CompTIA Security+ Practice Test of the Day 260615

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.3 (Explain various activities associated with vulnerability management) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260615

10 questions • Single best answer

Question 1

A penetration tester at a manufacturing company scans a server and flags a critical flaw. After manual testing, the service is patched and not actually exploitable. What does this result represent?

A. False negative B. Compensating control C. False positive D. Exposure factor

Question 2

An analyst reviews findings and must rank which flaws to fix first. She wants a standardized numeric score reflecting severity. Which system provides this?

A. SCAP B. OSINT C. CVE D. CVSS

Question 3

A security team analyzes code without executing it to find insecure functions before deployment. Which technique are they using?

A. Penetration testing B. Static analysis C. Package monitoring D. Dynamic analysis

Question 4

A SOC validates that a recently remediated server no longer contains the reported flaw. They run the scanner again against the host. What activity is this?

A. Responsible disclosure B. Segmentation C. Exception D. Rescanning

Question 5

A company cannot patch a legacy device required for production. To reduce risk, the team isolates it on a restricted network zone. What approach is this?

A. Patching B. Insurance C. Segmentation D. Rescanning

Question 6

A threat intelligence analyst gathers vulnerability data from publicly accessible blogs, forums, and vendor advisories. Which source category describes this collection?

A. Proprietary feed B. Information-sharing organization C. Open-source intelligence D. Dark web

Question 7

An organization launches a program inviting external researchers to report flaws in exchange for payment. What is this initiative called?

A. Threat feed B. System audit C. Bug bounty program D. Package monitoring

Question 8

A scanner reports a host as clean, but attackers later exploit an unreported flaw on it. Which scanning error occurred?

A. Exception B. Verification C. False negative D. False positive

Question 9

A risk team formally approves leaving a low-severity finding unremediated because the cost outweighs the benefit. The decision is documented and time-bound. What is this?

A. Exception B. Validation C. Compensating control D. Prioritization

Question 10

After remediation, a vulnerability manager compiles results into a document for leadership showing trends and open items. Which activity is this?

A. Threat hunting B. Eradication C. Scanning D. Reporting

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260615

Related Posts

Leave a Comment Cancel Reply