CompTIA Security+ Exam Preps practice questions and answers 2026. Tap an option to test yourself — you'll see the correct answer and a plain-English explanation for every question. Free, no login.
Q1A company needs to secure communication between multiple branch offices over the internet. Which technology would suit this requirement?
✓ Correct answer: D. VPN
A VPN (Virtual Private Network) is a technology that establishes a secure connection over the internet, ensuring that data transmitted between branch offices is encrypted and secure.
Q2In the context of wireless security protocols, what is the primary purpose of the WPA2 protocol?
✓ Correct answer: B. Encryption
Answer: Encryption WPA2 (Wi-Fi Protected Access 2) is a security protocol used to protect wireless networks. It provides encryption of data transmitted over the network, ensuring that only authorized devices can access and read the data. While WPA2 incorporates components of key exchange and authentication, its primary function is to encrypt data to maintain confidentiality.
Q3A growing organization wants to ensure that its employees can access important documents and collaborate seamlessly. They are looking for a solution that allows for file redundancy and does not rely on an expensive, centralized server infrastructure. What would be the best option to provide network-connected storage with redundancy, similar to RAID 1 mirroring?
✓ Correct answer: D. NAS
Answer: NAS NAS (Network Attached Storage) provides a cost-effective way to ensure file redundancy without relying on a centralized server. Using RAID 1 mirroring, data is duplicated across multiple drives, ensuring that if one drive fails, the other can take over without data loss.
Q4Review the following description and identify which cloud computing model is being referenced: A cloud environment that offers computing resources such as virtual machines, storage, and networking on a pay-as-you-go basis, enabling the deployment and operation of personal or business applications.
✓ Correct answer: B. IaaS
Answer: IaaS Infrastructure as a Service (IaaS) refers to a model where the cloud provider manages the fundamental computing resources like virtual machines, storage, and networking. Customers can then deploy and operate their software applications on this infrastructure. Software as a Service (SaaS) is a model in which the cloud provider develops and offers a fully-managed solution to customers. Examples include Gmail and Office 365. Platform as a Service (PaaS) is a model in which the cloud provider manages an environment where customers can create applications. Examples include hosted development environments, web servers, and databases. Anything as a Service (XaaS) is a broad term that refers to the delivery of various services over the cloud, including SaaS, PaaS, and IaaS.
Q5A network administrator notices that their network is experiencing delays and high latency. They determine that one part of the network needs to be able to communicate data more quickly and efficiently within a specific segment. What type of network topology would best allow for direct data transmission between multiple devices within the same segment?
✓ Correct answer: D. Mesh
Answer: Mesh A mesh topology allows for direct data transmission between multiple devices without the need for a central switch or hub. This topology can handle high traffic and reduce latency, making it ideal for efficient communication within a specific segment of the network.
Q6You are providing cybersecurity consulting for a healthcare enterprise concerned about unauthorized access to their patient records. Which of the following is an effective measure to enhance the security of their database systems?
✓ Correct answer: A. Implement regular security updates and patches
Correct Answer: Implement regular security updates and patches Applying regular updates and security patches ensures that any identified vulnerabilities in database systems are mitigated promptly. Neglecting updates can leave systems exposed to new threats. Regularly updating and patching systems bolsters their security against potential breaches.
Q7An organization needs to adopt a streamlined approach to manage its cloud infrastructure more effectively. They are looking for a methodology to plan, deploy, and manage their cloud services efficiently. Which of the following methodologies should the organization choose?
✓ Correct answer: B. Cloud service life cycle
Answer: Cloud service life cycle The cloud service life cycle is a framework that helps organizations effectively plan, deploy, manage, and retire cloud services. It typically includes phases such as development, deployment, operation, and decommissioning, ensuring that cloud services are managed efficiently and securely.
Q8Understanding the various security zones is crucial in designing secure network architectures. Which type of zone is primarily used to host publicly accessible services, such as web servers?
✓ Correct answer: D. DMZ (Demilitarized Zone)
The DMZ (Demilitarized Zone) is a physical or logical subnetwork that contains and exposes an organization's external-facing services to an untrusted network, usually the internet. This zone adds an additional layer of security to an organization's local area network (LAN) by segregating the external services from the internal network.
Q9An organization has identified that its email communications are at risk of interception and wants to ensure that emails are encrypted during transmission. The solution should utilize TLS for encryption, leveraging existing security infrastructure. Which of the following protocols should the organization implement?
✓ Correct answer: C. SMTP with STARTTLS
Answer: SMTP with STARTTLS SMTP with STARTTLS is a method used to take advantage of TLS encryption to secure email transmissions. This is critical to protect the data and credentials from potentially being intercepted during transmission. While SMTP by itself sends data in plaintext, STARTTLS upgrades the connection to use TLS. Other protocols like POP3 and IMAP also handle email but without explicit mentioning of using TLS encryption, they're not secure.
Q10A network engineer is configuring a VPN and needs to use a protocol that ensures secure communication by providing end-to-end encryption, mutual authentication, and data integrity. Which protocol should they implement?
✓ Correct answer: D. ESP
The Encapsulating Security Payload (ESP) protocol offers encryption, authentication, and integrity for VPNs, which ensures secure communication. ESP can encrypt both the payload and the headers of packets in tunnel mode, providing comprehensive security.
Use the free CompTIA Security+ Exam Preps sample, download the PDF, then unlock web-based timed mock exams for a full exam rehearsal.
Theory