CompTIA Security+ Practice Test of the Day 260215

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on subdomain 4.2 (Explain the security implications of proper hardware, software, and data asset management.) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260215

10 questions • Single best answer

Question 1

A hospital is retiring 200 workstations that stored patient records. The security team uses DoD-approved software to overwrite all sectors of each hard drive multiple times with random data. What disposal method is being applied?

A. Destruction B. Certification C. Data retention D. Sanitization

Question 2

A security analyst suspects there are unauthorized devices on the corporate network. She runs a network scan to discover and catalog all active hosts, comparing results against the configuration management database. What asset management activity is she performing?

A. Asset classification B. Decommissioning C. Enumeration D. Procurement audit

Question 3

After a storage array containing classified government data is decommissioned, drives are physically shredded in a certified destruction facility. A written report confirming that all drives were destroyed per policy is issued to the organization. What disposal element does this written report represent?

A. Sanitization B. Destruction C. Certification D. Data retention

Question 4

A financial institution's security team participates early in the server procurement process, reviewing vendor security practices, hardware bill of materials, and supply chain provenance before purchase orders are issued. Which asset management phase does this represent?

A. Disposal/decommissioning B. Assignment/accounting C. Monitoring/asset tracking D. Acquisition/procurement

Question 5

A security administrator creates an asset record for each newly received laptop that includes the device serial number, the department that owns it, the employee accountable for it, and the data classification of information it may process. What asset management activity does this describe?

A. Asset enumeration B. Assignment and accounting C. Decommissioning D. Sanitization

Question 6

An internal audit reveals that a terminated employee's laptop was returned to IT but was stored in an unlocked room for six months without being processed through the decommissioning queue. The drive still contains sensitive HR records. What asset management failure does this represent?

A. Failure to classify the asset during procurement B. Failure to enumerate the device during onboarding C. Failure to apply proper disposal and decommissioning procedures D. Failure to track asset ownership during assignment

Question 7

An organization discovers that several USB drives containing confidential data were discarded without prior data removal. Which control, if implemented, would MOST directly prevent this recurrence?

A. Full-disk encryption on all endpoints B. A formal media sanitization policy requiring documented data removal before disposal of removable media C. Continuous network-based asset inventory scanning D. Endpoint detection and response (EDR) software on all workstations

Question 8

A company's software asset management program compares the number of application licenses purchased against actual installations detected across all endpoints, flagging systems running unlicensed software. What is the PRIMARY security benefit of this practice?

A. Preventing employees from installing hardware drivers without approval B. Identifying unauthorized or unlicensed software that may introduce security risks to the environment C. Ensuring software purchases comply with the procurement policy D. Automatically decommissioning end-of-life applications

Question 9

An IT technician is preparing to reassign a laptop previously used by an HR director to a new employee in the marketing department. The device contains confidential HR records. What should the technician do FIRST before reassigning the device?

A. Delete the HR director's user profile and create a new one for the marketing employee B. Reinstall the operating system without removing the existing data first C. Perform documented sanitization appropriate for confidential data before reissuing the device D. Transfer ownership in the asset management system and reissue immediately

Question 10

A large enterprise implements a continuous asset discovery tool that automatically detects new devices when they connect to the network, compares them against the authorized asset inventory, and alerts the security team when unknown devices appear. What asset management activity does this represent?

A. Acquisition and procurement B. Assignment and accounting C. Disposal and decommissioning D. Monitoring and asset tracking via inventory and enumeration

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260215

Related Posts