CompTIA Security+ Practice Test of the Day 260709

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 3.3 (Compare and contrast concepts and strategies to protect data) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260709

10 questions • Single best answer

Question 1

A healthcare compliance officer wants payment card numbers replaced with non-sensitive substitute values so downstream systems never store the real numbers. The originals stay in a secure vault. Which method is this?

A. Masking B. Tokenization C. Hashing D. Encryption

Question 2

A multinational stores its EU customer records in Frankfurt so the data stays governed by that country's laws. Legal ties jurisdiction to where the data physically resides. Which concept applies?

A. Data sovereignty B. Geolocation C. Geographic restrictions D. Data at rest

Question 3

An engineer is designing protection for records while they are actively loaded in application memory and being processed. This is the point where data is most exposed. Which state describes it?

A. Data at rest B. Data in transit C. Data in use D. Data masking

Question 4

A support portal must display only the last four digits of a customer's Social Security number, hiding the rest from agents. The underlying value is unchanged. Which method is this?

A. Masking B. Tokenization C. Encryption D. Hashing

Question 5

A developer needs to store password verifiers so the original passwords can never be recovered, only compared. Integrity and one-way transformation are required. Which method fits?

A. Encryption B. Hashing C. Obfuscation D. Tokenization

Question 6

A bank classifies cardholder data that must be handled according to legally mandated external requirements such as PCI DSS. Handling is dictated by law and standards, not internal preference. Which data type is this?

A. Trade secret B. Proprietary data C. Public data D. Regulated data

Question 7

An administrator must protect archived database files stored on disk. Stolen drives should reveal nothing usable, yet authorized staff must still recover the contents. Which method should be applied?

A. Hashing B. Masking C. Encryption D. Segmentation

Question 8

A firm must block access to a sensitive dataset from countries outside its approved list. Controls should key on the requester's physical location. Which method achieves this?

A. Geographic restrictions B. Data sovereignty C. Permission restrictions D. Segmentation

Question 9

A security team administers a shared file repository. Each user should reach only the data their role requires, enforcing least privilege. Which method accomplishes this?

A. Segmentation B. Permission restrictions C. Obfuscation D. Masking

Question 10

A firm labels an unannounced merger document with its highest internal sensitivity tier, restricting it to a few executives. Exposure would cause severe organizational harm. Which classification best fits?

A. Public B. Sensitive C. Confidential D. Private

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260709

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply