Security+ SY0-801

Questions by exam domain

96 original performance-based questions, grouped by the SY0-801 domain they test. Each lists its objective numbers on both exam versions.

1.0

General Security Concepts

13 questions, 2 free

• Pick the right protectionFreeDrag and drop · SY0-801 1.3 · SY0-701 1.4
• Name the control typeFreeDrag and drop · SY0-801 1.1 · SY0-701 1.1
• Which goal does each control serve?Full accessDrag and drop · SY0-801 1.1 · SY0-701 1.2
• Authentication, authorization or accounting?Full accessLog analysis · SY0-801 1.1 · SY0-701 1.2
• Sort out the certificatesFull accessDrag and drop · SY0-801 1.3 · SY0-701 1.4
• Patch the payroll server through change controlFull accessPut in order · SY0-801 1.2 · SY0-701 1.3
• Get a certificate for the customer portalFull accessPut in order · SY0-801 1.3 · SY0-701 1.4
• Decoys and barriersFull accessDrag and drop · SY0-801 1.1 · SY0-701 1.2
• Map the zero trust piecesFull accessDrag and drop · SY0-801 1.1 · SY0-701 1.2
• Secure the data center from the fence inFull accessNetwork placement · SY0-801 1.1 · SY0-701 1.2
• Speak the change board’s languageFull accessDrag and drop · SY0-801 1.2 · SY0-701 1.3
• Turn on SMB signing through change controlFull accessPut in order · SY0-801 1.2 · SY0-701 1.3
• Where should the key live?Full accessDrag and drop · SY0-801 1.3 · SY0-701 1.4

2.0

Threats, Vulnerabilities, and Attacks

22 questions, 1 free

• Read the web server logFreeLog analysis · SY0-801 2.5 · SY0-701 2.4
• Triage the overnight alertsFull accessLog analysis · SY0-801 2.5, 4.8 · SY0-701 2.4, 4.9
• Name the social engineering attackFull accessDrag and drop · SY0-801 2.5, 2.3 · SY0-701 2.2
• Who is behind it?Full accessSort and label · SY0-801 2.2, 2.4 · SY0-701 2.1
• Identify the malwareFull accessSort and label · SY0-801 2.5 · SY0-701 2.4
• Spot the network attackFull accessLog analysis · SY0-801 2.5 · SY0-701 2.4
• Check the sign-in logsFull accessLog analysis · SY0-801 2.5 · SY0-701 2.4
• Pick apart the reported emailFull accessLog analysis · SY0-801 2.5 · SY0-701 2.2
• Risks from the company’s AI toolsFull accessSort and label · SY0-801 2.6 · SY0-701 2.2
• Map the vulnerabilitiesFull accessNetwork placement · SY0-801 2.4, 2.5 · SY0-701 2.3
• Lock down the support chatbotFull accessConfigure settings · SY0-801 2.6 · SY0-701 2.2
• Name the vulnerabilityFull accessLog analysis · SY0-801 2.1, 2.4 · SY0-701 2.3
• What drove each attack?Full accessLog analysis · SY0-801 2.2 · SY0-701 2.1
• How did the threat get in?Full accessLog analysis · SY0-801 2.3 · SY0-701 2.2
• Label the reported scamsFull accessLog analysis · SY0-801 2.3 · SY0-701 2.2
• Fix the findingsFull accessDrag and drop · SY0-801 2.4 · SY0-701 2.5
• Name the wireless attackFull accessDrag and drop · SY0-801 2.5 · SY0-701 2.4
• Read the web app findingsFull accessDrag and drop · SY0-801 2.5 · SY0-701 2.4
• Read the DNS resolver logFull accessLog analysis · SY0-801 2.5 · SY0-701 2.4
• Sort the VPN sign-in attemptsFull accessLog analysis · SY0-801 2.5 · SY0-701 2.4
• Review the web proxy logFull accessLog analysis · SY0-801 2.5 · SY0-701 2.4
• Work the EDR alert queueFull accessLog analysis · SY0-801 2.5 · SY0-701 2.4

3.0

Security Architecture

19 questions, 2 free

• Ports for the new jump hostFreeDrag and drop · SY0-801 3.2 · SY0-701 4.5
• Place the security devicesFreeNetwork placement · SY0-801 3.2 · SY0-701 3.2
• Build the screened subnetFull accessNetwork placement · SY0-801 3.2 · SY0-701 3.2
• Secure the plant networkFull accessNetwork placement · SY0-801 3.2 · SY0-701 3.2
• Protect the customer dataFull accessDrag and drop · SY0-801 3.3 · SY0-701 3.3
• Who is responsible for the data?Full accessDrag and drop · SY0-801 3.3 · SY0-701 5.1
• Build the recovery planFull accessConfigure settings · SY0-801 3.4 · SY0-701 3.4
• Secure the cloud networkFull accessNetwork placement · SY0-801 3.2 · SY0-701 3.2
• Protect the invoice storage bucketFull accessConfigure settings · SY0-801 3.3 · SY0-701 3.3
• Match the architecture to its riskFull accessDrag and drop · SY0-801 3.1 · SY0-701 3.1
• Wall off the voice VLANFull accessFirewall rules · SY0-801 3.2 · SY0-701 3.2
• Fence in the control networkFull accessFirewall rules · SY0-801 3.2 · SY0-701 3.2
• Keep the cameras on a short leashFull accessFirewall rules · SY0-801 3.2 · SY0-701 3.2
• Connect the new branch officeFull accessNetwork placement · SY0-801 3.2 · SY0-701 3.2
• Send plant data out one wayFull accessNetwork placement · SY0-801 3.2 · SY0-701 3.2
• Choose inline or passive, open or closedFull accessNetwork placement · SY0-801 3.2 · SY0-701 3.2
• Classify the dataFull accessDrag and drop · SY0-801 3.3 · SY0-701 3.3
• Prepare the analytics copy of the order dataFull accessConfigure settings · SY0-801 3.3 · SY0-701 3.3
• Bring the data center back in orderFull accessPut in order · SY0-801 3.4 · SY0-701 3.4

4.0

Security Operations

27 questions, 4 free

• Publish the web serverFreeFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Ransomware on the file serverFull accessPut in order · SY0-801 4.7 · SY0-701 4.8
• Lock down the databaseFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Collect the evidence in the right orderFreePut in order · SY0-801 4.7 · SY0-701 4.8
• Harden the new web serverFreeConfigure settings · SY0-801 4.1 · SY0-701 2.5
• Ransomware response, new exam phasesFreeSort and label · SY0-801 4.7 · SY0-701 4.8
• Set the password and sign-in policyFull accessConfigure settings · SY0-801 4.5 · SY0-701 4.6
• Close the outbound gapsFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Isolate the guest Wi-FiFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Triage the scan resultsFull accessSort and label · SY0-801 4.3 · SY0-701 4.3
• Choose the access approachFull accessDrag and drop · SY0-801 4.5 · SY0-701 4.6
• Where would you look?Full accessDrag and drop · SY0-801 4.8 · SY0-701 4.9
• Lock down switch managementFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Restrict the payroll app to HRFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Separate staff and contractor VPN accessFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Open the mail server the right wayFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Limit what the servers can reachFull accessFirewall rules · SY0-801 4.1 · SY0-701 4.5
• Stop leaks and malware at the edgesFull accessNetwork placement · SY0-801 4.1 · SY0-701 4.5
• Secure the new office Wi-FiFull accessConfigure settings · SY0-801 4.1 · SY0-701 4.1
• Set the policy for company phonesFull accessConfigure settings · SY0-801 4.1 · SY0-701 4.1
• Close out the VPN appliance findingFull accessPut in order · SY0-801 4.3 · SY0-701 4.3
• Wire up security monitoringFull accessNetwork placement · SY0-801 4.4 · SY0-701 4.4
• Configure the identity providerFull accessConfigure settings · SY0-801 4.5 · SY0-701 4.6
• Build the brute-force playbookFull accessConfigure settings · SY0-801 4.6 · SY0-701 4.7
• Handle the credential phishing reportFull accessPut in order · SY0-801 4.7 · SY0-701 4.8
• Keep the chain of custody intactFull accessPut in order · SY0-801 4.7 · SY0-701 4.8
• Name the evidence sourceFull accessLog analysis · SY0-801 4.8 · SY0-701 4.9

5.0

Security Program Management and Oversight

15 questions, 1 free

• Choose the risk responseFreeDrag and drop · SY0-801 5.2 · SY0-701 5.2
• Match the vendor agreementFull accessDrag and drop · SY0-801 5.3 · SY0-701 5.3
• Policy, standard, procedure or guideline?Full accessDrag and drop · SY0-801 5.1 · SY0-701 5.1
• Work out the annual lossFull accessConfigure settings · SY0-801 5.2 · SY0-701 5.2
• Bring on a new cloud vendorFull accessPut in order · SY0-801 5.3 · SY0-701 5.3
• Run the penetration testFull accessPut in order · SY0-801 5.5 · SY0-701 5.5
• File the governance documentsFull accessLog analysis · SY0-801 5.1 · SY0-701 5.1
• Work the warehouse internet riskFull accessPut in order · SY0-801 5.2 · SY0-701 5.2
• Run the business impact analysisFull accessPut in order · SY0-801 5.2 · SY0-701 5.2
• Fill in the risk register entryFull accessConfigure settings · SY0-801 5.2 · SY0-701 5.2
• Record the risk register decisionsFull accessLog analysis · SY0-801 5.2 · SY0-701 5.2
• Vet the new vendorFull accessDrag and drop · SY0-801 5.3 · SY0-701 5.3
• Keep the compliance program on trackFull accessDrag and drop · SY0-801 5.4 · SY0-701 5.4
• Set the privacy options for the loyalty appFull accessConfigure settings · SY0-801 5.4 · SY0-701 5.4
• Name the audit or testFull accessDrag and drop · SY0-801 5.5 · SY0-701 5.5