Free SY0-601: CompTIA Security 2021 Exam Questions and Answers
This exam retired on 31 July 2024. It was replaced by SY0-701: CompTIA Security 2023. The questions here still cover most of the same ground, and the new exam’s own page has the current bank.
CompTIA Security+ SY0-601 retired on 31 July 2024 and was replaced by SY0-701. If you are booking a sitting now, SY0-701 is the exam you want. This bank is still worth working: the two versions cover much the same ground, and certifications earned under SY0-601 remain valid for three years from the date they were awarded. SY0-601 allowed 90 minutes for a maximum of 90 questions, multiple choice plus performance-based, at 750 on a 100–900 scale. Its five domains were implementation 25%, attacks and vulnerabilities 24%, architecture and design 21%, operations and incident response 16% and governance, risk and compliance 14%.
Looking for SY0-601 exam dumps or ExamTopics SY0-601 questions? These SY0-601 practice questions cover the same ground with verified answers and explanations, a downloadable SY0-601 PDF and a full SY0-601 practice test, kept current as CompTIA updates the exam.
Last updated: October 7, 2026
- Exam code
- SY0-601
- Provider
- CompTIA
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Official page
- Official Exam website
- Our test mode duration & pass mark
- 130 mins · 70%
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
A building manager is concerned about people going in and out of the office during non-working hours. Which of the following physical security controls would provide the best solution?
Correct answer: B
Explanation
Badges are physical security controls that provide a way to identify and authenticate authorized individuals who need to access a building or a restricted area. Badges can also be used to track the entry and exit times of people and monitor their movements within the premises. Badges can help deter unauthorized access by requiring people to present a valid credential before entering or leaving the office. Badges can also help prevent tailgating, which is when an unauthorized person follows an authorized person through a door or gate. Badges can be integrated with other security systems, such as locks, alarms, cameras, or biometrics, to enhance the level of protection.
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #2
A large retail store's network was breached recently. and this news was made public. The Store did not lose any intellectual property, and no customer information was stolen. Although no fines were incurred as a result, the Store lost revenue after the breach. Which of the following is the most likely reason for this issue?
Correct answer: C
Explanation
Reputation is the perception or opinion that customers, partners, investors, etc., have about a company or its products and services. It can affect the revenue and profitability of a company after a network breach, even if no intellectual property or customer information was stolen, because it can damage the trust and confidence of the stakeholders and reduce their willingness to do business with the company
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #3
Which of the following tools can assist with detecting an employee who has accidentally emailed a file containing a customer's Pll?
Correct answer: D
Explanation
DLP stands for Data Loss Prevention, which is a technology that can monitor, detect and prevent the unauthorized transmission of sensitive data, such as PII (Personally Identifiable Information). DLP can be implemented on endpoints, networks, servers or cloud services to protect data in motion, in use or at rest. DLP can also block or alert on data transfers that violate predefined policies or rules. DLP is the best tool to assist with detecting an employee who has accidentally emailed a file containing a customer’s PII, as it can scan the email content and attachments for any data that matches the criteria of PII and prevent the email from being sent or notify the administrator of the incident. Verified References: Data Loss Prevention Guide to Blocking Leaks - CompTIA https://www.comptia.org/content/guides/data-loss-prevention-a-step-by-step-guide-to-blocking-leaks Data Loss Prevention – SY0-601 CompTIA Security+ : 2.1 https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/data-loss-prevention-4/ Data Loss Prevention – CompTIA Security+ SY0-501 – 2.1 https://www.professormesser.com/security-plus/sy0-501/data-loss-prevention-3/
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #4
A company needs to centralize its logs to create a baseline and have visibility on its security events Which of the following technologies will accomplish this objective?
Correct answer: A
Explanation
Security information and event management (SIEM) is a solution that collects, analyzes, and correlates logs and events from various sources such as firewalls, servers, applications, etc., within an organization’s network. It can centralize logs to create a baseline and have visibility on security events by providing a unified dashboard and reporting system for log management and security monitoring.
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #5
A company wants the ability to restrict web access and monitor the websites that employees visit, Which Of the following would best meet these requirements?
Correct answer: A
Explanation
An internet proxy is a server that acts as an intermediary between a client and a destination server on the internet. It can restrict web access and monitor the websites that employees visit by filtering the requests and responses based on predefined rules and policies, and logging the traffic and activities for auditing purposes
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #6
An organization has expanded its operations by opening a remote office. The new office is fully furnished with office resources to support up to 50 employees working on any given day. Which of the following VPN solutions would best support the new office?
Correct answer: C
Explanation
Site-to-site VPN is a type of VPN solution that connects two or more networks or sites across the public internet in a secure and encrypted way. Site-to-site VPN can be implemented using VPN appliances, such as firewalls or routers, that can establish and maintain the VPN tunnel between the sites. Site-to-site VPN can support multiple users or devices that need to access resources on the other site without requiring individual VPN clients or software. Site-to-site VPN is the best solution to support the new remote office, as it can provide secure and seamless connectivity between the office network and the main network of the organization. Verified References: Virtual Private Networks – SY0-601 CompTIA Security+ : 3.3 https://www.professormesser.com/security-plus/sy0-601/sy0-601-video/virtual-private-networks- sy0-601- (See Site-to-Site VPN) VPN Technologies – CompTIA Security+ SY0-501 – 3.2 https://www.professormesser.com/security-plus/sy0-501/vpn-technologies/ (See Site-to-Site VPN) Security+ (Plus) Certification | CompTIA IT Certifications https://www.comptia.org/certifications/security (See Domain 3: Architecture and Design, Objective 3.3: Given a scenario, implement secure network architecture concepts.)
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #7
A user reports constant lag and performance issues with the wireless network when working at a local coffee shop A security analyst walks the user through an installation of Wireshark and gets a five-minute pcap to analyze. The analyst observes the following output: Which of the following attacks does the analyst most likely see in this packet capture?

Correct answer: B
Explanation
An evil twin is a type of wireless network attack that involves setting up a rogue access point that mimics a legitimate one. It can trick users into connecting to the rogue access point instead of the real one, and then intercept or modify their traffic, steal their credentials, launch phishing pages, etc. In this packet capture, the analyst can see that there are two access points with the same SSID (CoffeeShop) but different MAC addresses (00:0c:41:82:9c:4f and 00:0c:41:82:9c:4e). This indicates that one of them is an evil twin that is trying to impersonate the other one.
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #8
An organization is building a new headquarters and has placed fake cameras around the building in an attempt to discourage potential intruders. Which of the following kinds of controls describes this security method?
Correct answer: B
Explanation
A deterrent control is a type of security control that is designed to discourage potential intruders from attempting to access or harm a system or network. A deterrent control relies on the perception or fear of negative consequences rather than the actual enforcement of those consequences. A deterrent control can also be used to influence the behavior of authorized users by reminding them of their obligations and responsibilities. An example of a deterrent control is placing fake cameras around the building, as it can create the illusion of surveillance and deter potential intruders from trying to break in. Other examples of deterrent controls are warning signs, security guards, or audit trails. References: https://www.ibm.com/topics/security-controls https://www.f5.com/labs/learning-center/what-are-security-controls
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #9
An organization has hired a security analyst to perform a penetration test The analyst captures 1Gb worth of inbound network traffic to the server and transfers the pcap back to the machine for analysis. Which of the following tools should the analyst use to further review the pcap?
Correct answer: D
Explanation
Wireshark is a tool that can analyze pcap files, which are files that capture network traffic. Wireshark can display the packets, protocols, and other details of the network traffic in a graphical user interface. Nmap is a tool that can scan networks and hosts for open ports and services. CURL is a tool that can transfer data from or to a server using various protocols. Neat is a tool that can test network performance and quality.
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Question #10
A web architect would like to move a company's website presence to the cloud. One of the management team's key concerns is resiliency in case a cloud provider's data center or network connection goes down. Which of the following should the web architect consider to address this concern?
Correct answer: D
Explanation
Availability zones are the most appropriate cloud feature to address the concern of resiliency in case a cloud provider’s data center or network connection goes down. Availability zones are physically separate locations within an Azure region that have independent power, cooling, and networking. Each availability zone is made up of one or more data centers and houses infrastructure to support highly available, mission-critical applications. Availability zones are connected with high- speed, private fiber-optic networks. Azure services that support availability zones fall into two categories: Zonal services – you pin the resource to a specific zone (for example, virtual machines, managed disks, IP addresses), or Zone-redundant services – platform replicates automatically across zones (for example, zone- redundant storage, SQL Database). To achieve comprehensive business continuity on Azure, build your application architecture using the combination of availability zones with Azure region pairs. You can synchronously replicate your applications and data using availability zones within an Azure region for high- availability and asynchronously replicate across Azure regions for disaster recovery protection.
Continue with SY0-601: CompTIA Security 2021
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in SY0-601: CompTIA Security 2021, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Discussion
Explain your reasoning, not just the letterOther CompTIA certifications
- SK0-004: CompTIA Server (opens in a new tab)
- SY0-701: CompTIA Security 2023 (opens in a new tab)
- N10-008: CompTIA Network (opens in a new tab)
- CS0-002: CompTIA CySA Certification Exam (CS0-002) (opens in a new tab)
- N10-009: CompTIA Network+ Exam (opens in a new tab)
- N10-007: CompTIA Network 2018 (opens in a new tab)
- CS0-003: CompTIA CySA (CS0-003) (opens in a new tab)
- 220-1102: CompTIA A Certification Exam: Core 2 (opens in a new tab)
- SK0-005: CompTIA Server Certification Exam (opens in a new tab)
- 220-1101: CompTIA A Certification Exam: Core 1 (opens in a new tab)
- XK0-005: CompTIA Linux (opens in a new tab)
- CS0-001: CompTIA CySA Certification Exam (opens in a new tab)
Reviews
Write a review★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit SharmaVerified buyer
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar NyströmVerified buyer
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah SmithVerified buyer
FAQ
Learn More: https://www.comptia.org/certifications
- Q1: Is the CompTIA Security+ SY0-601 exam still available?
- A: No. The English version of SY0-601 retired on July 31, 2024. It was replaced by SY0-701, which launched on November 7, 2023, and CompTIA expects the next version, Security+ V8, to launch on or around November 17, 2026.
- Q2: How many questions were on the SY0-601 exam and how long was it?
- A: SY0-601 had a maximum of 90 multiple-choice and performance-based questions and a 90-minute time limit. The current SY0-701 exam uses the same format.
- Q3: What was the passing score for SY0-601?
- A: The passing score was 750 on a scale of 100 to 900, and SY0-701 keeps the same passing score.
- Q4: What domains did the SY0-601 exam cover and how were they weighted?
- A: SY0-601 was weighted Attacks, Threats and Vulnerabilities 24%, Architecture and Design 21%, Implementation 25%, Operations and Incident Response 16% and Governance, Risk and Compliance 14%. SY0-701 is weighted General Security Concepts 12%, Threats, Vulnerabilities and Mitigations 22%, Security Architecture 18%, Security Operations 28% and Security Program Management and Oversight 20%.
- Q5: What experience did CompTIA recommend for SY0-601?
- A: CompTIA recommended at least two years of work experience in IT systems administration with a security focus, hands-on technical information security experience and broad knowledge of security concepts.
- Q6: How much does the current Security+ exam cost?
- A: CompTIA listed the retail price of the Security+ SY0-701 exam at US$404 as of January 2025. CompTIA adjusts voucher prices periodically, so check the CompTIA store for the current figure.
- Q7: In what languages is the current Security+ exam offered and when does it retire?
- A: As of October 2026, SY0-701 is available in English, Japanese, Portuguese, Spanish and Thai. CompTIA plans to retire the English version on June 11, 2027 and the translated versions on August 13, 2027.
- Q8: Does a Security+ earned on SY0-601 still count?
- A: Yes. Security+ is valid for three years from the date you passed, so a certification earned on SY0-601 remains valid for its full term and can be renewed through continuing education or by earning a higher-level certification.
- Q9: What is the SY0-601: CompTIA Security 2021 exam?
- A: SY0-601: CompTIA Security 2021 is a CompTIA certification exam. Judging by the questions in our bank, it concentrates on analyst, administrative, pcap, accounts and controls.
- Q10: What topics does the SY0-601: CompTIA Security 2021 exam cover?
- A: Questions in our SY0-601: CompTIA Security 2021 bank cluster around analyst, administrative, pcap, accounts, controls, recently, building and office. Working through the full set is the quickest way to find which of these you are weakest on.
- Q11: How should I prepare for SY0-601: CompTIA Security 2021?
- A: Work through the SY0-601: CompTIA Security 2021 practice questions here, checking your answer on each one, then sit the practice test to rehearse the exam under timed conditions before the real thing.
- Q12: Are these real SY0-601: CompTIA Security 2021 exam questions?
- A: They are drawn from officially released past questions and from community members who have sat SY0-601: CompTIA Security 2021. Answers are verified and updated weekly.
- Q13: Where do I register for the SY0-601: CompTIA Security 2021 exam?
- A: Register through CompTIA directly at https://www.comptia.org/certifications. Exampractice is not affiliated with CompTIA and does not administer the exam.
- Q14: Is there a free SY0-601: CompTIA Security 2021 sample?
- A: Yes. Every SY0-601: CompTIA Security 2021 page shows a free sample of real questions. Upgrading opens the full bank and the practice test.
- Q15: What are CompTIA Certification Exams?
- A: CompTIA Certification Exams validate your expertise in various IT disciplines, including networking, security, cloud computing, and IT support. These certifications demonstrate your proficiency in applying best practices and industry standards to manage and troubleshoot IT environments.
- Q16: Why should I pursue CompTIA Certification?
- A: CompTIA Certification enhances your professional credibility, showcasing your skills and knowledge in essential IT areas. This can lead to better job opportunities, higher salaries, and career advancement in IT support, networking, cybersecurity, and cloud computing fields.
- Q17: What are the benefits of CompTIA Certification?
- A: Benefits include recognition as a certified IT professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest IT industry trends and best practices.
- Q18: Who should take CompTIA Certification Exams?
- A: IT professionals, network administrators, cybersecurity experts, cloud engineers, and anyone involved in managing and supporting IT infrastructure should consider these certifications to validate their expertise and advance their careers.
- Q19: What types of CompTIA Certification Exams are available?
- A: CompTIA offers various certification paths, including:
- Q20: How do I prepare for CompTIA Certification Exams?
- A: Preparation can include official CompTIA training courses, study guides, practice exams, online tutorials, and hands-on experience in relevant IT disciplines.
- Q21: Where can I take CompTIA Certification Exams?
- A: CompTIA Certification Exams can be taken at authorized Pearson VUE testing centers worldwide or online, providing flexibility to fit your schedule and location.
- Q22: How do CompTIA Certifications impact my career?
- A: CompTIA Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in IT support, networking, cybersecurity, and cloud computing.
- Q23: Are there any prerequisites for CompTIA Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior certifications. Check the specific requirements for each certification path on the CompTIA website.
- Q24: How often do I need to recertify for CompTIA Certifications?
- A: CompTIA Certifications typically require recertification every three years to ensure that certified professionals stay updated with the latest IT technologies and industry practices.



