CompTIA Security+ Practice Test of the Day 260723

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.4 (Summarize elements of effective security compliance) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260723

10 questions • Single best answer

Question 1

A privacy program manager at a multinational retailer receives a customer request to erase all personal data the company holds about them. The customer cites a regional privacy law. Which privacy principle is being invoked?

A. Data inventory B. Right to be forgotten C. Attestation D. Data retention

Question 2

A SaaS analytics firm handles customer data strictly according to instructions from the client that collected it. The firm never decides how or why the data is used. Which role does the SaaS firm hold?

A. Data controller B. Data owner C. Data subject D. Data processor

Question 3

A healthcare provider fails a regulatory audit and regulators impose a mandatory monetary penalty for mishandling patient records. Leadership must record this specific consequence. Which consequence of non-compliance occurred?

A. Fines B. Sanctions C. Reputational damage D. Loss of license

Question 4

A payment processor repeatedly violates industry standards, and the governing body revokes its authorization to handle card transactions. The company can no longer legally operate that service. Which consequence does this represent?

A. Fines B. Contractual impacts C. Loss of license D. Sanctions

Question 5

During annual compliance monitoring, employees must formally sign a statement confirming they have read and will follow the security policy. Management uses these signed confirmations as proof. Which activity does this describe?

A. Attestation and acknowledgement B. Due diligence C. Automation D. Data inventory

Question 6

A compliance team prepares a report on control effectiveness intended solely for the board and executive leadership. It will not be shared with regulators or outside parties. Which type of compliance reporting is this?

A. Attestation B. External reporting C. Automation D. Internal reporting

Question 7

After a publicized breach, a retailer suffers falling customer trust and negative media coverage even though no fine was issued. Executives note the harm to the brand. Which consequence of non-compliance is this?

A. Sanctions B. Reputational damage C. Loss of license D. Contractual impacts

Question 8

A large enterprise struggles to manually track thousands of controls for continuous compliance. The security team deploys tooling that continuously collects evidence and flags gaps without human effort. Which approach improves their monitoring?

A. Attestation B. Due care C. Automation D. Right to be forgotten

Question 9

A privacy officer wants to know exactly what personal data the company stores, where it lives, and how long it is kept. She builds a catalog to govern these decisions. Which practice supports this?

A. Right to be forgotten B. Attestation C. Controller designation D. Data inventory and retention

Question 10

A company knowingly exports encryption technology to a prohibited nation, and a government body bars it from future federal contracts as punishment. Leadership must categorize this outcome. Which consequence of non-compliance is this?

A. Fines B. Sanctions C. Reputational damage D. Loss of license

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260723

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply