management
-
Supply chain risk
-
Compliance requirements
-
Security audits
-
Security assessments
-
Privacy requirements
-
Security awareness training
-
Phishing simulations
-
Social engineering awareness
Questions include realistic scenarios, technical concepts, troubleshooting situations, security best practices, and exam-style distractors.
Practice Exam 7 – Advanced Scenario-Based Questions
Challenge yourself with difficult scenario-based questions designed to test your ability to analyze a situation and select the BEST security solution.
Topics Covered:
-
Incident investigation
-
Attack identification
-
Security control selection
-
Network security scenarios
-
Identity and access scenarios
-
Cloud security scenarios
-
Vulnerability remediation
-
Risk management decisions
-
Security architecture decisions
-
Incident response scenarios
-
Troubleshooting and mitigation
