COMPTIA SECURITY+ CERTMASTER CE EXAM COMPLETE PRACTICE EXAM
WITH DETAILED ANSWERS | 2026–2027 LATEST UPDATE | FULL STUDY GUIDE |
EXAM PREP | PRACTICE TEST | CERTIFICATION PREPARATION
1. A security analyst notices that several employees have received emails requesting they
reset their passwords through an external website. The emails appear to come from the
organization’s IT department but contain suspicious links. What type of attack is most
likely occurring?
A. Man-in-the-middle attack
B. DNS poisoning
C. Phishing attack
D. Password spraying
*** A phishing attack uses deceptive communication to trick users into revealing sensitive
information or performing unsafe actions. The other options involve different attack
techniques that do not primarily rely on fraudulent emails designed to manipulate users.
***
2. An organization wants to reduce the impact of compromised user credentials by requiring
users to provide a password and a biometric scan before accessing critical systems.
Which security control is being implemented?
A. Role-based access control
B. Multi-factor authentication
C. Single sign-on
D. Account federation
*** Multi-factor authentication requires two or more different authentication factors, such
as something a user knows and something a user is. Single sign-on and federation improve
access management but do not necessarily provide additional authentication factors. ***
3. A security engineer is reviewing a system that allows employees to access only the files
required for their job responsibilities. Which principle is being applied?
A. Separation of duties
B. Defense in depth
C. Zero trust
,D. Least privilege
*** The principle of least privilege ensures users receive only the permissions necessary to
complete their assigned tasks. Separation of duties divides responsibilities, while defense in
depth uses multiple security layers. ***
4. A company wants to identify weaknesses in its public-facing applications before
attackers discover them. Which activity should security professionals perform?
A. Data classification
B. Security awareness training
C. Vulnerability assessment
D. Incident response
*** A vulnerability assessment identifies weaknesses in systems and applications so they
can be remediated before exploitation occurs. Incident response happens after a security
event, while awareness training does not directly identify technical vulnerabilities. ***
5. A network administrator configures a firewall to block all inbound traffic except
approved services. Which security concept does this represent?
A. Open access model
B. Default deny approach
C. Implicit trust model
D. Data masking
*** A default deny approach blocks traffic unless it is specifically authorized, reducing
unnecessary exposure. Open access and implicit trust models increase risk by allowing
broader access than required. ***
6. A company stores customer information in a database. Management wants to ensure
unauthorized employees cannot view sensitive records. Which technology best protects
the stored information?
A. Load balancing
B. Network segmentation
C. Encryption
,D. Compression
*** Encryption converts readable data into an unreadable format that requires an
appropriate key for access. Network segmentation limits access paths but does not directly
protect stored data contents. ***
7. A security analyst investigates repeated failed login attempts against multiple user
accounts using common passwords. Which attack is occurring?
A. Credential stuffing
B. Password spraying
C. Session hijacking
D. Privilege escalation
*** Password spraying attempts common passwords across many accounts to avoid
account lockouts. Credential stuffing uses previously compromised credentials, while the
other options involve different attack objectives. ***
8. An organization wants to ensure employees understand how to identify suspicious emails
and protect company information. Which activity should be implemented?
A. Penetration testing
B. Patch management
C. Security awareness training
D. Vulnerability scanning
*** Security awareness training teaches employees how to recognize and respond to
security threats. Penetration testing and vulnerability scanning identify technical
weaknesses rather than improving user security behavior. ***
9. A company separates its payment processing servers from general employee networks.
What security strategy is being used?
A. Tokenization
B. Network segmentation
C. Data destruction
D. Authentication federation
, *** Network segmentation divides systems into separate zones to limit unauthorized access
and reduce attack impact. Tokenization protects sensitive values, while federation manages
identities across systems. ***
10. A security team creates copies of important files and stores them separately from
production systems. What security practice is being performed?
A. Data aggregation
B. Hashing
C. Backup management
D. Data normalization
*** Backup management ensures data can be restored after accidental deletion,
ransomware, or system failure. Hashing verifies integrity but does not create recoverable
copies of information. ***
11. A security administrator needs to verify whether a downloaded software package has
been modified. Which method should be used?
A. Encryption
B. Hash comparison
C. Access control lists
D. Data masking
*** Hash comparison verifies file integrity by comparing calculated hash values.
Encryption protects confidentiality, while access controls determine permissions rather
than verifying file changes. ***
12. A company requires administrators to use separate accounts for normal work and
privileged activities. Which security principle does this support?
A. Single sign-on
B. Risk acceptance
C. Account separation
D. Availability management
WITH DETAILED ANSWERS | 2026–2027 LATEST UPDATE | FULL STUDY GUIDE |
EXAM PREP | PRACTICE TEST | CERTIFICATION PREPARATION
1. A security analyst notices that several employees have received emails requesting they
reset their passwords through an external website. The emails appear to come from the
organization’s IT department but contain suspicious links. What type of attack is most
likely occurring?
A. Man-in-the-middle attack
B. DNS poisoning
C. Phishing attack
D. Password spraying
*** A phishing attack uses deceptive communication to trick users into revealing sensitive
information or performing unsafe actions. The other options involve different attack
techniques that do not primarily rely on fraudulent emails designed to manipulate users.
***
2. An organization wants to reduce the impact of compromised user credentials by requiring
users to provide a password and a biometric scan before accessing critical systems.
Which security control is being implemented?
A. Role-based access control
B. Multi-factor authentication
C. Single sign-on
D. Account federation
*** Multi-factor authentication requires two or more different authentication factors, such
as something a user knows and something a user is. Single sign-on and federation improve
access management but do not necessarily provide additional authentication factors. ***
3. A security engineer is reviewing a system that allows employees to access only the files
required for their job responsibilities. Which principle is being applied?
A. Separation of duties
B. Defense in depth
C. Zero trust
,D. Least privilege
*** The principle of least privilege ensures users receive only the permissions necessary to
complete their assigned tasks. Separation of duties divides responsibilities, while defense in
depth uses multiple security layers. ***
4. A company wants to identify weaknesses in its public-facing applications before
attackers discover them. Which activity should security professionals perform?
A. Data classification
B. Security awareness training
C. Vulnerability assessment
D. Incident response
*** A vulnerability assessment identifies weaknesses in systems and applications so they
can be remediated before exploitation occurs. Incident response happens after a security
event, while awareness training does not directly identify technical vulnerabilities. ***
5. A network administrator configures a firewall to block all inbound traffic except
approved services. Which security concept does this represent?
A. Open access model
B. Default deny approach
C. Implicit trust model
D. Data masking
*** A default deny approach blocks traffic unless it is specifically authorized, reducing
unnecessary exposure. Open access and implicit trust models increase risk by allowing
broader access than required. ***
6. A company stores customer information in a database. Management wants to ensure
unauthorized employees cannot view sensitive records. Which technology best protects
the stored information?
A. Load balancing
B. Network segmentation
C. Encryption
,D. Compression
*** Encryption converts readable data into an unreadable format that requires an
appropriate key for access. Network segmentation limits access paths but does not directly
protect stored data contents. ***
7. A security analyst investigates repeated failed login attempts against multiple user
accounts using common passwords. Which attack is occurring?
A. Credential stuffing
B. Password spraying
C. Session hijacking
D. Privilege escalation
*** Password spraying attempts common passwords across many accounts to avoid
account lockouts. Credential stuffing uses previously compromised credentials, while the
other options involve different attack objectives. ***
8. An organization wants to ensure employees understand how to identify suspicious emails
and protect company information. Which activity should be implemented?
A. Penetration testing
B. Patch management
C. Security awareness training
D. Vulnerability scanning
*** Security awareness training teaches employees how to recognize and respond to
security threats. Penetration testing and vulnerability scanning identify technical
weaknesses rather than improving user security behavior. ***
9. A company separates its payment processing servers from general employee networks.
What security strategy is being used?
A. Tokenization
B. Network segmentation
C. Data destruction
D. Authentication federation
, *** Network segmentation divides systems into separate zones to limit unauthorized access
and reduce attack impact. Tokenization protects sensitive values, while federation manages
identities across systems. ***
10. A security team creates copies of important files and stores them separately from
production systems. What security practice is being performed?
A. Data aggregation
B. Hashing
C. Backup management
D. Data normalization
*** Backup management ensures data can be restored after accidental deletion,
ransomware, or system failure. Hashing verifies integrity but does not create recoverable
copies of information. ***
11. A security administrator needs to verify whether a downloaded software package has
been modified. Which method should be used?
A. Encryption
B. Hash comparison
C. Access control lists
D. Data masking
*** Hash comparison verifies file integrity by comparing calculated hash values.
Encryption protects confidentiality, while access controls determine permissions rather
than verifying file changes. ***
12. A company requires administrators to use separate accounts for normal work and
privileged activities. Which security principle does this support?
A. Single sign-on
B. Risk acceptance
C. Account separation
D. Availability management
