CompTIA Security+ Practice Test of the Day 260616

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.4 (Explain security alerting and monitoring concepts and tools) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260616

10 questions • Single best answer

Question 1

A SOC team at a hospital wants to centralize logs from firewalls, servers, and endpoints to correlate events and trigger alerts in one console. Which platform meets this need?

A. Antivirus console B. DLP gateway C. SIEM D. NetFlow collector

Question 2

An analyst is overwhelmed by repetitive low-value notifications from the monitoring system. She adjusts thresholds and rules to reduce noise. What activity is this?

A. Alert tuning B. Archiving C. Quarantine D. Log aggregation

Question 3

A compliance team must retain monitoring logs for seven years to satisfy regulation. They move older logs to long-term storage. Which activity is this?

A. Reporting B. Alerting C. Scanning D. Archiving

Question 4

A network engineer wants devices to automatically send messages to a manager when interface errors spike. Which mechanism provides these unsolicited notifications?

A. NetFlow B. Benchmarks C. Quarantine D. SNMP traps

Question 5

A security tool detects suspected malware on a workstation and automatically moves the file to an isolated location. What response action occurred?

A. Alert tuning B. Archiving C. Quarantine D. Log aggregation

Question 6

An analyst wants to verify systems against a recognized secure configuration standard automatically. Which protocol supports this automated compliance checking?

A. SNMP B. SCAP C. DLP D. NetFlow

Question 7

A team deploys lightweight software on each endpoint to collect and forward telemetry to the SIEM. Which collection approach is this?

A. Archiving B. Agentless C. Agent-based D. NetFlow

Question 8

A financial firm wants to detect and block emails containing customer account numbers leaving the network. Which tool category addresses this?

A. Data loss prevention B. Antivirus C. SIEM D. NetFlow

Question 9

An engineer needs visibility into which hosts are talking to each other and traffic volumes, without capturing full packet payloads. Which technology provides this?

A. Benchmarks B. NetFlow C. Quarantine D. SCAP

Question 10

A manager wants periodic summaries of monitored security events delivered to executives showing trends and incidents. Which monitoring activity produces these?

A. Scanning B. Archiving C. Alert tuning D. Reporting

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260616

Related Posts

Leave a Comment Cancel Reply