SkillTestPro | CompTIA Security+ Practice Test 31

CompTIA Security+ Practice Test 31

CompTIA Security+ Exam Practice Test

1 / 10

A breach exposes customer data in California. Which law applies?

GDPR.

HIPAA.

CCPA.

SOX.

FISMA.

2 / 10

A company needs fast recovery after a crash. Which backup should they use?

Incremental.

Differential.

Full.

Synthetic.

Compressed.

3 / 10

A new app has a vulnerability. What should the team follow?

A random coding style.

The Secure Software Development Lifecycle (SSDLC).

A public release schedule.

A single developer approach.

A no-testing policy.

4 / 10

An email appears to come from the CEO but lacks a signature. What should be enabled?

SMTP.

DKIM.

POP3.

IMAP.

NTP.

5 / 10

A DR plan fails during a test. What should the team do NEXT?

Ignore the failure.

Conduct a tabletop exercise.

Encrypt all data.

Reboot all systems.

Update passwords.

6 / 10

A user clicks a hidden button on a trusted site. What attack occurred?

SQL injection.

XSS.

File inclusion.

CSRF.

Clickjacking.

7 / 10

A hacker persists in a network for months. What type of threat is this?

A phishing attack.

A DDoS attack.

A brute-force attack.

An advanced persistent threat (APT).

A malware infection.

8 / 10

A company prioritizes cybersecurity spending. Which framework should they use?

ITIL.

NIST CSF.

COBIT.

TOGAF.

Six Sigma.

9 / 10

A backup restores clean data after ransomware. Where should it have been stored?

On the infected server.

On a public cloud.

On a shared drive.

In an offline location.

On a USB stick.

10 / 10

A network protocol is intercepted in plaintext. What should have been used?

SNMPv3.

SNMPv2c.

Telnet.

FTP.

HTTP.

Your score is

The average score is 100%