CompTIA Security+ Practice Test of the Day 260715

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 4.5 (Given a scenario, modify enterprise capabilities to enhance security) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260715

10 questions • Single best answer

Question 1

A systems administrator at a hospital wants to block unmanaged devices from joining the corporate LAN until they pass a posture check. Compliant endpoints should be admitted while noncompliant ones are quarantined. Which solution enforces this at connection time?

A. Data loss prevention B. File integrity monitoring C. Network access control D. Endpoint detection and response

Question 2

A SOC analyst needs a tool that records process activity on workstations and can isolate a host and automatically roll back malicious changes. Signature-only antivirus has missed recent threats. Which capability best fits this requirement?

A. Endpoint detection and response B. Network access control C. Sender Policy Framework D. Content categorization

Question 3

A financial firm discovers employees emailing spreadsheets of customer account numbers to personal inboxes. Management wants technology that inspects outbound content and blocks transfers of sensitive information. Which control should be deployed?

A. File integrity monitoring B. Web filter C. Network access control D. Data loss prevention

Question 4

An administrator wants alerts whenever critical system binaries or configuration files are modified unexpectedly on a server. The goal is detecting tampering that may indicate compromise. Which control provides this capability?

A. Web filtering B. File integrity monitoring C. DNS filtering D. User behavior analytics

Question 5

A mail administrator wants to publish a DNS record listing the servers authorized to send messages for the company domain. Receiving servers should reject mail from unlisted sources. Which email authentication mechanism accomplishes this?

A. DomainKeys Identified Mail B. DMARC C. Secure/Multipurpose Internet Mail Extensions D. Sender Policy Framework

Question 6

A security engineer wants outbound email to carry a cryptographic signature so recipients can verify the message was not altered and truly came from the domain. Which mechanism adds this signature using public-key cryptography?

A. DomainKeys Identified Mail B. Sender Policy Framework C. Network access control D. Data loss prevention

Question 7

After deploying SPF and DKIM, a company wants to tell receiving servers how to handle messages that fail authentication and to receive abuse reports on its domain. Which policy framework provides this alignment and reporting?

A. File integrity monitoring B. Content categorization C. Domain-based Message Authentication Reporting and Conformance D. Network access control

Question 8

A network architect must place public-facing web and mail servers where internet users can reach them without exposing the internal LAN. The design should isolate these hosts between two firewalls. Which architecture achieves this segmentation?

A. Network access control B. Screened subnet C. Group Policy D. Web filter

Question 9

A SOC deploys an inline sensor that inspects traffic and drops packets matching known attack patterns. Analysts must keep its detection patterns current as new exploits emerge. Which sensor component are they updating?

A. Reputation lists B. Access control lists C. Group Policy objects D. Signatures

Question 10

A company wants to stop users from reaching known malicious domains by intercepting name resolution and returning a block response for flagged sites. This should occur before a connection is established. Which control provides this protection?

A. DNS filtering B. File integrity monitoring C. Data loss prevention D. Screened subnet

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260715

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply