CompTIA Security+ SY0-701 - Domains 1 and 2 Threats Attacks Cryptography

By Jordan Blake · Updated May 25, 2026

Questions25
Passing Score75%
Format100% Multiple Choice
Sessions Logged1,728
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.4 (20)

Topics covered

This quiz

Uncategorized25 (100%)

Uncategorized25 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

A company uses TLS 1.3 to encrypt web traffic. Which of the following BEST describes the purpose of TLS in this context?

Answer choices

  • A. Authentication only

  • B. Encryption of data in transit, with server authentication and optionally mutual authentication

  • C. Encryption of data at rest

  • D. VPN tunnel creation between two offices

Question 2

A company is moving to a zero-trust architecture. An employee on the internal network requests access to a sensitive database. Under zero trust, what must happen before access is granted?

Answer choices

  • A. Access is granted automatically because the user is on the internal network

  • B. The user and device must be verified, the request must be authorized against policy, and access should be granted least-privilege for only that specific resource

  • C. The user only needs to authenticate once at network login

  • D. Zero trust only applies to external users

Question 3

During a penetration test, a tester exploits a vulnerability that was publicly disclosed 3 years ago with a CVSS score of 9.8. The system was not patched because it was "on an isolated network." The tester reached it via a misconfigured jump server. What vulnerability management failure does this represent?

Answer choices

  • A. A zero-day exploit

  • B. Defense in depth failure: unpatched critical vulnerability combined with network segmentation failure

  • C. A supply chain attack

  • D. Insider threat

Question 4

A company is concerned about sensitive data being exfiltrated through DNS queries. An attacker could encode stolen data in DNS lookup requests. What is this technique called?

Answer choices

  • A. DNS spoofing

  • B. DNS tunneling

  • C. DNS amplification

  • D. Zone transfer

Question 5

A security analyst is reviewing a web server and finds that the server responds to HTTP OPTIONS requests, revealing supported methods including PUT and DELETE. What is the security risk?

Answer choices

  • A. No risk — OPTIONS is a standard informational response

  • B. Attackers can use the information to identify exploitable HTTP methods (PUT/DELETE can allow unauthorized file upload or deletion)

  • C. OPTIONS responses expose API keys

  • D. OPTIONS requests cause denial of service