CompTIA Security+ (SY0-701) — Full Mock Exam No. 3 (SY0-701-M3) exam preparation

Everything you need to pass the CompTIA exam: the official objectives, practice in exam conditions and a readiness score.

Questions

90

Duration

90 min

Passing score

750 / 900

Exam objectives

1. 1.0 General Security Concepts12% of the exam

   • 1.1 Compare and contrast various types of security controls
   • 1.2 Summarize fundamental security concepts
   • 1.3 Explain the importance of change management processes and the impact to security
   • 1.4 Explain the importance of using appropriate cryptographic solutions

2. 2.0 Threats, Vulnerabilities, and Mitigations22% of the exam

   • 2.1 Compare and contrast common threat actor types and motivations
   • 2.2 Explain common threat vectors and attack surfaces
   • 2.3 Explain various types of vulnerabilities
   • 2.4 Given a scenario, analyze indicators of malicious activity
   • 2.5 Explain the purpose of mitigation techniques used to secure the enterprise

3. 3.0 Security Architecture18% of the exam

   • 3.1 Compare and contrast security implications of different architecture models
   • 3.2 Given a scenario, apply security principles to secure enterprise infrastructure
   • 3.3 Compare and contrast concepts and strategies to protect data
   • 3.4 Explain the importance of resilience and recovery in security architecture

4. 4.0 Security Operations28% of the exam

   • 4.1 Given a scenario, apply common security techniques to computing resources
   • 4.2 Explain the implications of proper asset management
   • 4.3 Explain various activities associated with vulnerability management
   • 4.4 Explain security alerting and monitoring concepts and tools
   • 4.5 Given a scenario, modify enterprise capabilities to enhance security
   • 4.6 Compare and contrast automation and orchestration in security operations
   • 4.7 Explain the importance of incident response process elements
   • 4.8 Given a scenario, use data sources to support an investigation
   • 4.9 Explain the key aspects of digital forensics

5. 5.0 Security Program Management and Oversight20% of the exam

   • 5.1 Summarize elements of effective security governance
   • 5.2 Explain elements of the risk management process
   • 5.3 Explain the security implications of third-party risk and agreements
   • 5.4 Summarize elements of effective security compliance
   • 5.5 Explain types and purposes of audits and assessments
   • 5.6 Given a scenario, carry out security awareness practices