CompTIA Security+ Practice Test of the Day 260706

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 2.5 (Explain the purpose of mitigation techniques used to secure the enterprise) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260706

10 questions • Single best answer

Question 1

A systems administrator at a manufacturing plant wants to stop an infected corporate workstation from reaching plant control devices. She divides the network so IT and operational traffic cannot cross freely. Which mitigation technique is she applying?

A. Least privilege B. Configuration enforcement C. Segmentation D. Isolation

Question 2

A security engineer at a law firm must ensure only pre-approved executables run on endpoints, with everything else blocked by default. Users report unknown programs no longer launch. Which control produces this behavior?

A. Application allow list B. Antivirus signature scanning C. Host-based intrusion prevention D. Access control list

Question 3

An identity team finds a junior analyst holds domain administrator rights never used in their role. The team reduces the account to only the permissions the job requires. Which principle does this enforce?

A. Configuration enforcement B. Access control list C. Segmentation D. Least privilege

Question 4

A vulnerability scanner flags dozens of servers missing a critical vendor update tied to active exploitation. The operations team schedules deployment of the vendor's fixes across affected hosts. Which mitigation technique addresses these findings?

A. Decommissioning B. Patching C. Encryption D. Isolation

Question 5

A healthcare provider must protect patient records on laptops in case a device is lost or stolen. The security team enables full-disk protection that renders stored data unreadable without a key. Which hardening technique is applied?

A. Encryption B. Segmentation C. Access control list D. Monitoring

Question 6

A workstation must block inbound connections on the device itself, independent of any perimeter appliance. An administrator configures rules on the endpoint's own filtering software to drop unwanted traffic. Which hardening technique is used?

A. Host-based intrusion prevention system B. Application allow list C. Host-based firewall D. Network segmentation

Question 7

During hardening, an analyst finds servers still responding on Telnet and other legacy services no one uses. He turns off these unnecessary listening services to shrink the attack surface. Which mitigation technique is this?

A. Decommissioning B. Disabling ports and protocols C. Least privilege D. Isolation

Question 8

An organization permanently retires several aging servers. Before disposal, the team wipes drives, revokes certificates, and removes the assets from inventory and monitoring. Which mitigation technique describes this end-of-life process?

A. Isolation B. Patching C. Hardening D. Decommissioning

Question 9

A new IoT camera deployment uses vendor factory credentials still documented publicly online. Before go-live, the team replaces each device's built-in login with unique strong secrets. Which hardening technique reduces this risk?

A. Changing default passwords B. Application allow list C. Segmentation D. Monitoring

Question 10

A compliance audit finds workstations drifting from the approved secure baseline over time. The security team deploys a tool that continuously checks systems and automatically reapplies required settings. Which mitigation technique maintains the baseline?

A. Least privilege B. Decommissioning C. Configuration enforcement D. Isolation

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260706

Related Posts

Leave a Comment Cancel Reply