Security Architecture
113 practice questions with explanations — 15 free to try
3 of these 113 questions are in the free 15-question taster · the full topic is part of Premium
PassNova has 113 CompTIA Security+ practice questions on Security Architecture, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Security Architecture: example questions & answers
3 worked examples with answers and explanations below. Try 15 CompTIA Security+ questions free in the browser; the full 113-question Security Architecture bank is part of PassNova Premium.
A company groups systems with similar trust levels and data sensitivity so that traffic between groups must pass a firewall. What are these groups called?
- AFailure modes
- BHoneynets
- CSecurity zones✓
- DAvailability zones
Answer: Security zones group assets by trust and sensitivity, such as internet, screened subnet, internal and management, and devices placed at zone boundaries enforce what may cross. Availability zones are a cloud provider's data-centre groupings for resilience, and failure modes describe how a control behaves when it breaks.
A cloud storage bucket holding EU customer records is configured to refuse access requests from outside the EU. Which data protection method is this?
- ATokenization of records
- BGeographic restriction✓
- CDynamic data masking
- DSalted hashing
Answer: Geographic restrictions allow or deny access based on location, which supports data sovereignty requirements by keeping regulated data within a region. Tokenization, masking and hashing change how the data itself is stored or displayed rather than who may reach it from where.
Which control segments the network to contain breaches?
- ASingle VLAN
- BOpen trust
- CMicrosegmentation✓
- DFlat network
Answer: Microsegmentation creates fine-grained segments to contain lateral movement.