Welcome to today’s practice test!

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

 

Results

QUIZ START

#1. An analyst in a SOC observes that multiple hosts have downloaded an unsigned executable from an external IP and initiated outbound traffic to unknown domains. What type of malware is most likely involved?

Previous
Next

#2. An attacker is attempting to exploit a web application by entering JavaScript into a form field to execute commands in a user’s browser. What is the attacker trying to exploit?

Previous
Next

#3. A security administrator at a healthcare provider is implementing role-based access controls (RBAC) to limit data exposure. What principle is the administrator applying?

Previous
Next

#4. An attacker intercepts and modifies communication between a user and a web server, presenting the user with a fake login page. What type of attack is this?

Previous
Next

#5. A company enforces full-disk encryption on all employee laptops. What security principle does this best support?

Previous
Next

#6. A system administrator notices that a legacy application cannot support multifactor authentication. Which control should be implemented to minimize risk?

Previous
Next

#7. A security engineer deploys a honeynet within a segmented portion of the network. What is the primary purpose of this setup?

Previous
Next

#8. A company needs to securely transfer files containing large amounts of PII to an external partner weekly. Which is the BEST solution for this purpose?

Previous
Next

#9. A web server is under a reflected DDoS attack using DNS amplification. Select the two BEST mitigations:

Select all that apply:

Previous
Next

#10. An attacker sends malformed input to a server, causing it to crash. Which vulnerability is being exploited?

Previous
Finish

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To view CompTIA Security+ practice tests on other days, click here.To view answers for today’s questions, expand the Answers accordion below.

Answers
  1. B
  2. C
  3. B
  4. B
  5. C
  6. A
  7. D
  8. D
  9. A, C
  10. B