CompTIA Security+ Practice Test of the Day 260626

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.5 (Explain types and purposes of audits and assessments) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260626

10 questions • Single best answer

Question 1

An online retailer hires an outside firm to simulate an attack with no prior knowledge of its network, systems, or credentials. Testers must discover everything from scratch, mimicking a real external adversary. Which testing approach is described?

A. Known environment B. Partially known environment C. Unknown environment D. Integrated testing

Question 2

A development team provides penetration testers with full source code, network diagrams, and administrative credentials before the engagement. The goal is maximum coverage of internal logic in minimal time. Which approach does this describe?

A. Known environment B. Unknown environment C. Partially known environment D. Passive reconnaissance

Question 3

A bank's security team gives external testers a few IP ranges and one low-privilege account but withholds full architecture documentation. The engagement blends insider and outsider perspectives. Which testing approach is this?

A. Known environment B. Unknown environment C. Integrated assessment D. Partially known environment

Question 4

During the recon phase, a tester gathers target details using public records, WHOIS data, and search engines, never sending packets to the target. No direct contact occurs. Which reconnaissance method is being used?

A. Active reconnaissance B. Passive reconnaissance C. Offensive testing D. Defensive testing

Question 5

A penetration tester runs port scans and sends crafted probes directly to a target's hosts to enumerate open services. These actions could be detected by defenders. Which reconnaissance method is described?

A. Passive reconnaissance B. Open-source intelligence C. Defensive testing D. Active reconnaissance

Question 6

After an assessment, a third party formally confirms in writing that the organization's controls meet a stated standard, giving assurance to clients and regulators. Leadership needs this signed validation for a contract. Which audit element provides it?

A. Attestation B. Self-assessment C. Penetration testing D. Reconnaissance

Question 7

A company's board forms an independent group of directors to oversee internal controls, financial reporting, and the internal audit function. This group reports findings directly to the board. Which governance structure is described?

A. Regulatory examination B. Independent third-party audit C. Audit committee D. Attestation

Question 8

An organization's own staff periodically review their security controls against an internal checklist to find gaps before any external review. No outside party participates. Which evaluation type is this?

A. External regulatory audit B. Self-assessment C. Independent third-party audit D. Penetration test

Question 9

A federally chartered bank must undergo a mandatory review by a government agency to verify ongoing compliance with banking laws. Failure could result in fines. Which type of external audit is this?

A. Self-assessment B. Internal compliance audit C. Attestation D. Regulatory examination

Question 10

An engagement authorizes testers to attempt entry into a data center by tailgating employees, bypassing badge readers, and probing door locks. The focus is facility security rather than networks. Which test type is this?

A. Physical penetration test B. Passive reconnaissance C. Compliance audit D. Defensive testing

Tired of Googling acronyms while practicing/studying?
Keep them all under your keyboard.

📋 GET_THE_DESK_MAT

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260626

Related Posts

Leave a Comment Cancel Reply