[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-437906-105":59,"doc-detail-437906-en":134},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":127,"head_meta":129,"extra_data":131,"updated_unix":133},105,"en","sy0-701-comptia-security-practice-questions","SY0-701 - CompTIA Security+ Practice Questions","","Practice questions and explanations for the CompTIA Security+ SY0-701 certification exam, focused on risk scoring and core security measurement concepts. Covers using likelihood and impact in risk matrices, applying CVSS to quantitatively assess vulnerability criticality, and selecting mobile device management as the best tool to reduce BYOD risk when devices are lost or stolen. Includes guidance on verifying software download integrity using cryptographic hashes.",{"@graph":69,"@context":126},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/sy0-701-comptia-security-practice-questions/437906/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/sy0-701-comptia-security-practice-questions/437906.png","ImageObject",300,407,{"name":92,"@type":93},"Riley","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-21","2026-09-29",true,{"@type":102,"interactionType":103,"userInteractionCount":52},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118,122],{"name":109,"@type":110,"acceptedAnswer":111},"Which two metrics are used to calculate a risk rating in a risk matrix?","Question",{"text":112,"@type":113},"Likelihood and impact. Likelihood represents the probability of an event occurring, while impact reflects the severity of the consequences if it occurs.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What is used to quantitatively measure the criticality of a vulnerability?",{"text":117,"@type":113},"CVSS (Common Vulnerability Scoring System). It provides a numerical score to help organizations prioritize remediation based on factors like confidentiality, integrity, and availability impact.",{"name":119,"@type":110,"acceptedAnswer":120},"For a bring-your-own-device policy, what tool best addresses risk when devices are lost or stolen?",{"text":121,"@type":113},"Mobile device management (MDM). MDM can enforce policies such as screen locks, encryption, remote wipe, containerization, and compliance checks.",{"name":123,"@type":110,"acceptedAnswer":124},"If a developer distributes application files, what should they post so users can verify file integrity?",{"text":125,"@type":113},"Cryptographic hashes (e.g., SHA-256). Users can compare the published hash to the hash of the downloaded file to confirm the file was not altered or corrupted.","https://schema.org",{"og:url":83,"og:type":128,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":130,"canonical":83},"index,follow",{"doc_id":132,"site_id":62},437906,1791385552,{"code":4,"msg":5,"data":135},{"doc_id":132,"user_id":136,"nickname":92,"user_avatar":137,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":138,"file_id":139,"file_url":140,"file_type":141,"file_size":142,"view_count":52,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":39,"language":143,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":144,"faqs":145,"seo_title":146,"seo_description":67,"update_tm":147,"read_time":46},1374391975076,"https://ap-avatar.wpscdn.com/avatar/14000253ca4ec9f6853?x-image-process=image/resize,m_fixed,w_180,h_180&k=1783305029341752051","Accelerate Your Certification with CompTIA SY0-701 Practice  \nQuestions  \nLast chance to prepare smart! Get your hands on free CompTIA Security+ Certification Exam (2026) exam PDF questions. Study real SY0-701 dumps with verified answers and fast-track your certification success with PrepBolt SY0-701 exam pdf questions and answers .  \nThank you for Downloading SY0-701 exam PDF Demo  \n[https://prepbolt.com/SY0-701. html](https://prepbolt.com/SY0-701. html)  \nQuestion Type: MultipleChoice  \nWhich of the following metrics are used to calculate the risk rating in a matrix format? Select two.  \nOptions:  \n\n| A- Likelihood\u003Cbr>B-Quantitative C-SLE\u003Cbr>D- Impact E-ALE\u003Cbr>F-ARO\u003Cbr>Answer: |\n| --- |\n| A, D\u003Cbr>Explanation: |\n\nThe correct answers are A. Likelihood and D. Impact.  \nA risk matrix commonly calculates or represents risk using likelihood and impact. Likelihood measures the probability that a threat or risk event will occur. Impact measures the severity of the consequences if the event occurs. Together, they help determine the overall risk rating, such as low, medium, high, or critical.  \nFor example:  \nRisk = Likelihood Impact  \nWhy the other options are incorrect:  \nB . Quantitative  \nQuantitative describes a type of risk analysis that uses numerical or monetary values. It is not one of the two standard matrix factors.  \nC . SLE  \nSingle Loss Expectancy is used in quantitative risk calculations. It estimates the cost of a single incident.  \nE . ALE  \nAnnualized Loss Expectancy is used in quantitative risk analysis and is commonly calculated as SLE  \n[https://prepbolt.com/](https://prepbolt.com/)  \nARO.  \nF . ARO  \nAnnualized Rate of Occurrence estimates how often an event is expected to happen per year. It is also used in quantitative risk calculations.  \nTherefore, the two metrics used in a risk matrix are likelihood and impact.  \nQuestion 2  \nQuestion Type: MultipleChoice  \nWhich of the following is used to quantitatively measure the criticality of a vulnerability?  \nOptions:  \n\n| A-CVE\u003Cbr>B-CVSS\u003Cbr>C-CIA\u003Cbr>D-CERT\u003Cbr>Answer: |\n| --- |\n| B\u003Cbr>Explanation: |\n\nThe correct answer is B. CVSS.  \nCVSS stands for Common Vulnerability Scoring System. It provides a numerical score used to measure the severity or criticality of a vulnerability. CVSS scores help organizations prioritize vulnerability remediation based on factors such as attack complexity, privileges required, user interaction, scope, confidentiality impact, integrity impact, and availability impact.  \nWhy the other options are incorrect:  \nA . CVE  \nCVE stands for Common Vulnerabilities and Exposures. It provides a unique identifier for a known vulnerability, but it does not measure the vulnerability's criticality by itself.  \nC . CIA  \nCIA stands for confidentiality, integrity, and availability. It is a core security model, not a vulnerability  \n[https://prepbolt.com/](https://prepbolt.com/)  \nscoring system.  \nD . CERT  \nCERT generally refers to a Computer Emergency Response Team or similar incident response organization. It is not a scoring system for vulnerability criticality.  \nTherefore, CVSS is used to quantitatively measure vulnerability criticality.  \nQuestion 3  \nQuestion Type: MultipleChoice  \nIn order to cut costs, a company decides to implement a bring-your-own-device policy. The security team wants a solution that will reduce risk to company data, especially in cases in which devices are lost or stolen. Which of the following tools is best to address this concern?  \nOptions:  \n\n| A- Mobile device management\u003Cbr>B- Endpoint detection and response\u003Cbr>C- Host-based intrusion detection system D- Data loss prevention\u003Cbr>Answer: |\n| --- |\n| A\u003Cbr>Explanation: |\n\nThe correct answer is A. Mobile device management.  \nMobile device management, or MDM, is the best solution for managing BYOD devices and protecting company data if a device is lost or stolen. MDM can enforce security policies such as screen locks, device encryption, remote wipe, containerization, application co","cbCaiasjl1Z4La5n","https://ap.wps.com/l/cbCaiasjl1Z4La5n","pdf",288569,"English","# Practice Questions\n## Risk matrix metrics (likelihood and impact)\n## Quantitative vulnerability criticality (CVSS)\n## BYOD risk reduction tool (MDM)\n## Verifying downloaded file integrity (hashes)","[{\"question\":\"Which two metrics are used to calculate a risk rating in a risk matrix?\",\"answer\":\"Likelihood and impact. Likelihood represents the probability of an event occurring, while impact reflects the severity of the consequences if it occurs.\"},{\"question\":\"What is used to quantitatively measure the criticality of a vulnerability?\",\"answer\":\"CVSS (Common Vulnerability Scoring System). It provides a numerical score to help organizations prioritize remediation based on factors like confidentiality, integrity, and availability impact.\"},{\"question\":\"For a bring-your-own-device policy, what tool best addresses risk when devices are lost or stolen?\",\"answer\":\"Mobile device management (MDM). MDM can enforce policies such as screen locks, encryption, remote wipe, containerization, and compliance checks.\"},{\"question\":\"If a developer distributes application files, what should they post so users can verify file integrity?\",\"answer\":\"Cryptographic hashes (e.g., SHA-256). Users can compare the published hash to the hash of the downloaded file to confirm the file was not altered or corrupted.\"}]","SY0-701 - CompTIA Security+ Practice Questions | PDF",1790683457]