CompTIA Security+ Practice Test of the Day 021326

Question 1

A security administrator at a mid-sized healthcare company is reviewing how patient medical records containing PII and PHI are stored in a cloud-hosted database. The organization wants to ensure that even if physical storage media are stolen from the cloud provider’s data center, the data remains unreadable. Which of the following controls BEST addresses this requirement?

A. Hashing the database records B. Encrypting the database at rest using AES-256 C. Implementing TLS for all database connections D. Tokenizing sensitive data fields within the application

Question 2

An analyst in a SOC observes that a multinational organization stores European customer data in a U.S.-based cloud region, and auditors have raised concerns about legal jurisdiction and privacy compliance. Which concept is MOST relevant to this issue?

A. Data masking B. Data sovereignty C. Geographic dispersion D. Segmentation

Question 3

Your organization processes credit card transactions and wants to reduce the scope of systems subject to PCI DSS audits. The security team proposes replacing stored credit card numbers with non-sensitive reference values while maintaining transaction functionality. Which method BEST supports this objective?

A. Encryption B. Hashing C. Tokenization D. Obfuscation

Question 4

A security administrator is designing a system that processes proprietary trade secrets in memory before writing results to disk. The administrator wants to focus specifically on protecting the data while it is actively being processed by applications. Which data state is being addressed?

A. Data at rest B. Data in transit C. Data in use D. Data in backup

Question 5

A company wants to ensure that only employees in the finance department can access payroll data classified as confidential, with access restricted based on job function. Which control BEST meets this requirement?

A. Network segmentation B. Geographic restriction C. Permission restrictions using RBAC D. Data obfuscation

Question 6

An organization classifies its research data as critical intellectual property and wants to prevent unauthorized copying between network zones. Which strategy BEST reduces this risk?

A. Implementing network segmentation B. Increasing backup frequency C. Deploying load balancing D. Establishing geographic redundancy

Question 7

A global organization must restrict access to sensitive engineering documents so they can only be accessed from specific countries due to export control regulations. Which control BEST satisfies this requirement?

A. Encryption B. Geographic restrictions C. Hashing D. Journaling

Question 8

Your company wants to share sanitized datasets with a third-party analytics vendor while preserving realistic structure and formatting but removing real customer identities. Which technique BEST meets this requirement?

A. Full-disk encryption B. Data masking C. Load balancing D. Clustering

Question 9

An enterprise is evaluating whether to use hashing or encryption for protecting stored passwords in an internal application and wants to ensure passwords cannot be reversed. Which solution BEST meets this goal?

A. Symmetric encryption B. Asymmetric encryption C. Hashing with salting D. Tokenization

Question 10

A security architect is reviewing strategies to protect financial data stored in multiple cloud providers and wants to ensure confidentiality even if one provider is compromised. Which approach BEST protects the data itself regardless of provider security?

A. Multi-cloud deployment B. Clustering C. Encryption with customer-managed keys D. Warm site implementation

CompTIA Security+ Practice Test of the Day 021326

ByThe Test Master

Related Post

CompTIA Security+ Practice Test of the Day 260309

CompTIA Security+ Practice Test of the Day 260307

CompTIA Security+ Practice Test of the Day 260306

Leave a Reply Cancel reply

You missed

CompTIA Security+ Practice Test of the Day 260309

CompTIA Security+ Practice Test of the Day 260307

CompTIA Security+ Practice Test of the Day 260306

What is a Security Engineer and How to Become One (Cybersecurity Career Guide 2026)