TheoryCOMPTIA
Practice Test
3020+ CompTIA practice questions with explanations. Study modes, progress tracking, works offline.
Heads up: the app and the web exam use separate accounts — a web unlock and an in-app purchase do not carry over. Buy on the web to practice on the web.
30 free CompTIA questions
Sampled across every topic area — not just the first page. Try them as a quiz or flip them as flashcards.
-
CompTIA
A new MX record has been requested in DNS as part of a server setup. Which service most requires a correctly configured MX record to function?
Correct — D. An MX (Mail Exchanger) DNS record designates the server responsible for receiving email for a domain. A mail server relies on this record for inbound message delivery. Load balancers, FTP servers, and firewall DMZ configurations do not depend on MX records. -
CompTIA
A network administrator is experiencing high CPU utilization on a monitoring server caused by continuous SNMP polling of hundreds of devices. How should the administrator reduce this CPU load without sacrificing monitoring capability?
Correct — A. Switching from continuous SNMP polling to SNMP traps is the most effective solution. With traps, each network device sends a notification to the management station only when a specific event occurs, eliminating constant polling and significantly reducing CPU load while maintaining monitoring coverage. -
CompTIA
What benefit does MIMO technology bring to the 802.11n wireless standard?
Correct — D. MIMO (Multiple-Input Multiple-Output) technology in 802.11n leverages multiple antennas to take advantage of multipath propagation, improving signal reliability and throughput by using multiple simultaneous data streams. -
CompTIA
What is the minimum recommended twisted-pair copper cable category for 1000BASE-T (Gigabit Ethernet) networks?
Correct — A. Cat 5e (Category 5 enhanced) is the minimum recommended cable grade for 1000BASE-T. Its tighter specifications and improved signal quality over standard Cat 5 make it capable of supporting Gigabit Ethernet (1000 Mbps) speeds. -
CompTIA
Wi-Fi Protected Setup (WPS) supports four modes for adding devices to a network. Which mode has serious security vulnerabilities due to a brute-force attack?
Correct — C. WPS PIN mode was shown to be susceptible to brute-force attacks, allowing attackers to recover the WPS PIN and gain network access. The vulnerability was publicly demonstrated, leading to recommendations to disable WPS PIN mode. -
CompTIA
Which term describes hackers who operate in a morally ambiguous space — working without explicit authorization but often with good intentions, such as reporting discovered vulnerabilities?
Correct — D. Gray hat hackers operate without formal authorization but generally do not intend to cause harm. They may expose vulnerabilities and report them to the affected parties rather than exploiting them. Black hat hackers act maliciously for personal gain. White hat hackers operate with full authorization as ethical hackers. Blue hat hackers are sometimes hired by companies specifically to test systems before launch. -
CompTIA
You are configuring data classification labels for your organization's R&D file server. Users typically label documents as contractor, public, or internal. What classification label should be applied to the organization's trade secrets?
Correct — C. Proprietary is a confidentiality classification used for information whose disclosure could damage a company's competitive position. 'High' and 'Low' are generic risk labels for internal data. 'Top secret' is a government classification label not typically used in commercial organizations. -
CompTIA
The CEO reports that his computer will not allow anyone to log in without entering credit card payment information. Investigation reveals he downloaded a file shared by a friend on social media, after which the computer restarted and showed the payment demand. What type of attack best describes this scenario?
Correct — A. The described behavior—blocking system access and demanding payment—is characteristic of ransomware. The malware holds the system hostage until a fee is paid. While targeted delivery via social media could suggest spear phishing, the information provided best supports a ransomware conclusion. A botnet or rootkit would not typically display a payment demand on the login screen. -
CompTIA
In a spanning-tree topology, what value is used to determine which port on a non-root switch becomes the root port?
Correct — D. In spanning tree, the root port on each non-root switch is the port with the lowest path cost to the root bridge. Path cost is calculated based on link bandwidth; lower bandwidth links have higher cost. When multiple links have equal cost, other tiebreakers such as port priority or MAC address are used. -
CompTIA
Which protocol is used to resolve a MAC address from a known IP address?
Correct — A. ARP (Address Resolution Protocol) maps a known IP address to the corresponding MAC address on a local network, enabling Layer 2 frame delivery. -
CompTIA
Which technology provides a flexible and secure wireless communications system that can supplement or fully replace a wired Ethernet LAN?
Correct — C. A Wireless Local Area Network (WLAN) can augment or replace a wired Ethernet LAN, offering flexible connectivity within a local area. -
CompTIA
An employee on extended business travel uses a personal mobile device to handle sensitive company data. Which of the following is the most critical measure to put in place?
Correct — C. Real-time remote monitoring of the personal device during extended travel allows continuous oversight, enabling prompt detection and response to any unauthorized access or suspicious activity involving sensitive company data. -
CompTIA
Which of the following are examples of secure VPN tunneling protocols? (Choose 2)
Correct — B. IPsec (Internet Protocol Security) authenticates and encrypts IP packets to establish secure VPN tunnels. TLS (Transport Layer Security) encrypts communications over networks and is also used in VPN implementations. bcrypt is a password hashing algorithm, not a tunneling protocol. WEP is a deprecated and insecure wireless encryption standard, not a VPN protocol. -
CompTIA
What security component is composed of hardware, software, and firmware that together enforce a system's security policy?
Correct — D. The Security Kernel comprises hardware, software, and firmware components that collectively implement and enforce the security policy of a computer system. -
CompTIA
Nathan wants to restrict company-issued mobile devices so they can only be used within the organization's physical premises. What type of authentication should he deploy?
Correct — D. Context-aware authentication uses contextual signals such as geolocation to enforce location-based access policies, ensuring devices can only be authenticated within the facility's boundaries. PINs and biometrics verify identity but cannot enforce location restrictions. 'Content-aware authentication' is a fabricated term. -
CompTIA
What is the name of the hardware-based security chip that stores cryptographic keys and protects sensitive information on a device?
Correct — D. A TPM (Trusted Platform Module) is a dedicated hardware security chip that stores cryptographic keys and other sensitive data, providing a hardware root of trust for the device. A DMZ is a network security zone. SLP is the Service Location Protocol. TFTP is the Trivial File Transfer Protocol — none of these are encryption key storage devices. -
CompTIA
Gabrielle wants to use a single cable that carries both digital audio and digital video signals. Which connector type should Malcolm recommend?
Correct — C. HDMI transmits both digital audio and digital video over a single cable. S-video is an older analog video-only connector. RGB requires separate cables per color channel. RCA connectors are analog and typically carry audio or composite video separately. -
CompTIA
Which device uses satellites to determine your geographic location and can be used for turn-by-turn navigation?
Correct — C. GPS (Global Positioning System) devices communicate with satellites to pinpoint your location. Because they require a clear line of sight to satellites, signal quality can be reduced in bad weather or dense environments. -
CompTIA
Which command opens the System Information tool in Windows?
Correct — D. Typing msinfo32 in the Windows search box or Run dialog opens the System Information tool, which provides details about hardware, system components, and software. -
CompTIA
Which of the following file systems provides the best security features?
Correct — A. NTFS (New Technology File System) offers superior security compared to FAT32 through support for file and folder permissions and encryption. Privacy filter and Local Security Policy are not file systems. -
CompTIA
What is the primary benefit of retaining audit logs for an extended period in a cybersecurity program?
Correct — D. Long-term audit log retention provides historical records that can be analyzed during forensic investigations, incident response activities, and compliance audits, enabling organizations to reconstruct events and gather evidence. -
CompTIA
The CISO has requested a report identifying which incident response processes need improvement following a recent security incident. What type of document addresses this request?
Correct — D. A lessons-learned report is produced after an incident to review what went well, what did not, and which processes need improvement. It is a key output of the post-incident activity phase and is used to strengthen future incident response capabilities. -
CompTIA
Which network device forwards packets across multiple networks and uses routing tables to determine the optimal path to a destination?
Correct — C. Routers operate at Layer 3 of the OSI model and use routing tables to determine the best path for forwarding packets across different networks. Switches forward frames within a single network based on MAC addresses. Bridges connect two network segments. Hubs broadcast traffic to all connected ports. -
CompTIA
Under what circumstances is it acceptable to yell at a user?
Correct — D. It is never acceptable to get angry or raise your voice at a customer or user under any circumstances. -
CompTIA
You are purchasing an inkjet printer cartridge for home use and want an MSDS (Material Safety Data Sheet) for it. How do you obtain one?
Correct — C. The MSDS can be downloaded from the manufacturer's website. Retailers are not required to provide one at purchase, and it is not required to be included in packaging. OSHA regulations do allow consumers to obtain MSDS documents, and it is advisable to have them in case of an emergency. -
CompTIA
Which CPU component handles primary processing operations?
Correct — A. The Arithmetic Logic Unit (ALU) is responsible for performing the primary processing duties within the CPU. -
CompTIA
A technician cannot find a mechanical reason for a printer failure and asks you to restart the Windows background service that manages the printer queue. What is the name of that service?
Correct — C. The Print Spooler is the Windows service that manages print job queuing and communication between applications and printers. Restarting it often resolves stalled or unresponsive printing. -
CompTIA
Which feature built into modern memory modules allows a motherboard to automatically configure memory at the correct speed and latency settings?
Correct — B. The Serial Presence Detect (SPD) chip on a memory module stores information about the module's speed, capacity, and latency, enabling the motherboard to configure memory settings correctly at startup. -
CompTIA
In a client-server network, what mechanism ensures that data from a client application is delivered to the correct server application?
Correct — C. Port numbers direct client application data to the appropriate server application. Common port numbers such as those used by Telnet, SSH, and SMTP are frequently tested on the CompTIA A+ exam. -
CompTIA
You are auditing a system that stores credit card data. You notice that the credit card numbers in stored records are partially obscured — for example, only the last four digits are visible. Which data protection technique does this represent?
Correct — C. Data masking replaces sensitive data values with altered or partially hidden versions, allowing records to be used or displayed without exposing the complete sensitive value. Showing only the last four digits of a credit card number is a classic example of data masking. Tokenization replaces the sensitive value with a non-sensitive token that references the original via a secure lookup. Anonymization removes or alters data so it can no longer be linked to an individual.
CompTIA sample questions
Tap any question below to reveal the answer and a plain-English explanation.
CompTIA Which network device forwards packets across multiple networks and uses routing tables to determine the optimal path to a destination?
A. Switches
B. Hubs
C. Routers ✓
D. Bridges
Correct — C. Routers operate at Layer 3 of the OSI model and use routing tables to determine the best path for forwarding packets across different networks. Switches forward frames within a single network based on MAC addresses. Bridges connect two network segments. Hubs broadcast traffic to all connected ports.
CompTIA Under what circumstances is it acceptable to yell at a user?
A. When they repeat a mistake for the fifth time
B. When they repeat the same mistake a second time
C. When they interrupt your troubleshooting
D. Never ✓
Correct — D. It is never acceptable to get angry or raise your voice at a customer or user under any circumstances.
CompTIA You are purchasing an inkjet printer cartridge for home use and want an MSDS (Material Safety Data Sheet) for it. How do you obtain one?
A. Ask the store to provide one at the time of purchase.
B. You are not legally permitted to obtain an MSDS for consumer products.
C. Visit the printer cartridge manufacturer's website. ✓
D. It is included in the product packaging.
Correct — C. The MSDS can be downloaded from the manufacturer's website. Retailers are not required to provide one at purchase, and it is not required to be included in packaging. OSHA regulations do allow consumers to obtain MSDS documents, and it is advisable to have them in case of an emergency.
CompTIA Which CPU component handles primary processing operations?
A. ALU ✓
B. Registers
C. Pipeline
D. FPU
Correct — A. The Arithmetic Logic Unit (ALU) is responsible for performing the primary processing duties within the CPU.
CompTIA A technician cannot find a mechanical reason for a printer failure and asks you to restart the Windows background service that manages the printer queue. What is the name of that service?
A. Maintenance Services
B. WinPrint
C. Print Spooler ✓
D. Windows Printing Services
Correct — C. The Print Spooler is the Windows service that manages print job queuing and communication between applications and printers. Restarting it often resolves stalled or unresponsive printing.
CompTIA Which feature built into modern memory modules allows a motherboard to automatically configure memory at the correct speed and latency settings?
A. Spinning pinwheel
B. SPD ✓
C. Virtual memory
D. Triple-channel
Correct — B. The Serial Presence Detect (SPD) chip on a memory module stores information about the module's speed, capacity, and latency, enabling the motherboard to configure memory settings correctly at startup.
CompTIA In a client-server network, what mechanism ensures that data from a client application is delivered to the correct server application?
A. IP address
B. Slot number
C. port number ✓
D. MAC address
Correct — C. Port numbers direct client application data to the appropriate server application. Common port numbers such as those used by Telnet, SSH, and SMTP are frequently tested on the CompTIA A+ exam.
CompTIA You are auditing a system that stores credit card data. You notice that the credit card numbers in stored records are partially obscured — for example, only the last four digits are visible. Which data protection technique does this represent?
A. Sensitive Data Replacement (SDR)
B. Data anonymization
C. Data masking ✓
D. Tokenization
Correct — C. Data masking replaces sensitive data values with altered or partially hidden versions, allowing records to be used or displayed without exposing the complete sensitive value. Showing only the last four digits of a credit card number is a classic example of data masking. Tokenization replaces the sensitive value with a non-sensitive token that references the original via a secure lookup. Anonymization removes or alters data so it can no longer be linked to an individual.
About the CompTIA test
CompTIA Exam Prep 2026 helps you pass with 3020+ realistic practice questions, each with a clear explanation.
Features
- 3020+ practice questions with detailed answer explanations
- Study modes: quick 10, mock exam, timed, missed questions, and study by topic
- Progress tracking with subject accuracy and a learning curve
- Clean, distraction-free design built for focused study
Whether you are just starting or doing a final review before test day, CompTIA Exam Prep gives you the questions and explanations you need to build confidence and pass.
You will be tested on
- The core topics and terminology you'll be tested on
- Rules, standards and best-practice procedures
- Real-world scenarios and how to respond
- Common mistakes and how to avoid them
How TheoryPractice helps you pass
- Real exam-style questions with instant, detailed explanations
- Full timed mock exams that mirror the real test format
- Flashcards & quiz modes from the same question bank
- Progress tracking so you know exactly when you're ready
Topics in this question bank
The core topics and terminology you'll be tested on
Rules, standards and best-practice procedures
Real-world scenarios and how to respond
Common mistakes and how to avoid them
Full CompTIA bank + unlimited mocks
Try 30 questions free. Unlock the complete CompTIA question bank, every explanation, and unlimited timed mock exams. Practice on any device.
Unlock CompTIA →