CompTIA Security+ Practice Test of the Day 260702

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 2.1 (Compare and contrast common threat actors and motivations) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260702

10 questions • Single best answer

Question 1

A regional bank discovers an intruder harvesting credit card numbers and reselling them on criminal marketplaces. Analysts note the actor pursues any lucrative dataset without political or ideological interest. Which motivation best describes this actor?

A. Espionage B. Financial gain C. Philosophical beliefs D. Revenge

Question 2

A government agency faces a stealthy, multi-year campaign exfiltrating classified defense documents. Investigators find custom malware, vast funding, and patience consistent with a foreign government's intelligence arm. Which actor type is most likely responsible?

A. Hacktivist B. Unskilled attacker C. Organized crime D. Nation-state actor

Question 3

An activist collective breaches a pipeline company and defaces its website with messages protesting environmental damage. They seek publicity for a cause rather than money or stolen records. Which threat actor category fits this group?

A. Hacktivist B. Insider threat C. Organized crime D. Nation-state actor

Question 4

A SOC finds a soon-to-be-terminated database administrator copying proprietary schemas to a personal drive before departure. The person already holds legitimate credentials and broad access. Which threat actor type does this represent?

A. Unskilled attacker B. Nation-state actor C. Insider threat D. Hacktivist

Question 5

A teenager with little technical knowledge runs a downloaded exploit kit against a school portal by following an online tutorial. The attempts are noisy, generic, and rely entirely on prewritten tools. Which actor category best describes this individual?

A. Organized crime B. Unskilled attacker C. Nation-state actor D. Insider threat

Question 6

An enterprise is hit by a professional ransomware operation offering negotiation portals and affiliate recruitment. The group is well-funded, structured, and purely money-driven. Which threat actor type is this?

A. Hacktivist B. Shadow IT C. Unskilled attacker D. Organized crime

Question 7

A security manager discovers marketing staff using an unsanctioned cloud storage app to speed up projects. No malice exists, but the unapproved service bypasses IT governance and controls. Which internal risk category does this describe?

A. Shadow IT B. Insider threat C. Nation-state actor D. Hacktivist

Question 8

An analyst compares two adversaries and must explain why one sustains zero-day development and lengthy operations while the other cannot. The key differentiator is the backing and money available to each. Which actor attribute explains the gap?

A. Geographic location B. Motivation C. Resources and funding D. Intent

Question 9

A gaming platform suffers repeated DDoS floods that knock services offline during peak hours, with no ransom or data theft. The attacker appears focused solely on preventing customers from reaching the platform. Which motivation is most evident?

A. Espionage B. Service disruption C. Blackmail D. Financial gain

Question 10

An attacker steals compromising executive emails and threatens public release unless paid, focusing on leverage rather than resale. The intent centers on coercion through the threat of exposure. Which motivation best fits?

A. Espionage B. War C. Philosophical beliefs D. Blackmail

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260702

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply