SY0-701 practice examsFinished
CompTIA Security+ (SY0-701)
CompTIA Security+ is a globally recognized certification that validates baseline cybersecurity skills. The SY0-701 exam covers essential security concepts, threat analysis, security architecture, operations, and governance. It is vendor-neutral and serves as a springboard for intermediate-level cybersecurity roles such as security analyst, SOC analyst, and security engineer.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| General Security Concepts | 12% |
| Threats, Vulnerabilities, and Mitigations | 22% |
| Security Architecture | 18% |
| Security Operations | 28% |
| Security Program Management and Oversight | 20% |
Two sample questions
1. A web application developer includes detailed error messages in production that reveal the database type, query structure, and file paths. What type of vulnerability does this create?
- An information disclosure vulnerability that reveals internal system details to potential attackers — correct
- A denial of service vulnerability that allows attackers to crash the application with errors
- A privilege escalation vulnerability that grants administrative access through error handling
- An authentication bypass vulnerability allowing attackers to skip the login process entirely
Why: Verbose error messages in production constitute information disclosure because they reveal internal system details (database type, query structure, file paths) that attackers can use to craft more targeted attacks. Production applications should display generic error messages.
2. Malware runs only in memory using built-in tools such as PowerShell, leaving few files. What is it?
- A boot sector virus
- Adware
- A logic bomb
- Fileless malware — correct
Why: Fileless malware lives in memory and abuses legitimate tools.
The real SY0-701 exam
| Length | 90 minutes |
|---|---|
| Questions | Maximum of 90 (multiple-choice and performance-based) |
| Pass mark | 750 on a scale of 100 to 900 |
| Price | Purchased per attempt through Pearson VUE |
| Recommended before you sit it | None enforced. CompTIA recommends Network+ and two years in a security or systems administrator role. |
| Valid for | 3 years, renewable through continuing education |
Exam facts as published by CompTIA; always check the vendor’s page before you book.
Study SY0-701 with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.