267 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
An attacker leaves several branded USB flash drives labeled 'Confidential Salary Data 2026' in the parking lot of a targeted enterprise, hoping curious employees will plug them into corporate computers. What type of social engineering attack is being demonstrated?
Baiting is a social engineering attack where the attacker leaves a physical item (like a USB drive) or offers something enticing to lure victims into compromising security. The branded USB drives labeled 'Confidential Salary Data 2026' exploit curiosity and the promise of valuabl…Read full explanation
An employee notices that a physical access control badge reader at the office entrance has been tampered with and a small unauthorized recording device is attached nearby. This scenario primarily represents a threat vector targeting which aspect of security?
The scenario describes tampering with a badge reader and attaching an unauthorized recording device — both are attacks against the physical access control infrastructure of a building. Physical security encompasses the controls (badge readers, locks, cameras, guards) that protect…Read full explanation
During an incident response review, it is discovered that an attacker gained access to an internal database by compromising a service account that had full administrative privileges across multiple disparate systems, far exceeding what was necessary for its routine function. Which security best practice was violated?
The Principle of Least Privilege requires that accounts be granted only the minimum permissions necessary to perform their function. A service account with full administrative rights across multiple disparate systems clearly exceeds its required scope, so least privilege was viol…Read full explanation
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.