Security+ Readiness Test

10 questions, balanced across the exam's topics. Answer each one, then submit for your practice readiness estimate and per-topic breakdown. This is a practice estimate — not a prediction or guarantee of your official exam result.

Question 1

A student writes the following study note. Which heading is the most precise fit? The same secret key is used to encrypt and decrypt protected data.

Availability Symmetric encryption Detective control Defense in depth

Question 2

Match each description to its most specific topic, in the order shown. I. A collection service receives raw event logs from servers and network devices before analysis. II. Access is disabled when a contractor's engagement ends.

I: Log aggregation; II: Identity deprovisioning I: Log aggregation; II: Tabletop exercise I: Incident containment; II: Identity deprovisioning I: Identity deprovisioning; II: Log aggregation

Question 3

A student writes the following study note. Which heading is the most precise fit? Stored information is encrypted.

Encryption at rest Forward proxy Network segmentation Recovery point objective

Question 4

A student writes the following study note. Which heading is the most precise fit? Recommended practices support decisions where flexibility is allowed.

Data controller Security guideline Memorandum of understanding Security awareness

Question 5

Which statement most accurately describes Cross-site scripting?

Untrusted content executes as script in another user's browser within a site's context. An unauthorized person follows an authorized entrant through a controlled doorway. An unsafe setting creates exposure even without a software defect. A trusted provider or delivery path is compromised to affect downstream users.

Question 6

Match each description to its most specific topic, in the order shown. I. A sender encrypts a session secret to a recipient's public key, which only the recipient's private key can recover. II. A service records which account accessed a sensitive record and when.

I: Accounting; II: Asymmetric cryptography I: Asymmetric cryptography; II: Deterrent control I: Authorization; II: Accounting I: Asymmetric cryptography; II: Accounting

Question 7

A student writes the following study note. Which heading is the most precise fit? A certificate is marked no longer trustworthy before its normal expiration.

Certificate revocation Forensic image Chain of custody Role-based access control

Question 8

Which term or topic best matches the following description? An application server may contact its own database but not unrelated servers in the same data center.

Secure decommissioning Microsegmentation Encryption in transit Hardware security module

Question 9

Match each description to its most specific topic, in the order shown. I. Employees receive written rules about appropriate use of company devices and networks. II. Analysts estimate expected annual loss using event frequency and estimated loss per event.

I: Quantitative risk analysis; II: Acceptable-use policy I: Acceptable-use policy; II: Qualitative risk analysis I: Right-to-audit clause; II: Quantitative risk analysis I: Acceptable-use policy; II: Quantitative risk analysis

Question 10

Which statement most accurately describes Vishing?

Voice communication is used to manipulate a target. An attack prevents legitimate use by exhausting or disrupting resources. Behavior depends improperly on the timing of concurrent operations. Untrusted content executes as script in another user's browser within a site's context.

Unanswered questions count as incorrect. Your answers are graded on the server; no answer key is sent to your browser.

← Back to the Security+ page

About Contact Privacy Policy Terms of Service Refund Policy

Home Exams Simulations WorkTrials GameScope Account