CompTIA Security+ Practice Test of the Day 260713

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.3 (Explain various activities associated with vulnerability management) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260713

10 questions • Single best answer

Question 1

A vulnerability analyst at a healthcare provider reviews scanner output flagging a critical flaw on a server. Manual testing shows the reported weakness does not actually exist on that system. What does this result represent?

A. False negative B. False positive C. Compensating control D. Exposure factor

Question 2

A penetration tester exploits a flaw on a host that the recent scan reported as clean. The scanner missed a real, exploitable weakness. Which scanning error does this describe?

A. False negative B. False positive C. Confirmation D. Rescanning

Question 3

An analyst must rank dozens of findings by technical severity using a standardized zero-to-ten numeric scale. She needs an industry framework that rates each weakness consistently. Which system should she use?

A. CVE B. OSINT C. Common Vulnerability Scoring System (CVSS) D. CWE

Question 4

A threat hunter cross-references a discovered flaw against a public dictionary that assigns every known weakness its own standardized identifier. This enables consistent tracking across tools and vendors. Which reference provides these identifiers?

A. CVSS B. OSINT C. SIEM D. Common Vulnerabilities and Exposures (CVE)

Question 5

An analyst enriches vulnerability data using freely available public sources such as vendor advisories, forums, and news. She avoids paid or proprietary feeds. Which intelligence source is she using?

A. Proprietary threat feed B. Dark web source C. Open-source intelligence (OSINT) D. Information-sharing organization

Question 6

During a code review, a security engineer inspects an application's source without running it. The goal is to spot insecure functions and coding flaws early. Which testing method is this?

A. Dynamic analysis B. Static analysis C. Package monitoring D. Penetration testing

Question 7

A tester evaluates a running web application by sending crafted inputs and observing its behavior at runtime. No source code is examined. Which technique is being applied?

A. Dynamic analysis B. Static analysis C. Package monitoring D. Confirmation

Question 8

A software company invites external researchers to report security flaws in exchange for monetary rewards. Payouts scale with the severity of the disclosed weakness. Which program is described?

A. Penetration test B. Bug bounty program C. Threat feed D. System audit

Question 9

A legacy system cannot be patched without breaking a critical process. To reduce risk, the team isolates it and adds extra monitoring. Which remediation approach is this?

A. Patching B. Exception C. Compensating controls D. Rescanning

Question 10

An analyst applies patches to close several reported flaws. She then runs the scanner again to confirm the weaknesses are gone. Which step verifies that remediation succeeded?

A. Prioritization B. Segmentation C. Enumeration D. Rescanning

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260713

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply