CompTIA Security+ Practice Test of the Day 260623

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.2 (Explain elements of the risk management process) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260623

10 questions • Single best answer

Question 1

A risk analyst at a regional hospital estimates a ransomware event would cause $40,000 in damage per occurrence and is expected twice yearly. Leadership wants the yearly expected loss figure for budgeting. Which value should the analyst calculate?

A. Exposure factor B. Annualized loss expectancy C. Single loss expectancy D. Annualized rate of occurrence

Question 2

An analyst at a manufacturing plant values a critical server at $80,000 and estimates a fire would destroy half of it. She needs the expected monetary loss from one such incident. Which calculation produces this value?

A. Annualized loss expectancy B. Exposure factor C. Single loss expectancy D. Annualized rate of occurrence

Question 3

A utility company's risk team records that a particular substation failure has historically happened three times per year. They want to express how frequently this threat is expected annually. Which metric captures that frequency?

A. Mean time between failures B. Exposure factor C. Single loss expectancy D. Annualized rate of occurrence

Question 4

A startup's security team lacks historical loss data, so they rank risks using High, Medium, and Low ratings based on expert judgment. They must name this evaluation approach. Which type of risk analysis is being used?

A. Qualitative B. Quantitative C. Continuous D. Ad hoc

Question 5

An MSSP analyst needs a centralized document that logs each identified risk with its owner, score, and treatment status. Auditors request this single source for tracking. Which artifact should the analyst maintain?

A. Business impact analysis B. Risk appetite statement C. Risk register D. Key risk indicator

Question 6

A financial services firm defines a metric that signals when failed logins approach a level predicting elevated breach likelihood. The board wants an early-warning measure tied to emerging risk. Which term describes this metric?

A. Risk threshold B. Key risk indicator C. Risk tolerance D. Risk appetite

Question 7

A fast-growing fintech's leadership intentionally pursues aggressive, high-risk ventures to maximize growth and market share. They want the term for this bold, growth-oriented risk posture. Which risk appetite classification applies?

A. Expansionary B. Conservative C. Neutral D. Avoidance

Question 8

A retailer purchases a cyber-insurance policy so a third party absorbs the financial losses from potential breaches. Management wants the name of this risk management strategy. Which approach is being applied?

A. Accept B. Mitigate C. Avoid D. Transfer

Question 9

A bank evaluates launching a cryptocurrency product but concludes the exposure is too high, so it cancels the initiative entirely to eliminate the risk. Leadership needs the term for this decision. Which strategy is this?

A. Accept B. Avoid C. Transfer D. Mitigate

Question 10

After a major outage, a cloud provider's continuity team defines the maximum tolerable time a critical service may be down before unacceptable harm. They must document this target in the business impact analysis. Which metric is this?

A. Recovery point objective B. Mean time to repair C. Recovery time objective D. Mean time between failures

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260623

Related Posts

Leave a Comment Cancel Reply