CompTIA Security+ 2025 Exam Review Guide:
Complete Domain Analysis, Scenario-Based
Practice, and Expert Insights
Here are the multiple-choice questions with rationales and the correct answers
indicated:
Question 1:
Human Resources (HR) would like executives to undergo only two specific security
training programs a year. Which of the following provides the BEST level of security
training for the executives? (Choose two.)
A. Acceptable use of social media
B. Data handling and disposal
C. Zero day exploits and viruses
D. Phishing threats and attacks - Correct Answer
E. Clean desk and BYOD
F. Information security awareness - Correct Answer
Rationale:
• D. Phishing threats and attacks: Executives are often high-value targets for
phishing attacks, including spear-phishing and whaling, due to their access to
sensitive information and decision-making authority. Training on recognizing and
responding to these threats is crucial.
• F. Information security awareness: A broad information security awareness
program will provide executives with a foundational understanding of various
security risks, policies, and best practices, making them more security-
conscious in their daily activities.
• A. Acceptable use of social media: While relevant, it might be less critical than
phishing awareness for executives.
• B. Data handling and disposal: Important, but perhaps less time-sensitive than
immediate threat awareness for busy executives.
