CompTIA Security+ Practice Test of the Day 260625

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.4 (Summarize elements of effective security compliance) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260625

10 questions • Single best answer

Question 1

A compliance officer at a healthcare network receives a patient request to permanently erase all stored personal data under applicable privacy law. The team must honor the deletion within the mandated timeframe. Which privacy principle governs this request?

A. Data minimization B. Data retention C. Right to be forgotten D. Data sovereignty

Question 2

A SaaS analytics provider stores and handles customer records strictly per its client's documented instructions. The client decides why and how the data is used, while the provider only executes the operations. Under privacy law, what role does the provider hold?

A. Processor B. Controller C. Data subject D. Custodian

Question 3

A licensed payment institution repeatedly fails mandated regulatory audits and ignores corrective directives. Regulators move to revoke its authorization to operate in the market. Which consequence of non-compliance does this represent?

A. Reputational damage B. Contractual impact C. Sanctions D. Loss of license

Question 4

A security program manager wants continuous validation that controls stay configured correctly across thousands of cloud assets. Manual checks cannot keep pace with the scale. Which approach best supports ongoing compliance monitoring here?

A. Annual self-assessment B. Automation C. Attestation D. Manual sampling

Question 5

After completing annual policy training, employees must formally sign a statement confirming they have read and will follow the security policy. Leadership signs a similar formal declaration of compliance for regulators. Which compliance element does this signing represent?

A. Attestation and acknowledgement B. Due care C. Compliance reporting D. Data inventory

Question 6

A SOC manager prepares a quarterly compliance summary intended only for the company's own board and audit committee. The report is not shared with regulators or outside parties. Which type of compliance reporting is this?

A. External reporting B. Attestation C. Internal reporting D. Regulatory examination

Question 7

A privacy team maps every system holding personal data and defines how long each record category must be kept before disposal. This catalog drives lawful storage limits. Which privacy practice does this describe?

A. Right to be forgotten B. Data inventory and retention C. Data minimization D. Attestation

Question 8

Before signing a contract, a risk team thoroughly investigates a prospective vendor's certifications, financials, and security posture. The goal is to confirm the partner meets required standards. Which compliance activity does this investigation reflect?

A. Attestation B. Compliance monitoring C. Sanctions D. Due diligence

Question 9

A retailer's breach is widely covered by national media, and customers begin closing accounts and switching to competitors. No fine has been issued, yet the brand's trust erodes sharply. Which consequence of non-compliance is most evident?

A. Reputational damage B. Fines C. Loss of license D. Sanctions

Question 10

A multinational firm must satisfy data protection rules that differ across the countries where it operates, including cross-border transfer restrictions. Counsel maps obligations spanning local, national, and global jurisdictions. Which privacy consideration drives this analysis?

A. Right to be forgotten B. Data minimization C. Legal implications D. Attestation

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260625

Related Posts

Leave a Comment Cancel Reply