SkillTestPro | CompTIA Security Plus Practice Test 20

CompTIA Security+ Practice Test 20

CompTIA Security+ Exam Practice Test

1 / 10

Which access control model uses predefined security levels?

Discretionary Access Control (DAC).

Role-Based Access Control (RBAC).

Mandatory Access Control (MAC).

Attribute-Based Access Control (ABAC).

Rule-Based Access Control.

2 / 10

What is the PRIMARY benefit of a demilitarized zone (DMZ)?

Faster internal traffic.

Public-facing services isolated from internal networks.

Reduced need for updates.

Simplified user authentication.

Lower power consumption.

3 / 10

Which deployment model shares resources among multiple organizations?

Private cloud.

Public cloud.

Hybrid cloud.

Edge cloud.

Community cloud.

4 / 10

What is the BEST mitigation for a buffer overflow attack?

Enabling multi-factor authentication.

Blocking all external IPs.

Encrypting all databases.

Using secure coding practices like bounds checking.

Disabling unused ports.

5 / 10

Which attack uses SMS messages to trick users?

Phishing.

Vishing.

Smishing.

Spear phishing.

Whaling.

6 / 10

What is a common symptom of a logic bomb?

Random pop-ups.

System failure triggered by a specific event.

Unusually high network traffic.

Slow application loading.

Missing log files.

7 / 10

Which regulation mandates breach notification within 72 hours?

HIPAA.

CCPA.

SOX.

FISMA.

GDPR.

8 / 10

What is the PRIMARY purpose of a honeypot?

To attract and analyze attacker behavior.

To encrypt sensitive files.

To block all incoming traffic.

To manage user permissions.

To back up critical data.

9 / 10

Which protocol secures email transmission between servers?

SMTP.

IMAP.

STARTTLS.

POP3.

SNMP.

10 / 10

What is the BEST method to secure an API endpoint?

Using HTTP instead of HTTPS.

Allowing anonymous access.

Disabling rate limiting.

Implementing OAuth for authentication.

Storing API keys in plain text.

Your score is

The average score is 60%