CompTIA Security+ (SY0-701)/Topics/Governance, Risk & Compliance (GRC)

Governance, Risk & Compliance (GRC) practice test: free CompTIA Security+ (SY0-701) questions

Drill 26 Governance, Risk & Compliance (GRC) questions with instant explanations and official citations.

Practice domain

Topic overview & passing targets

Governance, Risk & Compliance (GRC) Domain Overview

The Governance, Risk & Compliance (GRC) module is a core testing domain on the CompTIA Security+ (SY0-701). QuizCram provides 26 practice questions for this domain with verified handbook rationales.

  • Target Passing Benchmark: 83% (SY0-701 · maximum of 90 items · 90-minute limit · 750/900 to pass)
  • Domain Questions: 26 items
  • Source Material: Official Handbooks
Take Full Timed Practice Quiz All CompTIA Security+ (SY0-701) Questions

Sample Practice Questions for Governance, Risk & Compliance (GRC)

  1. Question 1Ref: CompTIA Security+ SY0-701 — 5.2 Security Frameworks and Controls

    A company is implementing an information security management system. Which framework provides a certifiable, systematic approach to managing sensitive company information?

    Show Answer & Explanation

    Correct Answer
    C. ISO/IEC 27001

    The keyed answer is "ISO/IEC 27001". ISO/IEC 27001 provides a certifiable, systematic framework for establishing, implementing, maintaining, and continually improving an information security management system. NIST CSF offers guidelines, CIS provides prioritized controls, and COBIT focuses on IT governance.

Frequently Asked Questions About Governance, Risk & Compliance (GRC)

QuizCram covers 26 practice questions in the Governance, Risk & Compliance (GRC) domain, mapped directly to the official examination blueprint.

The benchmark score is 83% (SY0-701 · maximum of 90 items · 90-minute limit · 750/900 to pass).

Yes. All questions on QuizCram are written against official handbooks and blueprint specifications with legal citations.