Skip to content

CompTIA Practice Tests
A+ Practice Tests
Security+ Practice Tests
Network+ Practice Tests

CompTIA Security+ Practice Test 5

Time limit: 0

Quiz Summary

0 of 20 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Test complete. Results are being recorded.

Results

0 of 20 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

Not categorized 0%

Next Test Main Menu

Question 1 of 20

1. Question
Which significant concern can become challenging when implementing monitoring software for an extensive and complex infrastructure with various resources and huge datasets strewn across multiple campuses?
- A. True Positives
- B. False Positives
- C. False Negatives
- D. True Negatives
Correct

Incorrect
Question 2 of 20

2. Question
How does advanced user behavior analytics (UBA) analyze various variables, such as login times and types of files accessed, to continually adapt and incorporate new data and refine its understanding of normal user behavior over time?
- A. By enforcing policy-driven security solutions at the end-user level
- B. By taking a holistic view of user security across the networks, correlating data across various channels and layers.
- C. By using various machine learning algorithms to establish baseline behaviors for each user.
- D. By using static rule sets to match the new user behavior with baseline behaviors.
Correct

Incorrect
Question 3 of 20

3. Question
Arrange the steps of the DMARC process in the correct order by dragging the boxed text into its correct place.
- Policy Enforcement
- SPF check
- DKIM check
- DMARC policy retrieval
- Reporting
View Answers:
Correct

Incorrect
Question 4 of 20

4. Question
Which granular form of web filtering allows or denies specific elements or content types within a website rather than blocking the entire website, and how does it perform this security function?
- A. Content categorization examines individual elements within a website and blocks particular parts.
- B. A content firewall examines the entire website and blocks access to certain elements.
- C. A content firewall examines the elements on a website and blocks or allows certain elements.
- D. URL scanning examines and categorizes web addresses to identify harmful websites.
Correct

Incorrect
Question 5 of 20

5. Question
An organization has tasked its cybersecurity analyst with creating an additional layer of security by isolating sensitive systems from direct exposure to the external network. The analyst should also manage the traffic between the external and internal networks by reinforcing the security posture and mitigating risks. Which specific network segment should be implemented?
- A. IPv6 subnet
- B. Intrusion detection system
- C. Intrusion prevention system
- D. Screened subnet
Correct

Incorrect
Question 6 of 20

6. Question
You are implementing an ACL in a firewall configuration. Which of the following commands is a legitimate example of the implicit deny rule included at the end of every ACL?
- A. DENY IP with ANY TO ANY
- B. DENY IP from ANY OR ANY
- C. DENY IP from ANY TO ANY
- D. DENY IP from TCP; DENY ANY TO ANY
Correct

Incorrect
Question 7 of 20

7. Question
How does the SNMPv3 authentication protocol called HMAC-MD5 help prevent unauthorized devices from sending false alerts to the management system?
- A. By confirming that a trap originates from a legitimate source
- B. By confirming that an alert originates from a remote source
- C. By using a remote server that routes the trap and creates a hop to the management system
- D. By including a checksum within a trap message
Correct

Incorrect
Question 8 of 20

8. Question
Which of the following is NOT a metric related to Security Content Automation Protocol (SCAP) specifications?
- A. Asset Reporting Format (ARF)
- B. Common Configuration Scoring System (CCSS)
- C. Common Configuration Enumeration (CCE)
- D. Common Vulnerability Assessment and Scoring (CVAS)
Correct

Incorrect
Question 9 of 20

9. Question
Which processes form a feedback loop of detection, validation, and tuning in the alert response and remediation realm, serving as a learning process?
- A. Sensitivity and specificity
- B. Fine-tuning and reclamation
- C. Security measures and alert system
- D. Quarantine and alert-tuning
Correct

Incorrect
Question 10 of 20

10. Question
How can syslog-ng and rsyslog, combined with a SIEM system, allow for real-time security alerting and rapid response while providing a unified view for monitoring the landscape and reacting promptly to potential threats?
- A. By forwarding logs in a structured format that SIEM can easily interpret
- B. By emailing logs to SIEM in a structured format for easy interpretation
- C. By attaching log files to TCP/IP packets and sending them to SIEM within seconds
- D. By discarding less-critical logs when a certain threshold is exceeded
Correct

Incorrect
Question 11 of 20

11. Question
Which disposal method removes data from a storage device entirely so that the data cannot be recovered when re-used even with advanced data recovery tools?
- A. Destruction
- B. Erasure
- C. Data retention
- D. Sanitization
Correct

Incorrect
Question 12 of 20

12. Question
Which log aggregation method routes logs from different servers into separate files or databases, making segregating issues by the server easier?
- A. Reliable Event Logging Protocol (RELP)
- B. Syslog-ng
- C. SIEM server
- D. Data Logging and Segregation Protocol (DLSP)
Correct

Incorrect
Question 13 of 20

13. Question
Which validation of remediation controls ensures that the vulnerabilities are addressed adequately and the defining steps are taken to mitigate all possible risks?
- A. Rescanning, audit, verification
- B. Expectations, exemptions, and risk control
- C. Data encryption, multifactor authentication, and risk control
- D. Impact assessment, mitigation techniques, risk transference
Correct

Incorrect
Question 14 of 20

14. Question
Which of the three core groups of the Common Vulnerability Scoring System (CVSS) focuses on the attributes of a vulnerability that may change over time, including exploit code maturity and remediation level?
- A. Base group
- B. Temporal group
- C. Environmental group
- D. Attack Surface group
Correct

Incorrect
Question 15 of 20

15. Question
In the realm of risk tolerance, which risk transference method serves as a financial cushion against potential data loss or theft that can be covered with institutional policies?
- A. Financial segmentation
- B. Data loss ransom
- C. Compensating controls
- D. Cybersecurity insurance
Correct

Incorrect
Question 16 of 20

16. Question
An asset management company initiates a planned process of identifying its most valuable and sensitive assets, such as client financial records, proprietary trading algorithms, and trading data insights. These assets are given the highest level of protection. Which risk tolerance step is being executed in this scenario?
- A. Incident response planning
- B. Prioritization of critical assets
- C. Prioritization of protected assets
- D. Audits of highly critical assets
Correct

Incorrect
Question 17 of 20

17. Question
To estimate the exposure factor (EF) percentage, which formula calculates the single loss expectancy (SLE)?
- A. SLE = Losses Incurred X EF
- B. SLE = Data Loss X Asset Loss / EF
- C. SLE = Asset Value X EF
- D. SLE = Asset Value + Data Loss X EF
Correct

Incorrect
Question 18 of 20

18. Question
During the penetration testing process, which step addresses the impact of an attack, such as what data an attacker could access or whether they can escalate privileges and move laterally within the network?
- A. Post-exploitation
- B. Exploitation
- C. Reconnaissance
- D. Exploitation surface
Correct

Incorrect
Question 19 of 20

19. Question
An online financial transaction company relies heavily on various software applications for transactions, customer data storage, and inter-departmental communications. Which methods should be followed to find vulnerabilities in the applications? (Choose two.)
- A. IP packets inspection
- B. Security information and events management (SIEM)
- C. Package monitoring
- D. Static analysis
- E. Deep packet inspection
Correct

Incorrect
Question 20 of 20

20. Question
You have been tasked with destroying some SSDs and a few hard drives. The requirement is to destroy the hard drives so that the data on the drives cannot be recovered even by advanced data recovery tools. Which of the following methods can achieve the objective while being completely environmentally safe?
- A. Shredding
- B. Incineration
- C. Crushing
- D. Degaussing
Correct

Incorrect

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

Current
Correct
Incorrect

About Us
Contact Us
Privacy Policy

CompTIA® is a registered trademark of the Computing Technology Industry Association, Inc. This website is not endorsed, affiliated, or approved by CompTIA Inc.

Quiz Summary

Information

Results

Results

Categories

1. Question

Which significant concern can become challenging when implementing monitoring software for an extensive and complex infrastructure with various resources and huge datasets strewn across multiple campuses?

2. Question

How does advanced user behavior analytics (UBA) analyze various variables, such as login times and types of files accessed, to continually adapt and incorporate new data and refine its understanding of normal user behavior over time?

3. Question

Arrange the steps of the DMARC process in the correct order by dragging the boxed text into its correct place.

4. Question

Which granular form of web filtering allows or denies specific elements or content types within a website rather than blocking the entire website, and how does it perform this security function?

5. Question

6. Question

You are implementing an ACL in a firewall configuration. Which of the following commands is a legitimate example of the implicit deny rule included at the end of every ACL?

7. Question

How does the SNMPv3 authentication protocol called HMAC-MD5 help prevent unauthorized devices from sending false alerts to the management system?

8. Question

Which of the following is NOT a metric related to Security Content Automation Protocol (SCAP) specifications?

9. Question

Which processes form a feedback loop of detection, validation, and tuning in the alert response and remediation realm, serving as a learning process?

10. Question

How can syslog-ng and rsyslog, combined with a SIEM system, allow for real-time security alerting and rapid response while providing a unified view for monitoring the landscape and reacting promptly to potential threats?

11. Question

Which disposal method removes data from a storage device entirely so that the data cannot be recovered when re-used even with advanced data recovery tools?

12. Question

Which log aggregation method routes logs from different servers into separate files or databases, making segregating issues by the server easier?

13. Question

Which validation of remediation controls ensures that the vulnerabilities are addressed adequately and the defining steps are taken to mitigate all possible risks?

14. Question

Which of the three core groups of the Common Vulnerability Scoring System (CVSS) focuses on the attributes of a vulnerability that may change over time, including exploit code maturity and remediation level?

15. Question

In the realm of risk tolerance, which risk transference method serves as a financial cushion against potential data loss or theft that can be covered with institutional policies?

16. Question

17. Question

To estimate the exposure factor (EF) percentage, which formula calculates the single loss expectancy (SLE)?

18. Question

During the penetration testing process, which step addresses the impact of an attack, such as what data an attacker could access or whether they can escalate privileges and move laterally within the network?

19. Question

An online financial transaction company relies heavily on various software applications for transactions, customer data storage, and inter-departmental communications. Which methods should be followed to find vulnerabilities in the applications? (Choose two.)

20. Question