10 free, exam-style CompTIA SecurityX (SecurityX) (SecurityX) practice questions with answers and explanations. No signup required. Work through them below, then take the full free SecurityX practice test to study every exam domain.
The SecurityX exam has 90 questions and runs 2 hours 45 minutes.
These 10 free SecurityX questions are organized by exam domain, so you can see how each part of the CompTIA SecurityX (SecurityX) blueprint is tested. Reveal the answer and explanation under each question.
During red-team testing of an internal chatbot, an analyst submits input that causes the model to ignore its original system instructions and reveal restricted data. Which AI-specific threat does this MOST precisely describe?
Correct answer: C - Prompt injection
A risk analyst finds a data center has a 5% annual chance of a flood, and that a flood would destroy 40% of a $2,000,000 asset. To justify an annual insurance premium, which single figure should the analyst present, and what is its value?
Correct answer: D - Annualized Loss Expectancy of $40,000
In a Zero Trust architecture, an access request is evaluated against policy and then permitted or blocked at the resource. Which component EVALUATES the policy and renders the access decision?
Correct answer: B - Policy Decision Point (PDP)
Developers need to detect vulnerabilities in their own source code as early as possible in the pipeline, before the application is ever compiled, executed, or deployed. Which testing approach fits this requirement?
Correct answer: A - Static Application Security Testing (SAST)
A partner web application needs to make authorized API calls on behalf of users to a company's resource server without ever handling the users' passwords. The architect also needs the partner to be able to confirm each user's identity. Which combination BEST meets both requirements?
Correct answer: A - OAuth 2.0 for authorization and OpenID Connect for authentication
A team learns that a future cryptographically relevant quantum computer could break the algorithm protecting their TLS key exchange. Which item is MOST at risk and should be prioritized for migration to a post-quantum alternative?
Correct answer: A - Elliptic Curve Diffie-Hellman key exchange
A domain's outbound email is being spoofed. The team has already published a record listing authorized sending IPs and another that cryptographically signs outgoing messages. Which additional mechanism sets a policy telling receivers how to handle messages that fail those checks AND returns aggregate reports?
Correct answer: B - DMARC
An organization must store the private keys for its enterprise PKI in a dedicated, tamper-resistant appliance that performs cryptographic operations and never exposes the keys in plaintext. Which technology is purpose-built for this role?
Correct answer: D - Hardware Security Module (HSM)
A parameter on an internal web app accepts a URL, and the server fetches whatever it points to. An attacker supplies a link to the cloud provider's instance metadata endpoint and retrieves temporary credentials. Which vulnerability was exploited?
Correct answer: A - Server-side request forgery (SSRF)
A forensic responder arrives at a compromised server that is still powered on and connected to the network. Following the order of volatility, which evidence should be collected FIRST?
Correct answer: C - Data in RAM and CPU cache
Practice hundreds more SecurityX questions with instant scoring, weak-area drills, and full exam simulations.