CompTIA Security+ Practice Test of the Day 260624

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.3 (Explain the processes associated with third-party risk assessment and management) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260624

10 questions • Single best answer

Question 1

A procurement manager at a manufacturing firm is onboarding a cloud vendor and wants written assurance of guaranteed uptime and response times. Operations needs measurable performance commitments enforceable in the contract. Which agreement defines these metrics?

A. Memorandum of understanding B. Non-disclosure agreement C. Service-level agreement D. Business partners agreement

Question 2

A security program manager negotiating with a payment processor wants the contractual ability to inspect the vendor's security controls at any time. Legal asks which provision grants this inspection authority. Which clause should be included?

A. Service-level agreement B. Right-to-audit clause C. Rules of engagement D. Memorandum of understanding

Question 3

A threat intelligence team is sharing proprietary indicators with an external MSSP before a joint engagement. Management wants to legally bind the partner to keep the shared information confidential. Which agreement accomplishes this?

A. Master service agreement B. Statement of work C. Service-level agreement D. Non-disclosure agreement

Question 4

A company hires an external firm to perform penetration testing against its network. Before testing begins, both parties must define scope, timing, and authorized targets in writing. Which document specifies these boundaries?

A. Rules of engagement B. Service-level agreement C. Memorandum of understanding D. Due diligence

Question 5

A financial services firm is evaluating a SaaS provider's financial stability, reputation, and security posture before signing. Leadership wants this background investigation completed during vendor selection. Which process does this describe?

A. Vendor monitoring B. Due diligence C. Conflict of interest D. Supply chain analysis

Question 6

During vendor selection, an analyst discovers a procurement officer holds a financial stake in one of the bidding companies. Leadership is concerned this relationship could bias the decision. Which issue does this represent?

A. Due diligence B. Supply chain analysis C. Conflict of interest D. Right-to-audit clause

Question 7

After onboarding a third-party provider, a security team wants continuous oversight of the vendor's security performance throughout the contract lifecycle. They schedule recurring reviews and metric tracking. Which activity does this describe?

A. Vendor selection B. Due diligence C. Independent assessment D. Vendor monitoring

Question 8

A vendor risk team needs a standardized way to collect self-reported security control information from dozens of suppliers. They want consistent, comparable responses across all vendors. Which tool best supports this?

A. Questionnaires B. Penetration testing C. Rules of engagement D. Service-level agreement

Question 9

A government agency is assessing risk introduced by hardware components sourced through multiple downstream manufacturers. Analysts want to evaluate security across every tier of the production pipeline. Which assessment does this represent?

A. Independent assessment B. Supply chain analysis C. Due diligence D. Vendor monitoring

Question 10

Two business partners want a broad foundational contract governing all future transactions, with specific deliverables defined separately per project. Legal recommends one overarching agreement plus per-project documents. Which establishes the overarching terms?

A. Statement of work B. Memorandum of understanding C. Master service agreement D. Work order

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260624

Related Posts

Leave a Comment Cancel Reply