CompTIA Security+ Practice Test of the Day 260714

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.4 (Explain security alerting and monitoring concepts and tools) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260714

10 questions • Single best answer

Question 1

An engineer at a managed security service provider centralizes logs from hundreds of client devices into a single platform. Leadership wants automated correlation of events across many sources to surface threats. Which tool best supports this requirement?

A. NetFlow B. Antivirus C. Security information and event management (SIEM) D. Data loss prevention (DLP)

Question 2

Analysts at a financial services firm are overwhelmed by repetitive low-value alerts that are almost always benign. A manager wants to adjust detection thresholds and rule logic to cut this noise. Which activity should the team perform?

A. Log archiving B. Alert tuning C. Log aggregation D. Quarantine

Question 3

An endpoint tool at a retail chain detects a malicious file on a workstation. Policy requires the system to automatically isolate the file so it cannot execute or spread. Which response action is described?

A. Alert tuning B. Log archiving C. Rescanning D. Quarantine

Question 4

A network team at a logistics company needs visibility into traffic volume and communication patterns between internal hosts. They want records of source, destination, and byte counts without capturing full packet payloads. Which technology provides this?

A. NetFlow B. SNMP traps C. Data loss prevention (DLP) D. Antivirus

Question 5

A government agency wants to stop employees from emailing files containing classified identifiers outside the organization. Staff need a control that inspects content and blocks unauthorized transfers. Which tool meets this requirement?

A. Security information and event management (SIEM) B. NetFlow C. Data loss prevention (DLP) D. Security Content Automation Protocol (SCAP)

Question 6

An operations team at a cloud provider wants network devices to send unsolicited notifications the moment a hardware fault or threshold breach occurs. They prefer devices to push alerts rather than wait to be polled. Which mechanism fits?

A. NetFlow B. Log aggregation C. Agentless scanning D. SNMP traps

Question 7

A compliance analyst wants a standardized way for tools to express and exchange security configuration and vulnerability data across products. The goal is automated, consistent checking against established benchmarks. Which standard supports this?

A. NetFlow B. Security Content Automation Protocol (SCAP) C. Security information and event management (SIEM) D. Data loss prevention (DLP)

Question 8

A security team wants to monitor servers without installing software on each host, relying instead on remote protocols to gather data. They accept reduced depth in exchange for easier deployment. Which monitoring approach is this?

A. Agentless monitoring B. Agent-based monitoring C. Log aggregation D. Quarantine

Question 9

After an investigation, a SOC must retain collected log data in long-term storage to meet regulatory and forensic requirements. The data is rarely accessed but must remain available for years. Which activity does this describe?

A. Alerting B. Scanning C. Aggregation D. Archiving

Question 10

A SOC manager must produce periodic summaries of alert volumes, incident trends, and control effectiveness for executives. The output translates raw monitoring data into digestible metrics for decision-makers. Which activity is being performed?

A. Alert tuning B. Archiving C. Reporting D. Scanning

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260714

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply