Security+ Program Management and Oversight Practice Questions
Domain 5 of 5 · 20% of SY0-701 and 14% of SY0-801
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free Program Management drillA company buys cyber insurance to cover the costs of a possible ransomware incident. Which risk treatment is this?
Security Program Management and Oversight on the Security+ exam
Security Program Management and Oversight is 20% of SY0-701 and 14% of SY0-801, about 18 of 90 questions on SY0-701 and 13 on SY0-801. It covers how a security program is governed and measured: the documents that set rules, how risk is analyzed and treated, how vendors are managed and how compliance is shown.
- Share of the exam
- 20% of SY0-701 (about 18 of 90 questions) and 14% of SY0-801 (about 13)
- Our drill
- 10 questions from 57 Program Management questions, untimed, a note on every option or row; one free attempt, unlimited with a pass
What Program Management questions test
- Governance: policies, standards, procedures and guidelines; AUP, clean desk, BYOD and retention policies; playbooks and runbooks
- Risk management: risk registers, qualitative and quantitative analysis, SLE, ARO and ALE, risk appetite, residual risk, KRIs, BIA, and the four treatments (transfer, accept, avoid, mitigate)
- Third-party risk: due diligence, RFP and RFI, SLA, MOU, MSA, SOW and NDA, right to audit, attestations, vendor lock-in and rules of engagement
- Compliance and privacy: controllers and processors, the right to be forgotten, consent, retention, consequences of non-compliance
- Audits and assessments: internal and external audits, known, unknown and partially known penetration tests, passive and active reconnaissance, MITRE ATT&CK, the Cyber Kill Chain and the Diamond Model
- Security awareness: phishing simulations, targeted and corrective training, reporting and measuring effectiveness
Sit the full exam under the real clock
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free Program Management drillHow to study it
- Practice the risk math until it takes seconds: SLE = asset value x exposure factor; ALE = SLE x ARO; once every 10 years is an ARO of 0.1.
- Sort documents by how binding they are: policies and standards are mandatory; guidelines are advice; MOUs state intent; SLAs and contracts bind.
- Map each risk treatment to an example: insurance transfers, walking away avoids, controls mitigate, a signed exception accepts.
- Take the program management drill, then the performance-based drill, which includes an ALE calculation.
Common questions
Is there math on Security+?
Only simple risk arithmetic: single loss expectancy (asset value x exposure factor), annualized rate of occurrence and annualized loss expectancy (SLE x ARO). No calculator-heavy questions.
How many program management questions are on Security+?
Domain 5 is 20% of SY0-701, about 18 of 90 questions, and 14% of SY0-801, about 13 of 90.
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free Program Management drillMore Security+ practice
Sources
Original practice questions for exam preparation, written to the CompTIA Security+ SY0-701 domain weights and the SY0-801 exam objectives; none comes from a real exam. Independent practice, not affiliated with or endorsed by CompTIA. CompTIA and Security+ are trademarks of CompTIA, Inc.