CompTIA Security+ Practice Test of the Day 260618

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.6 (Given a scenario, implement and maintain identity and access management) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260618

10 questions • Single best answer

Question 1

An identity administrator at a SaaS provider wants users to authenticate once and access multiple integrated applications without re-entering credentials. Which capability achieves this?

A. Identity proofing B. Attestation C. Multifactor authentication D. Single sign-on

Question 2

A bank requires a password plus a fingerprint and a hardware token to log in. Which categories of authentication factors are being combined?

A. Know, are, and have B. Two of the same factor C. Somewhere you are only D. Something you know only

Question 3

A company grants permissions based on a user's job title, so all accountants automatically receive the same access set. Which access control model is this?

A. Role-based access control B. Rule-based access control C. Discretionary access control D. Mandatory access control

Question 4

A security policy ensures each user receives only the minimum access required to perform their duties. Which principle is being enforced?

A. Federation B. Attestation C. Least privilege D. Separation of duties

Question 5

When an employee leaves the company, the help desk must immediately disable accounts and revoke access. Which process governs this?

A. De-provisioning B. Identity proofing C. Just-in-time permissions D. Federation

Question 6

Two organizations want users from one to access resources in the other using a shared trust relationship between identity providers. Which approach enables this?

A. Discretionary access B. Federation C. Alert tuning D. Password vaulting

Question 7

A privileged access management tool grants administrators elevated rights only for a short approved window, then automatically revokes them. Which feature is this?

A. Single sign-on B. Identity proofing C. Federation D. Just-in-time permissions

Question 8

An enterprise standardizes on a protocol to exchange authentication and authorization assertions between an identity provider and web applications. Which protocol fits?

A. LDAP B. SAML C. OAuth D. SNMP

Question 9

A policy requires users to avoid reusing previous passwords and to change them after a set period. Which password concepts are being applied?

A. Reuse and expiration B. Biometrics and tokens C. Complexity and length D. Federation and SSO

Question 10

An organization eliminates passwords entirely, authenticating users with FIDO2 security keys and biometrics. Which approach is this?

A. Discretionary access B. Passwordless authentication C. Rule-based access D. Password vaulting

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260618

Theory tested. Now put it into practice.

Related Posts