CompTIA · 考试 SY0-701

围绕考试实际考察的判断力设计的 Security+ 练习题。

Prepare for security operations with scenario-driven practice covering threats, secure architecture, identity, risk, and incident response.

免费开始 20 道题 查看包含内容Practice free questions
无需绑卡即可开始 · 一次性付款 · 永久访问
内容审核于 2026年10月

还不确定 Security+ 适不适合你？

先做免费的 10 题诊断——注册免费账户，即时评分并按领域给出详细分析，让你在做决定之前先了解自己的水平。

免费 10 题诊断

限时模拟考试

一次完整的限时模拟，包含 Security+ 道练习题，提交前不显示任何反馈——最接近真实考试的体验。

开始限时模拟
为你的下一次尝试而设计

有目标的备考。

New and developing security professionals who need to connect security concepts with the decisions made in real operational scenarios.

CertSprint 结合了针对性练习、详细解析、基于表现的任务和分领域的准备度评估，让每次练习都清楚告诉你接下来该学什么。

完整题库

超越 20 道题的预览版，进入围绕当前考纲的技能与场景组织的完整题库。

有启发性的解析

了解为什么正确答案符合证据，以及为什么其他选项不成立，从而培养判断力而不是死记硬背。

PBQ 与应用场景题

练习排序、匹配、排查和配置类任务，让知识在考试压力下也能真正用得上。

按领域评估准备度

正确率会映射到各考试领域，揭示薄弱环节，把考试日期变成切实可行的每日练习目标。

你将练习的内容

专注于 Security+ 的覆盖范围。

整个体验围绕相关的判断与故障排查设计，而不是零散的知识点。

  • Threats, vulnerabilities, and mitigations
  • Security architecture and operations
  • Governance, risk, and identity controls

Try three questions. Understand every answer.

Original English practice examples, with answers and explanations available here. No account required. These are independent teaching examples, not official exam questions or exam dumps.

Question 1 of 3 · Threats, vulnerabilities, and mitigations

An internet-facing service has an actively exploited vulnerability. The vendor has no patch yet, but offers a documented workaround that blocks the known exploit path. Which action best reduces immediate risk without claiming the flaw is permanently fixed?

Answer and explanation

Best answer: Validate and apply the workaround, monitor it, and track the pending patch

A validated compensating control can reduce exposure while the permanent fix is pending. Retain the vulnerability record, residual risk, and a plan to apply and verify the patch.

Why the other choices fit less well

Waiting leaves exposure unchanged, and a hostname change does not block the flaw. A workaround reduces risk without necessarily removing the vulnerability, so closing it as permanently fixed overstates the evidence.

CISA: known exploited vulnerabilities

Question 2 of 3 · Security architecture

An analyst needs read-only access to one reporting dataset for a two-week investigation. Which access decision best follows least privilege?

Answer and explanation

Best answer: Grant approved read-only access to that dataset with a reviewed expiry

Limit permissions to the approved task, resource and duration. Review the expiry and record the grant so access can be removed when the investigation ends.

Why the other choices fit less well

Permanent administrator rights exceed the task. Shared credentials weaken individual accountability. Disabling logs removes evidence without reducing the permissions required.

NIST: least privilege

Question 3 of 3 · Security operations

An investigator hashes a collected log file, then transfers it to an analysis workstation. The hash of the received file differs. What is the most defensible next step?

Answer and explanation

Best answer: Preserve both records and investigate or repeat the transfer before relying on the copy

The received bytes have not passed the expected integrity check. Preserve the acquisition record and investigate the discrepancy or acquire a verified copy.

Why the other choices fit less well

A filename does not establish byte-level integrity. Replacing the original hash hides the discrepancy. Do not describe the copy as verified until the mismatch is resolved.

NIST: forensic evidence handling

Choose your next step

Free practice questions: 20 for Security+. Create a free account to save your progress. No card required.

Try 20 Security+ questions freePrefer a short check? Take the 10-question Security+ diagnostic.

Paid question-bank access is a one-time purchase, with no recurring subscription. Official exam registration, vouchers and provider labs are separate from CertSprint practice.

考试是如何进行的

准确了解考试当天的情况。

CompTIA Security+（SY0-701）官方考试形式 — 预约前请到官方网站确认最新价格和政策，因为这些可能会变化。

形式1 exam
题目数量Up to 90 questions
时长90 minutes
及格分数750 (scored on a 100–900 scale)
题型Multiple-choice (single and multiple response) plus performance-based questions (PBQs)
考试方式Pearson VUE test center or online proctored (OnVUE)
重考政策Immediate retake allowed after a first fail; a 14-day wait applies before a third attempt
学习计划

一份按真实题库权重分配的 5 周计划。

每周的时长与该领域实际拥有的 Security+ 练习题数量成正比，而不是通用模板。可在仪表盘中跟踪真实进度。

  1. 1

    General Security Concepts + Threats, Vulnerabilities & Mitigations

    Smaller domains grouped together to keep every week substantive.

    约每天 29 题
  2. 2

    Security Architecture + Security Operations

    Smaller domains grouped together to keep every week substantive.

    约每天 34 题
  3. 3

    Security Program Management & Oversight

    19% of the full question bank — the single largest block this week.

    约每天 15 题
  4. 4

    Cumulative review

    Mixed practice across every domain, prioritizing whichever ones your readiness tracker shows below 80% accuracy — not a fixed list, but whatever the data says is weakest this week.

  5. 5

    Timed mock exam

    Simulate the real exam: one sitting, the real question count and time limit, no pausing. Re-drill any domain that comes in under 80%.

用数据说话

在考试日发现之前，先找到你的薄弱领域。

免费试做 20 道 Security+ 题目。准备好后再解锁完整练习空间。

免费开始 Security+

Go deeper on Security+

有依据地练习

理解答案背后的判断。

先分析情境，找出关键证据，再对照解析检查自己的推理。根据各领域的得分决定下一次复习重点。练习正确率只能提示学习进度，不能预测正式考试成绩，也不等同于官方分数。

最新练习集提供八种语言版本。较早的练习可能以英语显示。这些是独立编写的原创练习情境，并非官方考试题目。