CompTIA Security+ Practice Test of the Day 260610

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 3.2 (Given a scenario, apply security principles to secure enterprise infrastructure) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260610

10 questions • Single best answer

Question 1

A network engineer configures a single hardened host that administrators must connect through to reach servers in a secured management zone. Direct access to those servers is otherwise blocked. Which solution is being used?

A. Proxy server B. Load balancer C. Web application firewall D. Jump server

Question 2

To protect a public web app from injection and cross-site scripting, a team deploys a control that inspects and filters HTTP requests at layer 7. It blocks malicious application-layer traffic. Which appliance is this?

A. Load balancer B. Web application firewall C. Jump server D. Proxy server

Question 3

A security team deploys an inline appliance that detects malicious network traffic and actively blocks it in real time before it reaches hosts. It does more than alert. Which device is described?

A. Intrusion prevention system B. Intrusion detection system C. Proxy server D. Load balancer

Question 4

To handle high demand, an organization distributes incoming client requests across multiple backend servers, improving availability and performance. If one server fails, others absorb the work. Which appliance provides this?

A. Jump server B. Web application firewall C. Load balancer D. Proxy server

Question 5

Before any device gains access at the switch port, it must authenticate against a central server using a port-based access control standard. Unauthenticated devices are denied connectivity. Which mechanism is this?

A. SD-WAN B. 802.1X C. IPSec D. Secure access service edge

Question 6

A company secures site-to-site traffic over the internet by encrypting and authenticating IP packets within a tunnel between two gateways. The protocol suite operates at the network layer. Which technology is used?

A. Transport Layer Security B. SD-WAN C. 802.1X D. Internet Protocol Security

Question 7

A security appliance is configured so that if it crashes, all traffic is automatically blocked rather than allowed through. Security is prioritized over availability during failure. Which failure mode is this?

A. Fail-open B. Active-passive C. Fail-closed D. Inline

Question 8

An organization routes all outbound employee web requests through an intermediary that fetches content on their behalf, enforcing policy and caching pages. Internal hosts never connect directly to external sites. Which appliance is this?

A. Proxy server B. Load balancer C. Jump server D. Intrusion detection system

Question 9

A company replaces its basic packet filter with an appliance offering deep packet inspection, application awareness, and integrated intrusion prevention in one platform. It evaluates traffic well beyond ports and addresses. Which device is this?

A. Web application firewall B. Next-generation firewall C. Load balancer D. Proxy server

Question 10

An architect groups systems of similar trust and sensitivity into defined network segments, placing public-facing servers in one area and internal databases in a more protected one. Controls govern traffic between areas. Which infrastructure concept is applied?

A. Failure modes B. Tunneling C. Port security D. Security zones

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260610

Related Posts

Leave a Comment Cancel Reply