CompTIA Security+ Practice Test of the Day 260606

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 2.3 (Explain various types of vulnerabilities) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260606

10 questions • Single best answer

Question 1

A penetration tester discovers that an application verifies a user's permissions and then performs an action moments later, allowing the value to change in between. Exploiting this timing gap grants unauthorized access. Which vulnerability does this describe?

A. Buffer overflow B. Memory injection C. SQL injection D. Race condition

Question 2

An attacker sends more data than a fixed-length input field can hold, overwriting adjacent memory and altering program execution. The application fails to validate input length. Which vulnerability is being exploited?

A. Race condition B. Buffer overflow C. Cross-site scripting D. Misconfiguration

Question 3

A web application passes user-supplied form input directly into a database query without sanitization, letting an attacker read other users' records. The attacker manipulates the query logic through input. Which web-based vulnerability is present?

A. SQL injection B. Cross-site scripting C. Buffer overflow D. Side loading

Question 4

An attacker submits a malicious script into a comment field that later runs in other visitors' browsers when they view the page. The site fails to encode user output. Which web-based vulnerability does this represent?

A. SQL injection B. Race condition C. Cross-site scripting D. Virtual machine escape

Question 5

A researcher exploits a hypervisor flaw that lets code running inside a guest virtual machine reach the host operating system. The isolation boundary between guest and host is broken. Which vulnerability is described?

A. Resource reuse B. Virtual machine escape C. Jailbreaking D. Side loading

Question 6

An organization keeps running an operating system that the vendor no longer supports or patches, leaving newly discovered flaws permanently unaddressed. Replacement has been delayed for budget reasons. Which vulnerability category does this represent?

A. Zero-day B. Misconfiguration C. Race condition D. End-of-life system

Question 7

Attackers exploit a previously unknown flaw in widely used software before the vendor is aware or a patch exists. Defenders have no signature or fix available at the time. Which type of vulnerability is this?

A. Legacy B. Misconfiguration C. Zero-day D. Buffer overflow

Question 8

A cloud storage bucket is left with public read access due to an administrator's incorrect setting, exposing sensitive files to anyone. No software flaw is involved, only an improper setup. Which vulnerability does this illustrate?

A. Misconfiguration B. Zero-day C. Buffer overflow D. Virtual machine escape

Question 9

A user removes the manufacturer's built-in software restrictions on a corporate smartphone to install unauthorized apps, weakening its security model. This grants elevated privileges the vendor intended to block. Which mobile vulnerability does this describe?

A. Side loading B. Jailbreaking C. Resource reuse D. Memory injection

Question 10

Attackers compromise a trusted software vendor and embed harmful code into a routine product upgrade distributed to all customers. Organizations install it believing it is legitimate. Which vulnerability does this scenario highlight?

A. Race condition B. Cross-site scripting C. Misconfiguration D. Malicious update

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260606

Related Posts

Leave a Comment Cancel Reply