Security+ Security Architecture Practice Questions
Domain 3 of 5 · 18% of SY0-701 and 19% of SY0-801
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free Security Architecture drillA company needs a recovery site that is affordable and can be operational within a few days. It has some hardware and network connections installed but requires current data to be loaded. Which site type fits?
Security Architecture on the Security+ exam
Security Architecture is 18% of SY0-701 and 19% of SY0-801, about 16 of 90 questions on SY0-701 and 17 on SY0-801. It asks how environments are designed to be secure and resilient: where a device goes, who is responsible in the cloud, how data is classified and protected, and how the business recovers.
- Share of the exam
- 18% of SY0-701 (about 16 of 90 questions) and 19% of SY0-801 (about 17)
- Our drill
- 10 questions from 60 Security Architecture questions, untimed, a note on every option or row; one free attempt, unlimited with a pass
What Security Architecture questions test
- Architecture models: cloud deployment and the shared responsibility model, IaC, serverless, microservices, containers and virtualization, air gaps, ICS/SCADA and IoT
- Secure infrastructure: security zones, screened subnets, inline versus tap placement, fail-open and fail-closed, jump servers, proxies, VPN tunnels, SASE and SSE, out-of-band management
- Data protection: data states and types, classification, owner, custodian, controller and processor, DLP, geofencing, tokenization, masking and deidentification, retention and disposal
- Resilience and recovery: hot, warm and cold sites, load balancing and clustering, UPS and generators, backup types and immutability, RTO, RPO, MTTR and MTBF, testing
Sit the full exam under the real clock
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free Security Architecture drillHow to study it
- Draw one network with an internet edge, a DMZ, a user network and a restricted server network, and place every device you study on it.
- Learn the recovery metrics with one sentence each: RPO is how much data you can lose; RTO is how long you can be down.
- For each cloud service model, list what the customer still owns: identities, data and configuration are always yours.
- Take the architecture drill, then the performance-based drill, which includes device placement and recovery choices.
Common questions
Do I need to know backup types for Security+?
Yes. Know what full, incremental and differential backups contain and which ones a restore needs, plus snapshots, replication, immutability and offsite copies.
How many architecture questions are on Security+?
Domain 3 is 18% of SY0-701, about 16 of 90 questions, and 19% of SY0-801, about 17 of 90.
90 questions across all five domains in 90 minutes, with a score for each domain so you know where you stand.
Free Security Architecture drillMore Security+ practice
Sources
Original practice questions for exam preparation, written to the CompTIA Security+ SY0-701 domain weights and the SY0-801 exam objectives; none comes from a real exam. Independent practice, not affiliated with or endorsed by CompTIA. CompTIA and Security+ are trademarks of CompTIA, Inc.