CompTIA Security+ Practice Test of the Day 260607

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 2.4 (Given a scenario, analyze indicators of malicious activity) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260607

10 questions • Single best answer

Question 1

An analyst in a SOC observes a user account authenticating from New York and then from Singapore just fifteen minutes later. No VPN or actual travel could explain the geographic jump. Which indicator of malicious activity does this represent?

A. Impossible travel B. Account lockout C. Concurrent session usage D. Resource consumption

Question 2

An attacker tries a single common password against hundreds of different user accounts to avoid triggering lockouts. The approach stays under each account's failure threshold. Which password attack is being used?

A. Brute force B. Credential replay C. Spraying D. Birthday

Question 3

A login service logs thousands of rapid, sequential password guesses against one administrator account in under a minute. The attacker tries every possible combination. Which password attack does this indicate?

A. Spraying B. Brute force C. On-path D. Downgrade

Question 4

During a wireless session, an attacker secretly positions themselves between a client and server, relaying and altering traffic without either party's knowledge. Both endpoints believe they talk directly. Which network attack is this?

A. Distributed denial-of-service B. DNS poisoning C. Replay D. On-path attack

Question 5

A retailer's website becomes unreachable as a botnet floods it with massive traffic from thousands of compromised hosts. Legitimate customers cannot load any pages. Which network attack does this describe?

A. On-path B. Brute force C. Distributed denial-of-service D. Privilege escalation

Question 6

After gaining access to a low-level user account, an attacker exploits a flaw to obtain administrative rights on the system. The attacker now controls functions the original account could not. Which activity does this represent?

A. Privilege escalation B. Replay C. Directory traversal D. Spraying

Question 7

An attacker manipulates a web request with sequences like ../ to reach files outside the web root, retrieving system configuration files. The application fails to restrict path input. Which application attack is this?

A. SQL injection B. Cross-site scripting C. Buffer overflow D. Directory traversal

Question 8

A SOC dashboard shows numerous user accounts suddenly disabled after repeated failed sign-in attempts within a short window. The pattern suggests an automated credential attack in progress. Which indicator is most directly observed?

A. Impossible travel B. Account lockout C. Blocked content D. Missing logs

Question 9

A disgruntled developer plants code that lies dormant until a specific date, when it deletes critical files. The hidden code triggers only when its condition is met. Which malware type does this describe?

A. Worm B. Rootkit C. Logic bomb D. Keylogger

Question 10

An organization's files are suddenly encrypted and a message demands payment in cryptocurrency to restore access. Operations halt until a decryption key is provided. Which malware attack does this indicate?

A. Ransomware B. Spyware C. Bloatware D. Trojan

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260607

Related Posts

Leave a Comment Cancel Reply