CompTIA Security+ Practice Test: 20 Questions on Network Security

Network security practice should connect each control to the traffic or asset it protects. Trace the scenario's path through the network before deciding which safeguard addresses the problem.

Practice Questions

Question 1

Q: Default port for RDP?
Answer: 3389
Why it matters on SY0-701: Remote Desktop uses TCP 3389 by default.

Question 2

Q: Default port for DNS?
Answer: 53
Why it matters on SY0-701: DNS uses port 53.

Question 3

Q: Usable hosts in a /24?
Answer: 254
Why it matters on SY0-701: 256 total minus network and broadcast.

Question 4

Q: Security control that blocks traffic by rule?
Answer: Firewall
Why it matters on SY0-701: It is a preventive network control.

Question 5

Q: Wireless standard with SAE?
Answer: WPA3
Why it matters on SY0-701: WPA3 improves password-based authentication.

Questions 6–20

Questions 6 through 20 continue covering network security topics for SY0-701. Topics include network segmentation, VLANs, IDS/IPS, VPNs, DMZ architecture, DNS security, and common network attacks. Each question includes an explanation tying the concept to exam expectations.

How should you score yourself?

Knowing that SSH is port 22 matters less than recognizing that a blocked 22 explains why secure Linux administration fails while HTTPS on 443 still works.

Our CompTIA Security+ study guide covers all five SY0-701 domains with domain-weighted practice questions. Available at securitypluscertprep.com/guide.

SimpuTech's Security+ AI tutor can walk you through practice questions and build a personalized study plan. Try it at SimpuTech.com.