TEST BANK FOR COMPTIA CERTMASTER CE
SECURITY+ DOMAIN 1.0 GENERAL SECURITY
CONCEPTS ASSESSMENT COMPREHENSIVE
STUDY GUIDE PRACTICE QUESTIONS 2026
2027
,Table of Contents
1. Introduction to Security Principles and Terminology
2. Core Concepts of Confidentiality, Integrity, Availability
3. Security Controls: Preventive, Detective, Corrective
4. Access Control Models and Authentication Methods
5. Risk Management Basics and Threat Landscapes
6. Secure Network Design and Defense-in-Depth
7. Cryptographic Concepts and Public Key Infrastructure
(PKI)
8. Security Policies, Standards, and Frameworks
9. Practical Exercises / Practice Questions and Explanations
(Domain 1.0)
10. Review Questions with Verified Answers (Exam-style)
CHAPTER 1: INTRODUCTION TO SECURITY PRINCIPLES
AND TERMINOLOGY
,1. Which of the following best describes the principle of
confidentiality in information security?
A. Ensuring data is accurate and up to date
B. Protecting data from unauthorized access
C. Guaranteeing the data will be available when needed
D. Ensuring data is regularly backed up
Correct Answer: B
Rationale: Confidentiality focuses on ensuring that data is only
accessible to those authorized to view it, preventing
unauthorized access.
2. What is the primary objective of integrity in information
security?
A. Protecting data from destruction
B. Ensuring data is accurate and consistent
C. Preventing unauthorized access to data
D. Ensuring that data is recoverable after a disaster
Correct Answer: B
, Rationale: Integrity ensures that data remains accurate, reliable,
and untampered with, preventing unauthorized alterations.
3. Availability in the context of information security refers to:
A. Ensuring data is protected from attacks
B. Ensuring data is easily accessible to authorized users when
needed
C. Making sure data is encrypted
D. Ensuring data is stored in a secure location
Correct Answer: B
Rationale: Availability ensures that authorized users have
access to data and systems when they need them, ensuring
service continuity.
4. Which term refers to the process of verifying the identity of a
user or system in network security?
A. Authentication
B. Authorization
C. Auditing
D. Encryption
SECURITY+ DOMAIN 1.0 GENERAL SECURITY
CONCEPTS ASSESSMENT COMPREHENSIVE
STUDY GUIDE PRACTICE QUESTIONS 2026
2027
,Table of Contents
1. Introduction to Security Principles and Terminology
2. Core Concepts of Confidentiality, Integrity, Availability
3. Security Controls: Preventive, Detective, Corrective
4. Access Control Models and Authentication Methods
5. Risk Management Basics and Threat Landscapes
6. Secure Network Design and Defense-in-Depth
7. Cryptographic Concepts and Public Key Infrastructure
(PKI)
8. Security Policies, Standards, and Frameworks
9. Practical Exercises / Practice Questions and Explanations
(Domain 1.0)
10. Review Questions with Verified Answers (Exam-style)
CHAPTER 1: INTRODUCTION TO SECURITY PRINCIPLES
AND TERMINOLOGY
,1. Which of the following best describes the principle of
confidentiality in information security?
A. Ensuring data is accurate and up to date
B. Protecting data from unauthorized access
C. Guaranteeing the data will be available when needed
D. Ensuring data is regularly backed up
Correct Answer: B
Rationale: Confidentiality focuses on ensuring that data is only
accessible to those authorized to view it, preventing
unauthorized access.
2. What is the primary objective of integrity in information
security?
A. Protecting data from destruction
B. Ensuring data is accurate and consistent
C. Preventing unauthorized access to data
D. Ensuring that data is recoverable after a disaster
Correct Answer: B
, Rationale: Integrity ensures that data remains accurate, reliable,
and untampered with, preventing unauthorized alterations.
3. Availability in the context of information security refers to:
A. Ensuring data is protected from attacks
B. Ensuring data is easily accessible to authorized users when
needed
C. Making sure data is encrypted
D. Ensuring data is stored in a secure location
Correct Answer: B
Rationale: Availability ensures that authorized users have
access to data and systems when they need them, ensuring
service continuity.
4. Which term refers to the process of verifying the identity of a
user or system in network security?
A. Authentication
B. Authorization
C. Auditing
D. Encryption
