CompTIA Security+ Domain 1 Practice
Exam Questions and Answers (Latest
Update 2026)
You have a small network at home that is connected to the
Internet. On your home network you have a server with the IP
address of 192.168.55.199/16. You have a single public address that
is shared by all hosts on your private network. You want to
configure the server as a Web server and allow Internet hosts to
contact the server to browse a personal Web site. What should you
use to allow access? -
correct answer ✅Static NAT
You are the network administrator for a small company that
implements NAT to access the Internet. However, you recently
acquired 5 servers that must be accessible from outside your
network. Your ISP has provided you with 5 additional registered IP
addresses to support these new servers but you don't want the
public to access these servers directly. You want to place these
servers behind your firewall on the inside network yet still allow
them to be accessible to the public from the outside.
Which method of NAT translation should you implement for these 5
servers? -
correct answer ✅Static
You want to connect your small company network to the Internet.
Your ISP provides you with a single IP address that is to be shared
,CompTIA Security+ Domain 1 Practice
Exam Questions and Answers (Latest
Update 2026)
between all hosts on your private network. You do not want
external hosts to be able to initiate connection to internal hosts.
What type of Network Address Translation (NAT) should you
implement? -
correct answer ✅Dynamic
Which of the following is not one of the ranges of IP addresses
defined in RFC 1918 that are commonly used behind a NAT server?
-
correct answer ✅169.254.0.0 - 169.254.255.255
Which of the following is a privately controlled portion of a network
that is accessible to some specific external entities? -
correct answer ✅Extranet
Members of the Sales team use laptops to connect to the company
network. While traveling, they connect their laptops to the Internet
through airport and hotel networks.
You are concerned that these computers will pick up viruses that
could spread to your private network. You would like to implement
a solution that prevents the laptops from connecting to your
,CompTIA Security+ Domain 1 Practice
Exam Questions and Answers (Latest
Update 2026)
network unless antivirus software and the latest operating system
patches have been
installed. Which solution should you use? -
correct answer ✅NAC
You manage a network with a single switch. All hosts connect to the
network through the switch. You want to increase the security of
devices that are part of the accounting department. You want to
make sure that broadcast traffic sent by an accounting computer is
only received by other accounting computers, and you want to
implement ACLs to control traffic sent to accounting computers
through the network.
What should you do? -
correct answer ✅Use a router to configure a subnet for the
accounting computers
When designing a firewall, what is the recommended approach for
opening and closing ports? -
correct answer ✅Close all ports; open only ports required by
applications inside the DMZ.
, CompTIA Security+ Domain 1 Practice
Exam Questions and Answers (Latest
Update 2026)
Which of the following networking devices or services prevents the
use of IPSec in most cases? -
correct answer ✅NAT
In which of the following situations would you most likely
implement a demilitarized zone (DMZ)? -
correct answer ✅You want to protect a public Web server from
attack.
Which of the following best describes the purpose of using
subnets? -
correct answer ✅Subnets divide an IP network address into
multiple network addresses.
Which of the following is not a reason to use subnets on a
network? -
correct answer ✅Combine different media type on to the same
subnet.
You want to set up a service to allow multiple users to dial in to the
office server from modems on their home computers. What service
Exam Questions and Answers (Latest
Update 2026)
You have a small network at home that is connected to the
Internet. On your home network you have a server with the IP
address of 192.168.55.199/16. You have a single public address that
is shared by all hosts on your private network. You want to
configure the server as a Web server and allow Internet hosts to
contact the server to browse a personal Web site. What should you
use to allow access? -
correct answer ✅Static NAT
You are the network administrator for a small company that
implements NAT to access the Internet. However, you recently
acquired 5 servers that must be accessible from outside your
network. Your ISP has provided you with 5 additional registered IP
addresses to support these new servers but you don't want the
public to access these servers directly. You want to place these
servers behind your firewall on the inside network yet still allow
them to be accessible to the public from the outside.
Which method of NAT translation should you implement for these 5
servers? -
correct answer ✅Static
You want to connect your small company network to the Internet.
Your ISP provides you with a single IP address that is to be shared
,CompTIA Security+ Domain 1 Practice
Exam Questions and Answers (Latest
Update 2026)
between all hosts on your private network. You do not want
external hosts to be able to initiate connection to internal hosts.
What type of Network Address Translation (NAT) should you
implement? -
correct answer ✅Dynamic
Which of the following is not one of the ranges of IP addresses
defined in RFC 1918 that are commonly used behind a NAT server?
-
correct answer ✅169.254.0.0 - 169.254.255.255
Which of the following is a privately controlled portion of a network
that is accessible to some specific external entities? -
correct answer ✅Extranet
Members of the Sales team use laptops to connect to the company
network. While traveling, they connect their laptops to the Internet
through airport and hotel networks.
You are concerned that these computers will pick up viruses that
could spread to your private network. You would like to implement
a solution that prevents the laptops from connecting to your
,CompTIA Security+ Domain 1 Practice
Exam Questions and Answers (Latest
Update 2026)
network unless antivirus software and the latest operating system
patches have been
installed. Which solution should you use? -
correct answer ✅NAC
You manage a network with a single switch. All hosts connect to the
network through the switch. You want to increase the security of
devices that are part of the accounting department. You want to
make sure that broadcast traffic sent by an accounting computer is
only received by other accounting computers, and you want to
implement ACLs to control traffic sent to accounting computers
through the network.
What should you do? -
correct answer ✅Use a router to configure a subnet for the
accounting computers
When designing a firewall, what is the recommended approach for
opening and closing ports? -
correct answer ✅Close all ports; open only ports required by
applications inside the DMZ.
, CompTIA Security+ Domain 1 Practice
Exam Questions and Answers (Latest
Update 2026)
Which of the following networking devices or services prevents the
use of IPSec in most cases? -
correct answer ✅NAT
In which of the following situations would you most likely
implement a demilitarized zone (DMZ)? -
correct answer ✅You want to protect a public Web server from
attack.
Which of the following best describes the purpose of using
subnets? -
correct answer ✅Subnets divide an IP network address into
multiple network addresses.
Which of the following is not a reason to use subnets on a
network? -
correct answer ✅Combine different media type on to the same
subnet.
You want to set up a service to allow multiple users to dial in to the
office server from modems on their home computers. What service
