Security+ performance-based questions: what they are and how to practise them
Security+ PBQs commonly ask you to place controls, match attacks to mitigations, or order an incident response. They are the part of the exam where knowing a definition is least useful and knowing why a control belongs somewhere is most useful.
Security+ PBQs test placement and sequence: not what a control is, but where it goes and when it is applied. That is precisely the distinction between a candidate who memorised the acronym list and one who understands the architecture.
On the real exam these appear as performance-based questions (PBQs). Multiple-choice (single and multiple response) plus performance-based questions (PBQs)
For control-placement tasks, decide what you are protecting before deciding what to deploy. The asset determines the control, not the reverse.
For incident-response ordering, containment precedes eradication and eradication precedes recovery. Most wrong orderings restore service before the attacker is removed.
When two answers both look defensible, prefer the one that addresses the cause rather than the symptom.
Try three questions. Understand every answer.
Original English practice examples, with answers and explanations available here. No account required. These are independent teaching examples, not official exam questions or exam dumps.
Question 1 of 3 · Threats, vulnerabilities, and mitigations
Answer and explanation
Best answer: Validate and apply the workaround, monitor it, and track the pending patch
A validated compensating control can reduce exposure while the permanent fix is pending. Retain the vulnerability record, residual risk, and a plan to apply and verify the patch.
Why the other choices fit less well
Waiting leaves exposure unchanged, and a hostname change does not block the flaw. A workaround reduces risk without necessarily removing the vulnerability, so closing it as permanently fixed overstates the evidence.
Best answer: Grant approved read-only access to that dataset with a reviewed expiry
Limit permissions to the approved task, resource and duration. Review the expiry and record the grant so access can be removed when the investigation ends.
Why the other choices fit less well
Permanent administrator rights exceed the task. Shared credentials weaken individual accountability. Disabling logs removes evidence without reducing the permissions required.
Best answer: Preserve both records and investigate or repeat the transfer before relying on the copy
The received bytes have not passed the expected integrity check. Preserve the acquisition record and investigate the discrepancy or acquire a verified copy.
Why the other choices fit less well
A filename does not establish byte-level integrity. Replacing the original hash hides the discrepancy. Do not describe the copy as verified until the mismatch is resolved.
Paid question-bank access is a one-time purchase, with no recurring subscription. Official exam registration, vouchers and provider labs are separate from CertSprint practice.
What you get here
How we practise them
Our Security+ bank contains 31 PBQ-style exercises in two formats: matching tasks, where you pair each requirement to the capability that satisfies it, and ordering tasks, where you sequence the steps of a procedure. Each one carries the same full explanation as the multiple-choice questions, covering why the correct arrangement is right and why the plausible alternative is not.
These train the reasoning the exam tests — sequence, placement, and matching — rather than reproducing a vendor's simulation interface. Nothing here recreates the exam environment itself, and no practice product legitimately can.
See where you stand on Security+
20 free questions, no card required. Your domain scores show which areas need work before you book the exam.
Work through the scenario, identify the evidence that matters, then compare your reasoning with the explanation. Use domain scores to choose your next study session. A practice percentage is a learning signal, not a prediction or an official exam score.
The newest practice set is available in eight languages. Earlier exercises may appear in English. These are original independent practice scenarios, not official exam questions.
