Security Architecture
84 practice questions with explanations — 15 free to try
PassNova has 84 CompTIA Security+ practice questions on Security Architecture, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Security Architecture: example questions & answers
3 worked examples with answers and explanations below. Try 15 CompTIA Security+ questions free in the browser; the full 84-question Security Architecture bank is part of PassNova Premium.
Which network zone hosts public-facing servers separated from the internal LAN?
- AThe access layer of the campus LAN
- BThe out-of-band management VLAN
- CScreened subnet (DMZ)✓
- DThe core routing layer
Answer: A screened subnet (DMZ) isolates internet-facing servers from the internal network.
Which design principle assumes breach and limits trust by default?
- APerimeter security
- BZero trust✓
- CImplicit trust
- DOpen access
Answer: Zero trust assumes breach and verifies every request, granting least privilege.
Which control segments the network to contain breaches?
- ASingle VLAN
- BOpen trust
- CMicrosegmentation✓
- DFlat network
Answer: Microsegmentation creates fine-grained segments to contain lateral movement.