CompTIA Security+ Practice Test of the Day 260725

Welcome to today’s CompTIA Security+ practice test!

This practice test uses our new UI!

Today’s practice test is based on Subdomain 5.6 (Given a scenario, implement security awareness practices) from the CompTIA Security+ SY0-701 objectives.

This beginner-level practice test is inspired by the CompTIA Security+ (SY0-701) exam and is designed to help you reinforce key cybersecurity concepts on a daily basis.

These questions are not official exam questions, nor are they brain dumps, but they reflect topics and scenarios relevant to the Security+ certification. Use them to test your knowledge, identify areas for improvement, and build daily cybersecurity habits.

Note: CompTIA and Security+ are registered trademarks of CompTIA. This content is not affiliated with or endorsed by CompTIA.

To choose CompTIA Security+ practice tests based on specific domains/subdomains, click that link.

CompTIA Security+ Practice Test of the Day 260725

10 questions • Single best answer

Question 1

A security awareness manager at a national retail chain sends staff deceptive test emails containing fake malicious links to measure click rates. Employees who click are enrolled in extra training. Which practice does this describe?

A. Credential harvesting attack B. Vishing exercise C. Simulated phishing campaign D. External penetration test

Question 2

An employee at a manufacturing firm gets an email demanding an urgent wire transfer, using a spoofed executive name and a mismatched reply-to address. She flags the urgency and sender inconsistencies. Which skill is she demonstrating?

A. Password management B. Recognizing a phishing attempt C. Operational security D. Data masking

Question 3

A financial services help desk receives dozens of forwarded questionable emails from staff each week. Leadership wants a consistent process for triage, analysis, and user feedback. Which security awareness element does this address?

A. Situational awareness B. Anomalous behavior recognition C. Insider threat mitigation D. Responding to reported suspicious messages

Question 4

A threat hunter notices a payroll clerk logging in at 0300 from a new country and pulling bulk HR files, actions never seen from that account. This deviation triggers an alert. Which awareness concept applies?

A. Anomalous behavior recognition B. Phishing recognition C. Password rotation D. Clean desk policy

Question 5

A risk management team at a defense contractor worries about employees with legitimate access misusing it to leak classified designs. Training now covers spotting disgruntled colleagues and reporting concerns. Which risk are they targeting?

A. Supply chain compromise B. Advanced persistent threat C. Insider threat D. Shadow IT

Question 6

A security program manager at a utility company rolls out guidance requiring long passphrases, unique credentials per system, and a vault to store them. The goal is reducing reuse and weak secrets. Which awareness topic is this?

A. Removable media control B. Password management C. Data loss prevention D. Access recertification

Question 7

An analyst at an energy firm finds staff plugging unknown USB drives and charging cords into workstations. New awareness materials warn against connecting untrusted portable devices. Which topic do these materials cover?

A. Situational awareness B. Social engineering C. Operational security D. Removable media and cables

Question 8

An incident response team at a hospital network learns an attacker phoned the help desk posing as a locked-out executive to reset credentials. Training now covers pretexting and impersonation tactics. Which threat category is emphasized?

A. Password spraying B. Social engineering C. Denial of service D. SQL injection

Question 9

A security team at a consulting firm updates training for staff who operate from cafes and home networks. It covers shoulder surfing, safe Wi-Fi, and screen locking. Which workforce scenario does this guidance target?

A. On-premises data center staff B. Air-gapped operations C. Hybrid/remote work D. Third-party vendors

Question 10

A CISO at a cloud provider wants dashboards tracking training completion and phishing-test click rates, reviewed at launch and then quarterly. Executives use these to gauge program maturity over time. Which awareness activity is this?

A. Reporting and monitoring B. Penetration testing C. Situational awareness D. Incident containment

Next step: Hands-on

Theory tested. Now put it into practice.

The exam checks what you know, but employers check what you can do.

HTB Academy’s guided labs cover the same ground hands-on, with you at the keyboard.

Build hands-on skills →

This is an affiliate link. If you sign up, The Cybersecurity Trail earns a commission at no cost to you.

Take more CompTIA Security+ practice tests

CompTIA Security+ Practice Test of the Day 260725

Theory tested. Now put it into practice.

Related Posts

Leave a Comment Cancel Reply