Security+ PBQ examples you can actually try

Performance-based questions are the part of Security+ people fear most: instead of picking A, B, C, or D, you configure firewall rules, analyse logs, or order incident-response steps in an interactive console. They usually appear first in the exam and are worth more than multiple-choice questions.

Reading about PBQs isn't the same as doing one. The scenario below is fully interactive — work through it right here, get graded with partial credit, and see exactly how the real thing feels.

Try one — no account needed

Pick one and work it right here — graded instantly, with the explanation. Start with the warm-up; the last one is a real exam-style simulation.

Incident Response Process

4.0 Security Operations

Arrange the incident response steps in the correct order according to the NIST framework.

Use the arrows to arrange items in the correct order.

1.Post-Incident Activity
2.Detection and Analysis
3.Preparation
4.Eradication
5.Containment
6.Recovery

Rearrange at least one item before submitting.

16 more hands-on labs in your plan

Every style the real exam uses — firewall configs, log analysis, topology, ordering, and matching — graded with partial credit, across every domain. This is the practice that actually moves your readiness.

Unlock all 19 labs — free

PBQs are only part of it

CertBench pairs hands-on PBQ practice with adaptive exams, spaced repetition, and a readiness score that tells you when you're actually ready to book.

Build my study plan

Frequently asked questions

How many PBQs are on the Security+ exam?

Typically 3–5, usually at the very start of the exam. They're worth more than multiple-choice questions, and partial credit is awarded — so never leave one blank.

Should I do PBQs first or skip them?

A common strategy is to flag them, clear the multiple-choice questions for guaranteed points, then return with the remaining time. But practise them enough beforehand and you won't need to skip — they're very learnable.

What topics do Security+ PBQs cover?

Common themes: firewall/ACL configuration, log analysis, matching attacks to mitigations, ordering incident-response steps, and certificate or authentication setups. CertBench has interactive simulations for each style.