CompTIA Security+ Practice Test of the Day 260601

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 1.2 (Summarize fundamental security concepts) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260601

10 questions • Single best answer

Question 1

A penetration tester plants a fake file labeled "executive_salaries.xlsx" on a file server to alert the team if anyone opens it. The file has no legitimate business use and exists only to detect unauthorized access. Which deception technology does this represent?

A. Honeyfile B. Honeynet C. Honeypot D. DNS sinkhole

Question 2

An online retailer wants to ensure that a customer cannot later deny having placed a confirmed order. The security team implements digital signatures on each transaction. Which security concept does this primarily support?

A. Non-repudiation B. Confidentiality C. Availability D. Integrity

Question 3

A bank deploys a system that decides in real time whether to grant access by evaluating the user, device posture, and request context against defined rules. This component makes the access decision but does not enforce it. Which zero trust component is described?

A. Policy decision point B. Policy enforcement point C. Adaptive identity D. Threat scope reduction

Question 4

A hospital implements role-based access so clinicians only view records for their assigned patients. The goal is to prevent unauthorized disclosure of protected health information. Which element of the CIA triad does this primarily protect?

A. Confidentiality B. Integrity C. Availability D. Non-repudiation

Question 5

A security manager compares the organization's current control implementation against the requirements of a target framework to identify what is missing. The output is a prioritized list of deficiencies to remediate. Which activity does this describe?

A. Gap analysis B. Penetration test C. Risk transference D. Business impact analysis

Question 6

An enterprise adopts a model where no user or device is trusted by default, and every access request is continuously verified regardless of network location. The architecture separates the systems that decide policy from those that move user traffic. Which security model is being implemented?

A. Zero trust B. Defense in depth C. Implicit trust D. Least privilege

Question 7

A data center installs motion-activated lighting, video surveillance, and infrared sensors around its perimeter. Management wants to classify the purpose of these layered measures. Which security concept do these measures primarily support?

A. Physical security B. Logical segmentation C. Data sovereignty D. Authentication

Question 8

An identity platform increases the strength of authentication only when it detects risky context, such as a login from a new country or an unmanaged device. Normal logins remain frictionless. Which zero trust concept does this describe?

A. Adaptive identity B. Policy enforcement point C. Honeytoken D. Implicit deny

Question 9

A SOC team deploys an isolated network of decoy systems designed to lure attackers and observe their techniques in detail. The environment mimics production but holds no real data. Which deception technology does this represent?

A. Honeynet B. Honeyfile C. Honeytoken D. Sandbox

Question 10

A streaming company implements redundant servers and load balancing so its service remains accessible even during a hardware failure. Leadership wants to know which security principle this supports. Which element of the CIA triad is primarily addressed?

A. Availability B. Confidentiality C. Integrity D. Non-repudiation

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260601

Related Posts

Leave a Comment Cancel Reply