CompTIA Security+ Practice Test of the Day 260720

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.1 (Summarize elements of effective security governance) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260720

10 questions • Single best answer

Question 1

A CISO at a regional healthcare network drafts a document that forbids using corporate email for personal business. Employees must sign it before receiving network access. Which governance document is being created?

A. Standard B. Procedure C. Acceptable use policy D. Guideline

Question 2

A security program manager needs a document detailing the exact steps staff follow to grant new hires system access. The instructions must be repeatable and consistent across teams. Which artifact fits this need?

A. Procedure B. Policy C. Standard D. Regulation

Question 3

An organization must comply with rules imposed by a national data protection authority that carry legal penalties. The security team classifies the source of these obligations. Which external consideration applies?

A. Industry B. Local C. Contractual D. Regulatory

Question 4

A financial firm creates a single enterprise-wide committee that approves security policies and sets strategic direction. Individual business units cannot override its decisions. Which governance structure is described?

A. Decentralized governance B. Centralized governance C. Procedure ownership D. Data stewardship

Question 5

During an audit, a company must identify who is accountable for deciding how a specific dataset is classified and protected. This person does not perform daily maintenance. Which role is this?

A. Data owner B. Data custodian C. Data processor D. Data subject

Question 6

A manufacturer wants a document that recommends, but does not require, best practices for configuring employee laptops. Teams may deviate when justified. Which type of governance document is this?

A. Policy B. Standard C. Guideline D. Procedure

Question 7

An enterprise assigns a party that handles personal data strictly according to instructions from the organization that determines the purpose of processing. The team labels both roles. What is the instructing organization called?

A. Data custodian B. Data processor C. Data steward D. Data controller

Question 8

A retailer creates a formal document describing how it will restore critical operations after a major disruption such as a fire. It focuses on keeping the company operating, not IT recovery specifics. Which document is this?

A. Incident response policy B. Business continuity plan C. Change management policy D. Acceptable use policy

Question 9

A governance team schedules periodic reviews so policies stay aligned with new threats and regulations. Outdated documents are updated or retired. Which governance activity does this describe?

A. Monitoring and revision B. Onboarding C. Change management D. Risk transference

Question 10

An organization must follow security expectations set by a card payment council, though these are not government laws. Non-compliance risks loss of processing privileges. Which external consideration is this?

A. Regulatory B. Local C. Industry D. Global

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260720

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply