Security+ performance-based questions: what they are and how to practise them
Security+ PBQs commonly ask you to place controls, match attacks to mitigations, or order an incident response. They are the part of the exam where knowing a definition is least useful and knowing why a control belongs somewhere is most useful.
Why these questions exist
Security+ PBQs test placement and sequence: not what a control is, but where it goes and when it is applied. That is precisely the distinction between a candidate who memorised the acronym list and one who understands the architecture.
On the real exam these appear as performance-based questions (PBQs). Multiple-choice (single and multiple response) plus performance-based questions (PBQs)
- For control-placement tasks, decide what you are protecting before deciding what to deploy. The asset determines the control, not the reverse.
- For incident-response ordering, containment precedes eradication and eradication precedes recovery. Most wrong orderings restore service before the attacker is removed.
- When two answers both look defensible, prefer the one that addresses the cause rather than the symptom.
How we practise them
Our Security+ bank contains 29 PBQ-style exercises in two formats: matching tasks, where you pair each requirement to the capability that satisfies it, and ordering tasks, where you sequence the steps of a procedure. Each one carries the same full explanation as the multiple-choice questions, covering why the correct arrangement is right and why the plausible alternative is not.
These train the reasoning the exam tests — sequence, placement, and matching — rather than reproducing a vendor's simulation interface. Nothing here recreates the exam environment itself, and no practice product legitimately can.
See where you stand on Security+
20 free questions, no card required. Your domain scores show which areas need work before you book the exam.
Learn the decision behind the answer.
Work through the scenario, identify the evidence that matters, then compare your reasoning with the explanation. Use domain scores to choose your next study session. A practice percentage is a learning signal, not a prediction or an official exam score.