SkillTestPro | CompTIA Security+ Practice Test 24

CompTIA Security+ Practice Test 24

CompTIA Security+ Exam Practice Test

1 / 10

Which policy ensures data is retained for a specific period?

Data classification policy.

Acceptable use policy.

Incident response policy.

Password policy.

Data retention policy.

2 / 10

What is the PRIMARY benefit of endpoint detection and response (EDR)?

Faster internet speeds.

Simplified backups.

Reduced storage needs.

Real-time threat detection and mitigation on devices.

Automatic software installs.

3 / 10

Which security control prevents unauthorized physical access to a data center?

Firewalls.

Antivirus software.

Biometric locks.

Encryption keys.

VLANs.

4 / 10

What is the BEST way to mitigate a distributed brute-force attack?

Increasing password length.

Implementing account lockout policies.

Disabling all logins.

Using single-factor authentication.

Allowing unlimited attempts.

5 / 10

Which attack exploits trust in a digital certificate?

Replay attack.

Brute force.

Birthday attack.

Certificate spoofing.

Collision attack.

6 / 10

What is the PRIMARY purpose of a chain of custody in forensics?

To encrypt evidence.

To delete logs.

To ensure evidence integrity and admissibility.

To update software.

To train investigators.

7 / 10

Which protocol secures DNS queries?

DNSSEC.

DHCP.

NTP.

BGP.

ARP.

8 / 10

What is the BEST way to protect against session hijacking?

Using HTTP instead of HTTPS.

Disabling all cookies.

Allowing session reuse.

Storing session IDs in URLs.

Implementing secure cookies with HTTPS.

9 / 10

Which cloud model shifts most security responsibility to the provider?

IaaS.

PaaS.

SaaS.

Hybrid cloud.

Private cloud.

10 / 10

What is the PRIMARY purpose of red teaming?

To install security patches.

To simulate real-world attacks and test defenses.

To monitor system logs.

To encrypt databases.

To train developers.

Your score is

The average score is 100%