Objective 1.1

SY0-701

Compare and contrast various types of security controls

Objective 1.1 sits in General Security Concepts, which carries 12% of the Security+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

1-1General Security Concepts

A company wants everyone signing in to a server to see a notice that activity may be monitored and recorded, and to acknowledge it first. Which measure fits?

A signed acceptable use policy collected during employee onboardingAn acceptable use policy is signed once at hire, far from the moment of access.
An audit record written whenever a privileged command runsAudit records serve accountability after the fact and never appear on a user's screen.
A system use notification banner displayed before logonCorrect · your answerCorrect.
A quarterly awareness course covering monitoring practiceAwareness courses build knowledge on a schedule.

Correct.

Checked against nvlpubs.nist.gov, September 2026

Concept

Some controls work by changing behavior rather than by blocking it. A statement presented at the moment of access sets out the rules, captures consent, and warns of consequences, which supports enforcement later. On its own it stops nothing, so organizations pair it with technical restrictions.

Why C

NIST describes system use notifications as messages or warning banners shown before individuals log in to systems, applied only to logon interfaces used by human beings, which is precisely the placement the company wants.

Source

System use notifications can be implemented using messages or warning banners displayed before individuals log in to systems. System use notifications are used only for access via logon interfaces with human users. Notifications are not required when human interfaces do not exist.

NIST SP 800-53 Rev. 5, AC-8 System Use Notification, checked September 2026
#controls#deterrent#banner

Now you: objective 1.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

1-1General Security Concepts

An engineer leaves a company. Accounts are disabled the same hour, yet the person still holds a hardware token, a building pass, and office keys. What remains outstanding?

Sample question 2 of 3

1-1General Security Concepts

A team replaces cooling fans and worn drives in data center racks on a fixed schedule while every system is still running normally. Which purpose does that servicing serve?

Sample question 3 of 3

1-1General Security Concepts

Analysts on a trading floor step away from their desks for short breaks and do not want to close their work. A company needs those screens protected. What applies?

That’s 3 of the full Security+ bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in General Security Concepts