CompTIA Security+ Practice Test of the Day 260530

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.6 (Given a scenario, implement security awareness practices) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260530

10 questions • Single best answer

Question 1

An HR manager at a manufacturing firm wants to measure how many employees will click a malicious link before formal training begins. Which security awareness activity best meets this goal?

A. A simulated phishing campaign B. A tabletop exercise C. An acceptable use policy review D. A vulnerability scan

Question 2

An employee receives an email claiming to be from the CEO requesting an urgent gift card purchase. The organization wants a consistent way for staff to handle this. What guidance should the awareness program provide?

A. Reply asking the sender to confirm their identity B. Report the message to security using the established reporting process C. Forward the email to all colleagues as a warning D. Delete the message immediately and take no further action

Question 3

A SOC analyst notices a user who normally logs in from one city is suddenly authenticating from three countries within an hour. Which awareness concept does detecting this pattern represent?

A. Operational security B. Anomalous behavior recognition C. Situational awareness training D. Acceptable use enforcement

Question 4

A security awareness lead is building a program and wants employees to receive training when they are onboarded and again at regular intervals. Which two reporting and monitoring cadences does this describe?

A. Initial and recurring B. Development and execution C. Baseline and remediation D. Quantitative and qualitative

Question 5

A finance employee is approached at a conference by someone claiming to be a vendor who asks detailed questions about internal payment systems. The employee unknowingly reveals useful details. Which threat does awareness training aim to counter here?

A. Insider threat B. Social engineering C. Phishing campaign D. Anomalous behavior

Question 6

During an awareness session, employees are taught not to discuss project code names, travel schedules, or vendor details on public social media because adversaries could piece them together. Which practice is being reinforced?

A. Operational security B. Password management C. Situational awareness D. Removable media handling

Question 7

A company has shifted to hybrid work. The awareness team wants to address risks unique to employees working from home and coffee shops. Which topic is most relevant to include?

A. Securing home networks and avoiding public Wi-Fi for sensitive work B. Physical badge tailgating in the data center C. Server hardening baselines D. Change management approval workflows

Question 8

An employee finds an unlabeled USB drive in the parking lot and considers plugging it into a workstation to identify the owner. What should awareness training instruct the employee to do?

A. Plug it in but disable autorun first B. Do not connect it and report it to security C. Connect it to a personal laptop instead of a work device D. Copy its contents to a shared drive for review

Question 9

A security manager is rolling out a new awareness initiative. After defining objectives and creating content, the team begins delivering modules and running phishing simulations to staff. Which program phase does this delivery activity represent?

A. Development B. Execution C. Initial reporting D. Assessment

Question 10

An organization wants employees to use strong, unique credentials across systems without resorting to reuse or sticky notes. Which awareness topic and recommended tool best support this goal?

A. Password management using a password manager B. Operational security using data classification C. Situational awareness using badge readers D. Insider threat using DLP monitoring