SkillTestPro | CompTIA Security+ Practice Test 19

CompTIA Security+ Practice Test 19

CompTIA Security+ Exam Practice Test

1 / 10

Which type of encryption uses the same key for both encryption and decryption?

Asymmetric encryption.

Symmetric encryption.

Hashing.

Digital certificates.

Quantum encryption.

2 / 10

What is the PRIMARY advantage of a zero trust architecture?

Reduced hardware costs.

Faster network speeds.

Simplified password management.

Increased storage capacity.

Verification of every user and device before access.

3 / 10

Which attack targets weaknesses in a supply chain?

Insider threat.

Supply chain attack.

Smishing.

Vishing.

Skimming.

4 / 10

What is the BEST way to identify a typosquatting attack?

Checking for slightly misspelled domain names.

Monitoring CPU usage.

Scanning for viruses.

Reviewing firewall logs.

Updating all passwords.

5 / 10

Which type of malware disguises itself as legitimate software?

Keylogger.

Backdoor.

Trojan horse.

Botnet.

Fileless malware.

6 / 10

What is the BEST metric for measuring incident response effectiveness?

Number of users trained.

Mean time to detect (MTTD) and respond (MTTR).

Total firewall rules.

Amount of encrypted data.

Frequency of software updates.

7 / 10

Which key management practice BEST protects encrypted data?

Storing keys with the encrypted data.

Sharing keys via email.

Hardcoding keys in applications.

Reusing keys across systems.

Using a hardware security module (HSM).

8 / 10

What is the PRIMARY purpose of a business continuity plan (BCP)?

To encrypt sensitive data.

To monitor network performance.

To enforce password policies.

To ensure operations continue during disruptions.

To detect phishing attempts.

9 / 10

Which attack involves injecting malicious code into a website’s comment field?

Buffer overflow.

Session hijacking.

Directory traversal.

Cross-site scripting (XSS).

Clickjacking.

10 / 10

What is the BEST way to ensure compliance with data privacy laws?

Encrypting all emails.

Disabling all logging.

Conducting regular audits and training.

Blocking external access.

Using open-source software only.

Your score is

The average score is 90%