semplr.

Exams · Certifications · Licensing

CompTIA Security+ — Practice Exam

5.0 Security Program Management and Oversight: practice questions

Our CompTIA Security+ bank has 60 questions on this topic. Here are 5 of them with answers; the full mock exam draws from every topic, like the real one.

Start the free mock exam

Question 1

Under GDPR, which party decides the purposes and means of processing personal data?

  1. The processor
  2. The data subject
  3. The custodian
  4. The controller
Show the answer

D. The controller — GDPR Article 4: the controller determines purposes and means; the processor processes on the controller's behalf.

Question 2

Which metric describes the average time a repairable device runs before it fails?

  1. MTTR
  2. MTBF
  3. RTO
  4. RPO
Show the answer

B. MTBF — Mean time between failures measures reliability; mean time to repair measures how quickly it is fixed.

Question 3

What is a risk register?

  1. A record of identified risks, owners, ratings and responses
  2. A list of approved vendors and their contract renewal dates and contacts
  3. The firewall rule base
  4. A backup schedule
Show the answer

A. A record of identified risks, owners, ratings and responses — The risk register tracks each risk, its owner, threshold and treatment.

Question 4

What does the recovery time objective (RTO) define?

  1. The maximum data loss, measured in time back from the incident, that the business accepts
  2. The average time between failures
  3. The time to make a backup
  4. The maximum time a system can be down before impact is unacceptable
Show the answer

D. The maximum time a system can be down before impact is unacceptable — RTO is the target time to restore service. RPO is the acceptable data loss measured back from the incident.

Question 5

What is the difference between a policy and a procedure?

  1. A policy states what must happen; a procedure gives step-by-step how
  2. They are the same
  3. A procedure is a high-level goal set by the board, and a policy is a checklist for technicians
  4. A policy is optional guidance
Show the answer

A. A policy states what must happen; a procedure gives step-by-step how — Policies set mandatory direction; standards set specific requirements; procedures describe the steps; guidelines are recommendations.

More CompTIA Security+ topics