Security+ PBQ Practice
Performance-based questions (PBQs) are the hands-on tasks on the Security+ SY0-701 exam: you work through a simulation instead of picking one answer. The free simulator below has three to try, with instant feedback on each. The answers further down cover what PBQ stands for, how many to expect and whether they're worth more points.
No signup needed — start immediately
Try 3 Security+ PBQs Right Now
Performance-based questions are the part of SY0-701 that catches people off guard. Work through these three — a log analysis, an attack-matching, and an incident-response ordering — and check your answers instantly.
PBQ 1 · Log Analysis
Review the authentication log below. Select every entry that is an indicator of compromise (IoC).
02:14 admin LOGIN SUCCESS src=185.220.101.4 (Tor exit node) 09:03 jdoe LOGIN SUCCESS src=10.20.0.15 (corporate VPN) 01:47 root 47 FAILED then SUCCESS in 6s src=203.0.113.9 02:00 system BACKUP job completed 02:31 websrv OUTBOUND connect 4444/tcp -> 198.51.100.7
PBQ 2 · Attack Classification
Match each attack to its category.
PBQ 3 · Incident Response Process
Put the incident response phases in the correct order.
That's the idea — now do it for real
The full Security+ practice set is multiple choice, with an explanation on every question. 3 practice exams are free, no signup and no credit card.
Start Free Security+ PracticeWhat You Get
Three Free PBQ Formats
The simulator on this page has a log analysis (pick the indicators of compromise), an attack classification (match each attack to its category) and an incident-response ordering (put the phases in order). No signup, and every answer is checked on the spot.
Formats Candidates Report
Firewall rule tables, network diagrams, command-line output and settings screens are commonly reported by candidates; CompTIA doesn't publish a list. The simulator doesn't have those yet.
1,808 SY0-701 Questions
Multiple-choice practice, much of it scenario-based, on the concepts PBQs test: access control, incident response, cryptography and reading logs. Campaign Pass unlocks the full bank.
AI Breakdown of Misses
Miss a scenario question and a deep dive gives a longer explanation, why the concept matters, and the common mistake. 3 a day on a free account, unlimited with Campaign Pass.
How It Works
Step 1
Pick Your Certification
Choose from Security+ SY0-701, A+ 220-1101, Network+ N10-009, CySA+ CS0-003, PenTest+ PT0-003, SecAI+ CY0-001, Claude Architect (Anthropic CCAR-F). Each path has its own question bank, labeled with the exam code it covers.
Step 2
Practice & Learn
Take timed practice exams. Every question has a written explanation, and a free account adds 3 AI deep dives a day, unlimited with Campaign Pass; most CompTIA deep dives include a mnemonic. Missed battle questions become flashcards automatically, and signed in, the Forge turns exam misses into cards.
Step 3
Track Your Readiness
Track accuracy by domain and see exactly where you're strong. A full exam-readiness verdict is coming soon.
Security+ PBQ Practice
7,500+ questions. 3 practice exams per certification included on the free tier. No signup required.
Start PBQ PracticeFrequently Asked Questions
What does PBQ stand for in CompTIA?
PBQ stands for performance-based question. CompTIA uses the term for exam items that test whether you can solve a problem in a realistic setting, delivered as a simulation or inside a virtual environment, instead of asking you to pick one answer from a list. Source: CompTIA, Performance-Based Questions Explained (checked Sep 25, 2026).
Are there PBQs on the Security+ exam?
Yes. CompTIA describes SY0-701 as a mix of multiple-choice and performance-based questions: a maximum of 90 questions in 90 minutes, with a passing score of 750 on a 100-900 scale. Source: CompTIA SY0-701 exam details (checked Sep 25, 2026).
How many PBQs are on Security+ SY0-701?
CompTIA doesn't publish a PBQ count for SY0-701. Candidates commonly report about 3-5, usually at the start of the exam, and the number can differ between exam forms. The figure CompTIA does publish is the total: a maximum of 90 questions, multiple-choice and performance-based combined. Source: CompTIA SY0-701 exam details (checked Sep 25, 2026).
What is a PBQ in cybersecurity?
A PBQ is a hands-on exam task. Instead of recalling a fact, you do the work: pick the suspicious entries out of a log, match attacks to their categories, or put incident-response phases in order. Firewall rule tables and network diagrams are also commonly reported on Security+. Try the first three in the free Security+ PBQ simulator.
Are PBQs worth more points than multiple-choice questions?
CompTIA doesn't say. It publishes the passing score, 750 on a 100-900 scale, but not how individual items are weighted, so treat any per-PBQ point value you read online as a guess. What you can control is time: many candidates flag the PBQs, answer the multiple-choice questions first, and come back.