Three free interactive performance-based questions that mirror the real SY0-701 formats — log analysis, attack matching, and incident-response ordering. No signup required.
PBQs are the part of Security+ people fear most — and the part multiple-choice drilling won't prepare you for. Work the three simulations below like exam day: read the scenario, commit to an answer, then check it. Each one explains the fix and how to reason through the next one when the exam changes the details.
Performance-based questions are the part of SY0-701 that catches people off guard. Work through these three — a log analysis, an attack-matching, and an incident-response ordering — and check your answers instantly.
PBQ 1 · Log Analysis
Review the authentication log below. Select every entry that is an indicator of compromise (IoC).
02:14 admin LOGIN SUCCESS src=185.220.101.4 (Tor exit node) 09:03 jdoe LOGIN SUCCESS src=10.20.0.15 (corporate VPN) 01:47 root 47 FAILED then SUCCESS in 6s src=203.0.113.9 02:00 system BACKUP job completed 02:31 websrv OUTBOUND connect 4444/tcp -> 198.51.100.7
PBQ 2 · Attack Classification
Match each attack to its category.
PBQ 3 · Incident Response Process
Put the incident response phases in the correct order.
The full Security+ practice set drills every PBQ style with instant AI explanations for each answer. Three practice exams are free — no signup, no credit card.
Start Free Security+ PracticeGo deeper: six real PBQ scenarios explained walks through memorable cases from our practice bank, and the Security+ passing score guide covers how PBQs factor into your 750/900. For scenario-based multiple-choice reps, see Security+ PBQ practice — or jump straight into the free Security+ practice test.
Practice with 7,500+ exam-style questions and AI explanations. Free to start.
