CompTIA Security+ Practice Test of the Day 090125

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 1.2 (Summarize fundamental security concepts) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 090125

10 questions • Single best answer

Question 1

An employee accidentally overwrites a critical database table with incorrect values during a batch update. The data is now inaccurate but remains accessible and no unauthorized party viewed it. Which CIA triad principle was MOST directly violated?

A. Confidentiality B. Availability C. Non-repudiation D. Integrity

Question 2

A legal team investigating an insider threat needs to prove a specific employee sent an email authorizing a fraudulent fund transfer. The email system uses S/MIME digital signatures on all outbound messages. Which security concept MOST directly supports proving the email's origin?

A. Confidentiality B. Authentication C. Non-repudiation D. Authorization

Question 3

A network administrator remotely connects to a network device and makes configuration changes. The SIEM records the admin's username, commands issued, source IP address, and timestamp of each change. Which AAA component BEST describes this logging behavior?

A. Authentication B. Authorization C. Accounting D. Non-repudiation

Question 4

In a Zero Trust architecture, the control plane makes policy decisions and the data plane enforces them. A policy denies database access to devices failing a health check. The component that receives the access request and enforces the deny decision in real time operates in which plane?

A. Control plane B. Management plane C. Data plane D. Orchestration plane

Question 5

A security team configures DNS so that queries for known C2 server domains are redirected to a controlled server that logs connections and returns null responses, preventing malware from reaching its operator. Which deception and disruption technology is described?

A. Honeypot B. DNS sinkhole C. Honeynet D. Fake telemetry

Question 6

A security team embeds a fake AWS access key in a publicly accessible GitHub repository. The key is actively monitored, and any attempt to use it generates an immediate alert to the SOC. Which deception technology BEST represents the embedded fake credential?

A. Honeyfile B. Honeypot C. Honeytoken D. Honeynet

Question 7

A corporate campus installs reinforced concrete pillars at the entrance to its parking structure to prevent vehicles from being used as weapons or driven into the building. Which physical security control is described?

A. Fencing B. Access control vestibule C. Lighting D. Bollards

Question 8

A Zero Trust architecture is redesigned so users can only access the specific applications required for their role, eliminating broad internal network access. Users can no longer browse freely across internal segments. Which Zero Trust concept BEST describes this design principle?

A. Adaptive identity B. Policy enforcement point C. Threat scope reduction D. Implicit trust

Question 9

After reviewing a financial institution's security program, auditors find it lacks DLP tools, insider threat monitoring, and a formal incident response plan. A consultant documents the difference between the current state and NIST CSF requirements. Which process BEST describes the consultant's activity?

A. Risk assessment B. Business impact analysis C. Vulnerability assessment D. Gap analysis

Question 10

A user attempts to access a restricted payroll application. The system first verifies the user's identity using MFA, then checks whether the user's role includes payroll permissions before granting entry. The permission check after identity verification represents which AAA component?

A. Accounting B. Authentication C. Non-repudiation D. Authorization

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 090125

Related Posts

Leave a Comment Cancel Reply