CompTIA Security+ Practice Test of the Day 071925

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 1.4 (Explain the importance of using appropriate cryptographic solutions) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 071925

10 questions • Single best answer

Question 1

A security architect is designing a system to allow two parties to securely exchange encrypted messages without first sharing a secret key. Which type of encryption BEST supports this requirement?

A. Symmetric encryption B. Key stretching C. Asymmetric encryption D. Hashing

Question 2

A financial institution requires that all digitally signed documents prove both the identity of the signer and that the document has not been altered since signing. Which cryptographic mechanism provides BOTH of these assurances?

A. Symmetric encryption B. Digital signature C. Salting D. Key escrow

Question 3

A company needs to issue digital certificates to employees for secure email. The organization establishes a trusted entity responsible for verifying identities, issuing certificates, and maintaining their validity. Which PKI component is described?

A. Certificate revocation list B. Certificate signing request C. Key management system D. Certificate authority

Question 4

A database stores user passwords as hashes, but the team fears GPU clusters testing billions of combinations per second. They implement PBKDF2 to slow down the hashing process. Which cryptographic technique does PBKDF2 represent?

A. Salting B. Key stretching C. Tokenization D. Steganography

Question 5

An organization handling highly sensitive encryption keys deploys a dedicated hardware device that generates, stores, and performs cryptographic operations in a tamper-resistant environment, preventing key material from ever existing in plaintext outside the device. Which tool BEST meets this requirement?

A. Trusted Platform Module (TPM) B. Key management system C. Hardware Security Module (HSM) D. Secure enclave

Question 6

A security analyst finds an attacker obtained a database of unsalted MD5 hashes and used a precomputed table to crack thousands of passwords in minutes. Which two techniques combined would have MOST directly defended against this specific attack?

A. Tokenization and encryption B. Salting and key stretching C. Hashing and steganography D. Key escrow and digital signatures

Question 7

A security researcher suspects malware is being delivered by embedding executable code within image files attached to innocent-looking emails. Recipients see a normal photo, but the image contains hidden malicious data. Which technique is the attacker using?

A. Tokenization B. Data masking C. Steganography D. Encryption

Question 8

A web server's TLS certificate is revoked after its private key is compromised. A client browser needs to verify the certificate's revocation status in real time without downloading an entire revocation list. Which mechanism provides real-time, per-certificate status checks?

A. CRL B. Key escrow C. OCSP D. CSR

Question 9

A laptop is configured so its encryption keys are tied to the device's hardware. If the drive is removed and installed in another machine, the data cannot be decrypted because the keys are bound to the original device's chip. Which component provides this capability?

A. Hardware Security Module (HSM) B. Trusted Platform Module (TPM) C. Secure enclave D. Key management system

Question 10

An organization wants to use a single SSL/TLS certificate to secure its primary domain and all immediate subdomains — such as mail.example.com, portal.example.com, and vpn.example.com — without purchasing separate certificates for each. Which certificate type BEST meets this requirement?

A. Self-signed certificate B. Root certificate C. Third-party certificate D. Wildcard certificate

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 071925

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply