SY0-701 General Security Concepts Practice Question

Match each principle to the workplace scenario.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

A user must be verified each time they request access, even from inside the network.

The organization uses layered controls such as MFA, filtering, and endpoint protection.

A contractor can view only the project files required for assigned tasks.

A support technician receives only the minimum permissions needed to close tickets.

A website stays online after one server fails because another takes over.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Least privilege: A user is granted only the permissions required for their job duties.

Least privilege restricts access to necessary functions; separation of duties prevents fraud; defense in depth layers security; need to know limits data access; accountability ties actions to individuals; fail safe maintains security during failures.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Least privilege: A user is granted only the permissions required for their job duties.
Why this is correct
Least privilege ensures users have minimal access needed to perform tasks.
✗
Separation of duties: A user is granted only the permissions required for their job duties.
Why it's wrong here
Incorrect — this describes least privilege, not separation of duties.
✓
Need to know: An employee can access sensitive data only if it is directly relevant to their current project.
Why this is correct
Need to know restricts data access to what is necessary for job functions.
✓
Accountability: All system actions are recorded with user identification to trace activities.
Why this is correct
Accountability ties actions to individuals via logging and auditing.
✗
Defense in depth: A security system that automatically fails open to allow egress.
Why it's wrong here
Incorrect — this describes fail safe, not defense in depth.

Go deeper

Scored practice sessions

Quick scored rounds with instant marking and a written explanation per question.

SY0-701 Practice Exam 4 — 20 Questions→SY0-701 Practice Test 2 — 25 Questions→

Study by exam domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

General Security Concepts Threats, Vulnerabilities, and Mitigations Security Operations

Practice by question type

Practise one question format at a time: exhibits, multi-select, drag-and-drop, troubleshooting.

Browse scenarios

Topic-level practice

Each topic page collects the questions that test one concept, plus the theory behind it.

General Security Concepts practice questions Security+ IAM questions Security+ incident response questions

Where to go next

All CompTIA practice questions All SY0-701 questions Study guide

This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.

SY0-701 General Security Concepts Practice Question

Why each option matters

Option-by-option breakdown

Related to this question