Security+ General Security Concepts Practice Questions
Domain 1 of 5 · 12% of SY0-701 and 16% of SY0-801
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free General Security Concepts drillA company protects its customer database with a perimeter firewall, network segmentation, database access controls, encryption at rest and activity monitoring. Which concept does this layering show?
General Security Concepts on the Security+ exam
General Security Concepts is 12% of SY0-701 and 16% of SY0-801, about 11 of 90 questions on SY0-701 and 14 on SY0-801. It is the vocabulary the rest of the exam builds on: what a control does, how trust is established, how changes are managed and how cryptography protects data.
- Share of the exam
- 12% of SY0-701 (about 11 of 90 questions) and 16% of SY0-801 (about 14)
- Our drill
- 10 questions from 61 General Security Concepts questions, untimed, a note on every option or row; one free attempt, unlimited with a pass
What General Security Concepts questions test
- Control categories (technical, managerial, operational, physical) and types (preventive, detective, corrective, deterrent, compensating, directive)
- Confidentiality, integrity and availability; authentication, authorization and accounting; non-repudiation; least privilege and defense in depth
- Zero Trust: adaptive identity, threat scope reduction, the policy engine, policy administrator and policy enforcement point
- Change management: approval, ownership, impact analysis, backout plans, maintenance windows, dependencies, documentation and version control
- Cryptography: symmetric and asymmetric encryption, key exchange, encryption levels, hashing and salting, digital signatures, PKI and certificates (CSR, CRL, OCSP, wildcard, self-signed), TPM and HSM, tokenization, masking and steganography
Sit the full exam under the real clock
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free General Security Concepts drillHow to study it
- Classify controls by what they do, not by the technology: a camera can be detective and deterrent at the same time.
- Learn which key does what: encrypt to a recipient with their public key; sign with your own private key; verify with the signer's public key.
- Write out the certificate lifecycle once: key pair, CSR, CA signature, installation, revocation through CRL or OCSP.
- Take the domain drill until you score 85% or better; these points support every other domain.
Common questions
Is there a lot of cryptography on Security+?
Cryptography is one of three objectives in Domain 1 and comes up again in architecture and operations questions. You need the concepts (which algorithm type fits which need, what PKI components do), not the math.
How many General Security Concepts questions are on Security+?
Domain 1 is 12% of SY0-701, about 11 of 90 questions, and 16% of SY0-801, about 14 of 90.
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free General Security Concepts drillMore Security+ practice
Sources
Original practice questions for exam preparation, written to the CompTIA Security+ SY0-701 domain weights and the SY0-801 exam objectives; none comes from a real exam. Independent practice, not affiliated with or endorsed by CompTIA. CompTIA and Security+ are trademarks of CompTIA, Inc.