CompTIA Security+ Practice Test of the Day 260614

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.2 (Explain the security implications of proper hardware, software, and data asset management) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260614

10 questions • Single best answer

Question 1

A hospital's IT asset manager is retiring drives from old imaging workstations. The drives will be reused internally, but stored patient records must be unrecoverable first. Which process meets this requirement?

A. Destruction B. Enumeration C. Sanitization D. Classification

Question 2

A cloud security team finds several virtual servers with no accountable individual listed in the asset register. Audits stall because no one can authorize changes or patching. Which asset management practice is missing?

A. Assigning ownership B. Data retention C. Procurement review D. Enumeration

Question 3

A financial services firm wants to label datasets as public, internal, or confidential so handling controls match each data set's value. The security team needs the foundational step that drives these protections. What should they implement first?

A. Inventory B. Sanitization C. Retention scheduling D. Data classification

Question 4

An MSSP onboarding a new client cannot confirm which endpoints exist on the network, leaving gaps in coverage. Analysts need an authoritative, complete record of all hardware and software in use. What should be created?

A. Data retention policy B. Asset inventory C. Disposal certificate D. Classification scheme

Question 5

A threat hunting team wants to actively discover and list every device and service responding on the corporate network to validate the asset register. They run scans to identify live hosts. Which activity is this?

A. Enumeration B. Sanitization C. Procurement D. Retention

Question 6

A defense contractor must dispose of failed SSDs containing classified data, and policy forbids any possibility of reuse or recovery. The drives must be physically rendered unusable. Which method is required?

A. Reformatting B. Sanitization C. Destruction D. Encryption

Question 7

After a third-party vendor shreds a bank's decommissioned drives, auditors require documented proof that the media was destroyed properly. The bank needs an artifact confirming the outcome. What should the vendor provide?

A. Data retention schedule B. Certificate of destruction C. Asset inventory D. Classification label

Question 8

A government agency must keep certain records for a legally mandated seven years before deletion, balancing compliance with storage costs. The security team defines how long each data type is kept. Which control governs this?

A. Classification policy B. Sanitization standard C. Acquisition policy D. Data retention policy

Question 9

A retail company keeps finding unvetted devices with insecure firmware entering its environment. Leadership wants security requirements enforced before any hardware is bought and onboarded. Which function should be strengthened?

A. Acquisition/procurement process B. Sanitization C. Enumeration D. Data retention

Question 10

A SOC manager wants continuous visibility into the location, status, and assignment of laptops as employees move between offices. Static spreadsheets quickly become outdated. Which capability best addresses this?

A. Data classification B. Destruction C. Asset tracking/monitoring D. Procurement review

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260614

Related Posts

Leave a Comment Cancel Reply