Objective 5.5: Explain types and purposes of audits and assessments
Practice questions for Security+ objective 5.5, “Explain types and purposes of audits and assessments.” Every question is original, written to the SY0-701 exam objectives, and comes with a full explanation — answer them below to see instant grading.
This objective sits in Domain 5.0: Security Program Management and Oversight, which is about 20% of the exam — so mastering it moves your readiness score meaningfully.
1.A penetration tester is given only the organization's company name and public-facing IP ranges before beginning the assessment. What type of environment is this?
2.An organization's board of directors requests assurance about the effectiveness of the organization's security controls. The security team presents three options: Option A is an internal audit conducted by the organization's own internal audit function using a recognized framework; Option B is a penetration test conducted by an external firm targeting the organization's internet-facing applications and internal network; Option C is a SOC 2 Type II examination conducted by an independent CPA firm over a 12-month observation period. The board asks the CISO to explain what each assessment provides and which provides the strongest independent assurance about control effectiveness over time. Which explanation is most precise?
3.Which of the following BEST describes the PRIMARY objective of a penetration test compared to a vulnerability scan?
4.After completing an assessment, an auditor formally documents that all required compliance controls are in place and operating effectively. The auditor signs this document. Which audit concept does the signed document represent?
5.A payment card industry compliance officer from a card brand conducts a formal review of a merchant's security controls to verify PCI DSS compliance. This is BEST classified as:
Practice every objective, adaptively
CertBench tracks your score on 5.5 and every other objective, then builds a daily plan that targets your weakest spots. Start with the free diagnostic.