Security+ 601 Practice Questions | Sample Questions | Training | CompTIA https://www.comptia.org/training/resources/practice-tests/security-601-pr...

Join Now (/join-now) About Us (/about-us) Contact Us (/contact-us)

(/home)

HelpStore
(h�ps://help.comp�a.org/hc/en-us/categories/115001121563)
(https://store.comptia.org/)

Login (h�ps://my.comp�a.org) Store (h�ps://store.comp�a.org/)

Certifications
Home (/) / Training (/training) / Resources (/training/resources) / Prac�ce Tests (/training/resources/prac�ce-tests)

/ Security+ 601 Prac�ce Ques�ons

CompTIA Security+ (SY0-601) Prac�ce

Ques�ons
Ques�on 1
A Chief Financial Officer (CFO) has been receiving email messages that have suspicious links embedded
from unrecognized senders. The emails ask the recipient for iden�ty verifica�on. The IT department has
not received reports of this happening to anyone else. Which of the following is the MOST likely
explana�on for this behavior?

A. The CFO is the target of a whaling a�ack.

B. The CFO is the target of iden�ty fraud.
C. The CFO is receiving spam that got past the mail filters.
D. The CFO is experiencing an impersona�on a�ack.

Ques�on 2
Joe, an employee, knows he is going to be fired in three days. Which of the following characteriza�ons
describes the employee?

A. An insider threat
B. A compe�tor
C. A hack�vist
D. A state actor

Ques�on 3
The IT department receives a call one morning about users being unable to access files on the network
shared drives. An IT technician inves�gates and determines the files became encrypted at 12:00 a.m.
While the files are being recovered from backups, one of the IT supervisors realizes the day is the

1 of 4 9/24/2021, 4:09 PM
Security+ 601 Practice Questions | Sample Questions | Training | CompTIA https://www.comptia.org/training/resources/practice-tests/security-601-pr...

birthday of a technician who was fired two months prior. Which of the following describes what MOST
likely occurred?

A. The fired technician placed a logic bomb.

B. The fired technician installed a rootkit on all the affected users' computers.
C. The fired technician installed ransomware on the file server.
D. The fired technician le� a network worm on an old work computer.

Ques�on 4
An organiza�on has a policy in place that states the person who approves firewall controls/changes
cannot be the one implemen�ng the changes. Which of the following describes this policy?

A. Change management
B. Job rota�on
C. Separa�on of du�es
D. Least privilege

Ques�on 5
Which of the following would be the BEST method to prevent the physical the� of staff laptops at an
open-plan bank loca�on with a high volume of customers each day?

A. Guards at the door

B. Cable locks
C. Visitor logs
D. Cameras

Ques�on 6
Which of the following disaster recovery sites would require the MOST �me to get opera�ons back
online?

A. Coloca�on
B. Cold
C. Hot
D. Warm

Ques�on 7

2 of 4 9/24/2021, 4:09 PM