CompTIA CyberDefense Pro Competency Assessment Practice Test
Cyber defense brings together preventive controls, secure application practices, endpoint protection, network segmentation, backup validation, and incident evidence handling. This practice page uses scenarios about reducing data exposure, limiting malicious code, evaluating safeguards, and preserving information during a suspected compromise. It also touches on risk analysis and security awareness testing, connecting technical controls with the operational decisions analysts make to protect business services.
Exam overview
About the CompTIA CyberDefense Pro Competency Assessment Exam
Cyber defense work requires matching a threat or business concern to a suitable control, then assessing whether that control is effective and proportionate. The practice scenarios touch on data loss prevention, input validation, browser sandboxing, encrypted device storage, and network segmentation. Other decisions involve comparing the cost of a safeguard with the risk it reduces, testing whether backups can be restored, and using simulated phishing to assess reporting behavior without delivering a malicious payload. Incident response scenarios emphasize preserving evidence integrity and documenting chain of custody when a device may be compromised or missing. Threat modeling adds a structured way to consider how an attack path could affect business services and where safeguards apply. These topics call for clear reasoning about control purpose, likely impact, and the evidence needed to support a security decision.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
A company wants to reduce the chance that an employee accidentally sends sensitive data to an unauthorized external recipient. Which control is most directly designed for this purpose?
Show answer
Correct answer: AData loss prevention controls can identify sensitive content and apply actions such as blocking or warning on unauthorized transfers.
A developer needs to confirm that a web application properly handles untrusted input before using it in a database query. Which defensive practice is most appropriate?
Show answer
Correct answer: AParameterized queries separate SQL instructions from user-supplied values, helping prevent untrusted input from changing the meaning of a database query.
An organization is evaluating whether a security control reduces risk enough to justify its cost. Which comparison is most useful?
Show answer
Correct answer: AA practical control evaluation considers the risk reduction it provides alongside the costs to deploy and maintain it.
An organization wants to reduce the risk that a malicious script running in a browser can access sensitive files outside its intended area. Which technology is designed to restrict application behavior in this way?
Show answer
Correct answer: ASandboxing runs an application within a restricted environment, limiting its access to files, processes, or system resources beyond its permitted scope.
A team wants to ensure that a backup can be restored successfully before relying on it during an outage. What should the team do?
Show answer
Correct answer: AA test restore validates that backup data is readable and that the recovery process can meet operational needs; a completed job alone does not prove recoverability.
A company is reviewing whether employees can recognize and report a simulated suspicious message. Which activity best measures this behavior without sending a real malicious payload?
Show answer
Correct answer: AAn authorized simulation can measure recognition and reporting behavior while using safe content and avoiding collection of real credentials.
A security analyst receives a report that a laptop may have been stolen, but its status is not yet confirmed. Which measure best helps protect organizational data on the device if it is later lost?
Show answer
Correct answer: AFull-disk encryption helps protect data at rest by making it unreadable without the required cryptographic credentials. It is especially valuable when a device is lost or stolen while powered off or otherwise locked.
How to use this practice test
The free US Practice Tests practice bank contains 50 questions; each session presents up to 20 random questions. Use a session to check how well you distinguish controls such as segmentation, sandboxing, encryption, and data loss prevention, then review the results to identify concepts that need another pass.
Preparation tips
- For each scenario, identify the asset, threat, and intended security outcome before choosing a control; distinguish data loss prevention from encryption and access control.
- Practice tracing untrusted web input through validation and parameterized database queries, and explain how browser sandboxing limits a script’s access.
- Compare a proposed safeguard’s cost with the expected risk reduction, and identify the assumptions that could change that comparison.
- Write a backup restore-test checklist that verifies data integrity and service recovery, not just successful backup-job completion.
- For suspected device loss or compromise, outline evidence-preservation steps, including documentation and chain of custody, alongside endpoint encryption and containment.