CompTIA Security+ Practice Test 6

Try another free CompTIA Security+ practice test with 20 more realistic questions. Practicing with questions is one of the best ways to get ready for the Security+ exam. Each question includes a detailed explanation to help you learn as you go.

Next: Practice Test 7

Previous Next

Security+ Practice Tests

CompTIA Security+ Practice Test 6

Quiz Summary

Information

Results

Results

Categories

1. Question

How can you configure a company’s workstations to connect automatically to their WSUS server for updates?

2. Question

You are an IT security professional for a large corporation. After receiving reports about some users being unable to access external websites, you reviewed the firewall logs. Which of the following would be a PRIMARY indicator in the logs that a rule is blocking the outbound traffic?

3. Question

After detecting suspicious activity on a network, a digital forensic analyst is dispatched to acquire data from a potentially compromised system. The analyst decides to capture an image of the affected system’s memory. This technique of capturing volatile data is particularly beneficial because:

4. Question

The first step in effective threat hunting is to define clear objectives. What is the second step?

5. Question

Once the root cause data is collected, which analysis provides invaluable insights into the root cause by performing a sequence of events?

6. Question

Your company recently upgraded its security infrastructure. They decided to imitate specific cyber threats in a controlled environment to validate how the new system would respond in real-world scenarios without exposing it to actual risks. What kind of test is your company planning to conduct?

7. Question

Your team is conducting a tabletop exercise. Which part simulates job urgency, requiring the team to make quick yet informed decisions under pressure?

8. Question

Which NIST incident response lifecycle phase focuses on the detection and discovery of indicators of compromise?

9. Question

Which of the following is an appropriate example of postmortem reviews?

10. Question

When examining the cost of automation, it is important to approach it through the lens of not just initial expenses but _______________. (Complete the sentence.)

11. Question

12. Question

A company’s online retail website faces DDoS attacks that cause significant downtime. Their current setup relies on manual verification of traffic spikes before mitigation efforts are deployed. What change could BEST enhance the company’s reaction time to such attacks in the future?

13. Question

An organization plans to integrate a security information and event management (SIEM) system with an incident response platform to allow for automated data sharing and action triggers between the two systems. Which automated linkage can be used for this purpose?

14. Question

Which key process of CI/CT involves compiling the committed code and building an executable while immediately flagging any errors in this process, ensuring that the codebase remains stable?

15. Question

Your company wants to use transient credentials that are automatically generated for a specific session. They want the credentials to become invalid once the job they were created for is completed. Which temporary solution is the better choice for this job?

16. Question

17. Question

18. Question

19. Question

Identify the SAML modes by analyzing each diagram. Choose the statement that accurately describes the diagrams. (Refer to the exhibit.)

20. Question

In a basic OAuth exchange, which tiny piece of code containing authorization information is sent to the client by the authorization server? (Refer to the exhibit.)

Next: Practice Test 7