SY0701 CompTIA Security+ 2023 Free Practice Test — 30 Questions

Question 1

Anya, a senior security analyst, is tasked with migrating her organization\'s security posture from a traditional perimeter-focused model to a comprehensive zero-trust architecture. This requires her team to rapidly re-prioritize their efforts, which were previously concentrated on managing firewalls and VPNs, towards implementing granular access controls, continuous verification, and micro-segmentation. Anya must guide her team through the inherent uncertainties of adopting new security paradigms and potentially unfamiliar technologies, ensuring that critical security functions remain operational throughout the transition. Which core behavioral competency is Anya primarily demonstrating by navigating these shifts and uncertainties?

Accepted Answer

Adaptability and Flexibility

Question 2

A cybersecurity team is reviewing its current security posture. They\'ve noted a significant increase in sophisticated ransomware attacks targeting financial institutions and a new, stringent data privacy regulation that mandates enhanced protection for customer personally identifiable information (PII). The team needs to recommend a strategic adjustment that is both compliant and resilient. Which of the following adjustments would best address these evolving requirements?

Accepted Answer

Implement end-to-end encryption for all customer data, enforce strict access controls based on the principle of least privilege, and establish immutable, air-gapped backups for critical systems.

Question 3

Anya, a cybersecurity analyst, was tasked with preparing a comprehensive report on best practices for securing a forthcoming cloud migration. However, a sudden surge in sophisticated nation-state sponsored cyberattacks targeting critical infrastructure has prompted her organization to immediately re-prioritize its security investments. The executive leadership has directed all available resources towards enhancing the resilience of the current on-premises network infrastructure, including the deployment of advanced threat detection capabilities. Anya must now shift her focus from cloud security protocols to evaluating and implementing new intrusion detection systems (IDS) for the existing network. Which behavioral competency is Anya most critically demonstrating by successfully navigating this abrupt change in project scope and required expertise?

Accepted Answer

Adaptability and Flexibility

Question 4

A financial services firm has just detected a sophisticated ransomware variant that is actively encrypting client financial records and critical operational systems. The IT security team has confirmed unauthorized access and the ongoing exfiltration of some data. The Chief Information Security Officer (CISO) needs to direct the initial response actions. Which of the following actions should be the absolute highest priority to mitigate immediate damage and enable subsequent recovery operations?

Accepted Answer

Isolate all affected and potentially affected systems from the network to contain the spread.

Question 5

A financial services firm experiences a sudden and widespread ransomware attack, encrypting vast amounts of customer data and rendering critical trading platforms inoperable. The incident response team is activated immediately. Given the firm\'s obligations under regulations like the Gramm-Leach-Bliley Act (GLBA) and the need to resume operations to avoid significant financial losses, what is the most critical initial action the team must undertake to balance immediate business continuity with regulatory compliance?

Accepted Answer

Initiate a comprehensive forensic investigation to preserve all digital evidence, enabling accurate scope determination for legal notifications and root cause analysis.

Question 6

A cybersecurity operations center (SOC) is alerted to a sophisticated, zero-day exploit targeting a recently deployed, custom-built customer relationship management (CRM) platform. Initial containment measures, including network segmentation and rapid deployment of a vendor-provided hotfix, are implemented. However, subsequent analysis reveals that the attacker has already established persistence and is exhibiting lateral movement across internal servers. The SOC team is struggling to pinpoint the full extent of the compromise due to the novel nature of the exploit and the custom codebase of the CRM. Which of the following actions represents the most critical next step for the SOC to effectively manage this escalating incident?

Accepted Answer

Initiate a comprehensive digital forensics investigation to meticulously trace the attacker's actions, identify all compromised systems, and gather irrefutable evidence of the intrusion.

Question 7

A cybersecurity incident response team discovers a sophisticated zero-day exploit targeting a critical, customer-facing web service. Initial analysis indicates the exploit allows unauthorized data exfiltration. The organization\'s standard incident response plan (IRP) has a playbook for known vulnerabilities but lacks specific procedures for novel, unpatched exploits. The CISO has tasked the team lead, Anya, with managing the immediate response, emphasizing the need to minimize service disruption while ensuring data integrity. Anya must quickly assess the situation, coordinate diverse technical resources, and communicate status updates to executive leadership, who are demanding immediate, definitive solutions.

Which of the following behavioral competencies is MOST critical for Anya and her team to effectively manage this escalating cybersecurity incident?

Accepted Answer

Adaptability and Flexibility

Question 8

A cybersecurity analyst team is grappling with a sophisticated, previously undocumented exploit that has successfully bypassed all deployed signature-based intrusion detection systems, leading to a limited data exfiltration event. The immediate patch deployed by the engineering team has temporarily halted further exploitation, but the nature of the attack remains largely unknown. The security operations center (SOC) is struggling to generate actionable intelligence from the limited logs, as the exploit\'s execution path is obfuscated. Which of the following strategic adjustments would most effectively enable the team to identify the exploit\'s persistent mechanisms and prevent future occurrences, given the current limitations?

Accepted Answer

Transitioning from signature-based detection to a robust behavioral analysis and anomaly detection framework to identify deviations from normal system and network activity.

Question 9

A cybersecurity team is actively investigating a critical server that has been confirmed to be exfiltrating sensitive customer Personally Identifiable Information (PII). The breach is ongoing, and the organization faces significant regulatory penalties under GDPR if data loss continues. The team must halt the exfiltration, contain the threat, and restore affected services with minimal downtime to maintain customer trust and operational viability. Which of the following strategic frameworks most directly guides the team\'s comprehensive approach to managing this active, high-impact incident and ensuring the organization\'s continued operation?

Accepted Answer

Business Continuity Planning (BCP)

Question 10

Anya, a senior security analyst, is alerted to a critical security incident involving a newly discovered zero-day exploit targeting a proprietary customer relationship management (CRM) platform. The platform is experiencing intermittent service failures and reports of unauthorized data exfiltration. The CRM is mission-critical for the organization\'s daily operations. What should Anya prioritize as her immediate first step to manage this evolving threat?

Accepted Answer

Isolate the affected CRM servers from the internal and external networks.

Question 11

Anya, a cybersecurity analyst, is tasked with mitigating a newly discovered critical zero-day vulnerability affecting the organization\'s core infrastructure. Simultaneously, her team is in the final stages of deploying a sophisticated behavioral analytics engine designed to detect advanced persistent threats, a project that has already faced scope creep and shifting integration timelines due to an ongoing company-wide digital transformation initiative. Anya must now re-evaluate resource allocation and project timelines for both critical tasks, given the unexpected urgency of the zero-day exploit and potential delays in the IDS rollout. Which of the following behavioral competencies is MOST essential for Anya to effectively manage this complex and dynamic situation?

Accepted Answer

Adaptability and Flexibility

Question 12

A manufacturing firm\'s operational control system (OCS) has been encrypted by a sophisticated ransomware variant, halting production. The incident response team has confirmed the encryption is widespread across critical servers. Initial analysis suggests the ransomware exploited a zero-day vulnerability in a legacy industrial control software. The team\'s priority is to resume operations as swiftly as possible while ensuring no further compromise occurs. Which of the following constitutes the most prudent immediate course of action?

Accepted Answer

Isolate all affected OCS network segments, begin system restoration from verified, clean backups, and initiate a post-incident forensic analysis to identify the exploit vector.

Question 13

A cybersecurity operations team, accustomed to a structured, risk-based approach to vulnerability management and threat hunting, is suddenly confronted with a sophisticated, zero-day exploit targeting a critical infrastructure component. Simultaneously, executive leadership mandates a rapid pivot to support a high-priority, time-sensitive business initiative that requires reallocating significant team resources. Which of the following behavioral competencies is most crucial for the team to effectively navigate this dual challenge of a critical security incident and a sudden strategic shift?

Accepted Answer

Adaptability and Flexibility

Question 14

A cybersecurity analyst detects a potential insider threat where an employee, Anya, is suspected of exfiltrating proprietary design schematics to an external cloud storage provider. Initial network traffic analysis indicates a large file transfer from Anya\'s workstation to a specific cloud service approximately one hour ago. The analyst has confirmed the file\'s existence and the destination service. What is the most critical immediate action to take?

Accepted Answer

Isolate Anya's workstation from the network and initiate a forensic image of her storage devices.

Question 15

Anya, a senior security analyst, is tasked with enforcing a new corporate policy requiring multi-factor authentication (MFA) for all remote access connections. Her team currently utilizes a well-established, but aging, VPN solution that lacks native MFA integration capabilities. The organization is facing budget constraints, making a complete VPN infrastructure replacement impractical in the short term. Anya must find a compliant and secure method to implement MFA for remote access.

Which of the following approaches best demonstrates Anya\'s adaptability and problem-solving skills in this scenario?

Accepted Answer

Deploying an independent MFA gateway solution that authenticates users before they connect to the existing VPN, thereby enforcing the policy without immediate VPN hardware replacement.

Question 16

A cybersecurity team is grappling with a sophisticated zero-day exploit targeting a nation\'s critical industrial control systems (ICS) that regulate water purification. The exploit\'s methodology is entirely novel, its full impact on physical processes is not yet understood, and the potential for widespread public health crises is imminent. Standard incident response playbooks are proving insufficient due to the unprecedented nature of the attack vector and the lack of immediate vendor patches. The team leader must decide on the most appropriate strategic shift to manage this escalating crisis.

Which of the following strategic shifts would best position the team to effectively manage this evolving and ambiguous threat?

Accepted Answer

Strictly adhering to the predefined incident response plan, focusing on documenting all actions and awaiting formal guidance from external cybersecurity agencies.

Question 17

Anya, a cybersecurity analyst at a financial services firm, notices a senior developer, Mr. Chen, exhibiting unusual access patterns to sensitive customer financial records. Over the past week, Mr. Chen has been logging into these databases during off-peak hours and initiating large data transfers to an external cloud storage service that is not sanctioned by the company\'s IT policy. The firm\'s Acceptable Use Policy (AUP) clearly states that all data transfers must be through approved channels and that employee activity on company systems is subject to monitoring. Anya suspects this could be a deliberate attempt at data exfiltration. What is the most prudent immediate course of action for Anya to take?

Accepted Answer

Continue to passively monitor Mr. Chen's activity, meticulously collecting and analyzing all relevant logs from the DLP system, database access logs, and network traffic to build a comprehensive evidence package before escalating.

Question 18

A cybersecurity operations center is experiencing a surge in advanced phishing attempts that exploit zero-day vulnerabilities, rendering their current signature-based intrusion detection systems largely ineffective. Despite rapidly updating threat intelligence feeds, the organization continues to suffer breaches. The security lead recognizes the need for a fundamental shift in their defensive posture to counter this evolving threat landscape. Which of the following strategic adjustments best demonstrates adaptability and a pivot in methodology to address this persistent challenge?

Accepted Answer

Implement User and Entity Behavior Analytics (UEBA) to identify anomalous activities indicative of compromised accounts and lateral movement, in addition to enhancing existing endpoint detection and response (EDR) capabilities with more heuristic analysis.

Question 19

A cybersecurity firm, SecureNet Solutions, observes a marked increase in successful intrusions attributed to a new strain of polymorphic malware that rapidly alters its code to bypass traditional signature-based antivirus solutions. SecureNet\'s existing incident response plan (IRP) is heavily dependent on identifying known malware hashes and static IOCs. The firm\'s leadership recognizes that their current methodology is failing to adequately protect clients against this evolving threat. Which strategic adjustment would best demonstrate Adaptability and Flexibility in this scenario?

Accepted Answer

Implementing a threat hunting framework focused on anomalous behavior and establishing a continuous monitoring posture

Question 20

A security analyst, monitoring network traffic, notices a significant anomaly originating from a specific employee\'s workstation. The observed activity includes unusually large outbound data transfers to an external IP address not on any approved whitelist, occurring outside of standard business hours. Concurrently, system logs indicate this employee recently accessed and downloaded a substantial volume of sensitive customer Personally Identifiable Information (PII) records. Given these indicators, what is the most prudent immediate course of action to manage this potential security incident, considering both risk mitigation and evidence preservation?

Accepted Answer

Immediately disable the employee's network access and initiate a formal internal investigation, ensuring all actions are logged and evidence is preserved according to established protocols.

Question 21

A cybersecurity operations center (SOC) is experiencing a significant increase in novel, sophisticated attack vectors that bypass existing signature-based detection systems. The established incident response playbook, designed for known threat patterns, is proving insufficient. Team members are struggling to prioritize incoming alerts due to the sheer volume and the unknown nature of the threats, leading to delays in remediation. Which of the following behavioral competencies is most critical for the SOC manager to foster immediately to navigate this evolving crisis effectively?

Accepted Answer

Adaptability and Flexibility

Question 22

Anya, a senior security analyst, is alerted to a critical incident: an unknown malware variant is actively exploiting a zero-day vulnerability in the company\'s primary customer relationship management (CRM) system. The anomaly detection system flags a significant increase in outbound data exfiltration attempts from CRM servers. The business impact is assessed as potentially severe, risking the compromise of sensitive customer data and disruption of sales operations. Anya must decide on the most immediate and impactful course of action.

Accepted Answer

Isolate the affected CRM servers from the network to prevent further data exfiltration and lateral movement.

Question 23

A cybersecurity operations center is undergoing a significant restructuring due to an increase in sophisticated, multi-vector attacks targeting critical infrastructure. The team lead, Anya, has been informed that the team\'s focus will shift from reactive incident response to proactive threat hunting and intelligence gathering. Simultaneously, the organization is implementing a new collaboration platform, requiring the team to adapt to remote work practices and new communication protocols. Anya must ensure her team remains productive and motivated through this period of transition and uncertainty. Which of the following behavioral competencies is MOST critical for Anya to demonstrate to successfully guide her team through these changes?

Accepted Answer

Adaptability and Flexibility

Question 24

A cybersecurity team is investigating a complex intrusion where attackers successfully leveraged an unknown software vulnerability to infiltrate the network, subsequently utilized compromised administrative credentials for lateral movement, and exfiltrated sensitive data via an encrypted, non-standard communication protocol. Following containment and initial remediation, the team must devise a strategy to significantly enhance their defenses against similar sophisticated, multi-stage attacks. Which of the following approaches would provide the most effective long-term improvement in detecting and preventing such advanced persistent threats?

Accepted Answer

Integrate a comprehensive threat intelligence feed with advanced endpoint detection and response (EDR) and security information and event management (SIEM) solutions to correlate threat data with internal activity and detect anomalous behavior.

Question 25

A cybersecurity operations center (SOC) is actively managing a zero-day exploit that has led to a significant data exfiltration event. The incident response team is overwhelmed with forensic analysis, while the threat intelligence unit has identified indicators of compromise (IOCs) that suggest a broader, ongoing campaign. The SOC manager observes a lack of unified direction, with team members pursuing independent lines of inquiry, leading to duplicated efforts and missed critical connections. Which of the following actions by the SOC manager would best address the immediate challenges and foster a more cohesive and effective response?

Accepted Answer

Convene an emergency briefing to re-establish incident priorities, assign clear roles for containment and analysis, and implement a real-time communication channel for all team members.

Question 26

Anya, a cybersecurity analyst at a global fintech firm, receives an alert from the company\'s advanced DLP solution. The alert indicates that Jian, a senior software engineer whose access permissions were recently adjusted following a performance review, has been transferring unusually large, encrypted data packets to an external IP address not on any approved whitelist. These transfers occurred late at night, outside Jian\'s typical work schedule. Anya\'s immediate objective is to determine the most prudent and compliant course of action to investigate this potential insider threat while respecting employee rights and adhering to data protection regulations.

Accepted Answer

Consult with the Legal and Human Resources departments to ensure the investigation aligns with company policy and relevant employment laws.

Question 27

A global financial institution, operating under stringent regulations like the Gramm-Leach-Bliley Act (GLBA) and the Payment Card Industry Data Security Standard (PCI DSS), is planning to migrate its sensitive customer data access controls from a traditional VPN-based perimeter model to a Zero Trust Network Access (ZTNA) architecture. The primary objective is to bolster security posture and streamline remote access for its geographically dispersed workforce. Which of the following represents the most significant compliance-related consideration for this transition?

Accepted Answer

The ZTNA solution's ability to provide highly granular, identity-bound access logs that can satisfy audit requirements for data access traceability and fulfill data minimization principles under GLBA.

Question 28

Anya, a seasoned cybersecurity analyst, was scheduled to perform a comprehensive network vulnerability scan and deploy critical security patches across the organization\'s server infrastructure. Midway through her planned activities, an urgent alert signals a potential zero-day exploit affecting a widely used business application, demanding immediate investigation and containment. Anya must now adjust her workflow to address this emergent threat. Which behavioral competency is Anya primarily demonstrating by effectively re-prioritizing her tasks and initiating containment procedures for the zero-day exploit?

Accepted Answer

Adaptability and Flexibility

Question 29

Anya, a seasoned security analyst at a burgeoning fintech firm, is alerted to a sophisticated ransomware attack that appears to be leveraging an unknown zero-day exploit. The attack has begun encrypting critical customer data. The firm\'s business continuity plan mandates swift action to minimize financial and reputational damage, while also adhering to stringent data protection regulations like GDPR. Anya must determine the most effective immediate course of action to contain the threat, restore services, and facilitate a thorough post-incident analysis. Which of the following strategies best addresses the multifaceted nature of this incident?

Accepted Answer

Isolate affected systems, restore from clean backups, and conduct forensic analysis to identify the initial access vector and exploit details.

Question 30

A critical zero-day exploit has been detected actively compromising systems within your organization, circumventing all deployed signature-based intrusion detection systems and endpoint protection platforms. Network traffic analysis reveals anomalous, but as yet unclassified, behavior patterns indicative of lateral movement. The incident response team\'s established playbooks are proving ineffective due to the novelty of the attack vector. Which behavioral competency is most critical for the team to immediately leverage to effectively navigate and mitigate this evolving security incident?

Accepted Answer

Adaptability and Flexibility

SY0701 CompTIA Security+ 2023 Free Practice Test — 30 Questions

A lot more is already mapped out

About the SY0701 CompTIA Security+ 2023 Certification