CompTIA Security+ Practice Test 2026

About the CompTIA Security+ exam

Also searched as: Security+ practice test. It's the same exam — CompTIA Security+ is the official name.

The CompTIA Security+ Certification (CompTIA Security+) is a it certifications examination administered in International 🌍. It is designed to assess candidates' knowledge and proficiency across 5 key subject areas including Threats & Vulnerabilities, Architecture & Design, Implementation, Operations & Incident Response. This exam is widely recognized as an essential benchmark for IT professionals.

Use short CompTIA Security+ practice sets to identify topics to revisit. Choose a subject and difficulty, answer questions, then review the explanations. New accounts get 30 question credits; further new questions use paid credits. Retaking previously seen questions is free.

Whether you're a first-time candidate or retaking the CompTIA Security+ to improve your score, InfinityMock helps you identify your strengths and weaknesses through detailed performance analytics. Our platform covers Threats & Vulnerabilities, Architecture & Design, Implementation, Operations & Incident Response, Governance & Compliance, with questions available at Easy, Medium, and Hard difficulty levels. Track your progress, review detailed explanations, and build the confidence you need to pass on exam day.

CompTIA Security+ — quick answers

CompTIA Security+ at a glance

8 free CompTIA Security+ practice questions (2026)

Answer these first — no signup, no card. Every answer is explained. For more practice, sign up for 30 free question credits and choose a subject above.

1. An executive assistant receives an urgent, highly personalized email from what appears to be the company's CEO, asking for a wire transfer to a new vendor. The email uses the CEO's actual signature block and references a real project the CEO is working on. What type of social engineering attack is this?

   • Spam
   • Whaling
   • Smishing
   • Vishing
   Show answer & explanation

   Answer: B. Whaling

   Whaling is a highly targeted social engineering attack (a form of spear phishing) aimed at high-profile individuals, such as executives, or impersonating them to target critical employees like executive assistants or financial officers.

   Topic: Threats & Vulnerabilities · medium

2. A cybersecurity analyst discovers that a malicious script has been injected into a web application's database. When subsequent users view the dynamic content fetched from the database, the script executes within their browsers, attempting to steal session cookies. Which type of vulnerability is being exploited?

   • Reflected Cross-Site Scripting (XSS)
   • Stored Cross-Site Scripting (XSS)
   • Cross-Site Request Forgery (CSRF)
   • SQL Injection (SQLi)
   Show answer & explanation

   Answer: B. Stored Cross-Site Scripting (XSS)

   Stored XSS occurs when a malicious script is permanently stored on a target server (such as in a database). When users request the stored data, the malicious script is delivered and executed in their browser.

   Topic: Threats & Vulnerabilities · medium

3. A security administrator needs to perform an assessment of a critical web server to find configuration issues, patch levels, and local system vulnerability data without risking service disruption. Which of the following approaches is best suited for this task?

   • Active non-credentialed vulnerability scan
   • Credentialed vulnerability scan
   • Intrusive penetration test
   • Passive network monitoring
   Show answer & explanation

   Answer: B. Credentialed vulnerability scan

   A credentialed vulnerability scan uses valid credentials to log into the target system, allowing it to check patch levels, local registries, and configuration files directly with minimal impact and higher accuracy than non-credentialed scans.

   Topic: Threats & Vulnerabilities · hard

4. A security analyst is investigating a compromised server. They notice that system utilities like 'ls' and 'ps' are returning altered results to hide unauthorized processes. The analyst suspects the malware has modified kernel-level files. What type of malware is likely installed?

   • Rootkit
   • Logic Bomb
   • Ransomware
   • Keylogger
   Show answer & explanation

   Answer: A. Rootkit

   A rootkit is designed to hide its presence (and the presence of other malware) on a system by modifying core system utilities and sometimes the operating system kernel itself.

   Topic: Threats & Vulnerabilities · medium

5. A defense contractor's network is compromised by an attacker who slowly, stealthily gathers intellectual property over a period of 18 months. The attacker demonstrates high sophistication, deep resources, and a focus on long-term intelligence gathering. Which threat actor type fits this profile?

   • Hacktivist
   • Script Kiddie
   • Advanced Persistent Threat (APT)
   • Insider Threat
   Show answer & explanation

   Answer: C. Advanced Persistent Threat (APT)

   Advanced Persistent Threats (APTs) are typically highly funded, state-sponsored groups that focus on stealthy, long-term operations targeting specific organizations for strategic or political gain.

   Topic: Threats & Vulnerabilities · easy

6. An attacker sets up a rogue wireless access point with the exact same SSID as a local airport's public Wi-Fi network. Unsuspecting passengers connect to it, allowing the attacker to capture their cleartext credentials. What type of attack is this?

   • Bluejacking
   • Evil Twin
   • WPS PIN brute force
   • IV attack
   Show answer & explanation

   Answer: B. Evil Twin

   An Evil Twin attack involves setting up a rogue wireless access point with the same SSID (and potentially MAC address) as a legitimate network to trick users into connecting.

   Topic: Threats & Vulnerabilities · easy

7. An attacker performs a Man-in-the-Middle (MitM) attack and intercepts the initial handshake between a client browser and a web server. The attacker manipulates the negotiation to force the use of an older, insecure version of TLS. What cryptographic attack is this?

   • Birthday attack
   • Replay attack
   • Downgrade attack
   • Collision attack
   Show answer & explanation

   Answer: C. Downgrade attack

   A downgrade attack forces a system to abandon a secure connection protocol (like modern TLS) in favor of an older, weaker, and vulnerable protocol (like SSL or TLS 1.0) to make decryption easier.

   Topic: Threats & Vulnerabilities · hard

8. An attacker targets a specific financial planning firm by compromising a local sandwich shop's online ordering menu—a site known to be visited daily by the firm's employees. When employees order lunch, their browsers are silently redirected to an exploit kit. What social engineering vector is this?

   • Watering Hole attack
   • Pharming
   • Spear Phishing
   • Typosquatting
   Show answer & explanation

   Answer: A. Watering Hole attack

   A Watering Hole attack targets a specific group of users by infecting a third-party website that the group is known to trust and visit frequently.

   Topic: Threats & Vulnerabilities · medium

Why Practice with InfinityMock's CompTIA Security+ Mock Test?

• Fresh practice questions — Use credits for new questions; retake seen questions free
• Instant Results & Explanations — Learn from every question with detailed answer explanations
• Performance Analytics — Track your progress with grade reports, difficulty breakdowns, and time analysis
• Independent practice — Use alongside current official CompTIA Security+ materials
• Multiple Difficulty Levels — Practice Easy, Medium, or Hard CompTIA Security+ questions

CompTIA Security+ Exam Subjects

Available practice subjects: Threats & Vulnerabilities, Architecture & Design, Implementation, Operations & Incident Response, Governance & Compliance. Select a subject for focused preparation. Coverage is not a guarantee of the complete official syllabus.

📖 CompTIA Security+ Study Guide

Read our comprehensive How to Pass the CompTIA Security+ in 2026 — Complete Study Guide for expert preparation tips, study plans, and strategies.

🔗 Related Exams

Students preparing for CompTIA Security+ also practice for:

Frequently Asked Questions

📚 Browse All 275+ Exams →