Free tool · No sign-up needed
5 free, original PBQs for SecAI+ (CY0-001), with drag-and-drop. Do each task, check it, and read why the answer is right.
Last updated
CompTIA SecAI+
You do each task instead of picking an answer. Every question is explained after you check it, and you get a score at the end.
Take it further in OpenpassAI
OpenpassAI’s practice sessions add performance-based questions, with command-line and network topology tasks, to full timed exams, AI explanations and a readiness score.
The questions
Each one with its scenario and task. Try it above first, then open the explanation.
Question 1 · Sorting · Basic AI concepts related to cybersecurity
The security team is evaluating three AI products, and each vendor describes how its model learns. You want to file each description under the right type of machine learning.
Put each example under its type of learning.
Supervised learning trains on examples that carry the right answer, so it suits classification, such as phishing or safe. Unsupervised learning finds structure in data with no labels, which is why it is used for clustering and for spotting behavior unlike anything seen before. Reinforcement learning has an agent try actions and learn from rewards and penalties.
Question 2 · Matching · Securing AI systems
A threat model for the company’s new AI assistant lists five ways it could be attacked, each described in a sentence.
Match each description to the name of the attack.
Prompt injection uses the model’s own input to override its instructions. Data poisoning corrupts what the model learns from, so the damage is built in before deployment. Model inversion works backwards from outputs to recover training data, and model extraction copies the model’s behavior by querying it. An evasion attack changes an input just enough to be misclassified. Membership inference, which asks whether one particular record was in the training data, is a related privacy attack.
Question 3 · Ordering · Securing AI systems
A security review must cover every stage of a model’s life, from the data it starts with to the day it is in use. The review plan lists the stages out of order.
Arrange the six stages from first to last.
Data is collected, then cleaned and labelled, and each of those is a place where poisoned data can enter. Training produces the model, and evaluation tests it on data it hasn’t seen, including adversarial tests. Deployment puts it in front of users, where prompt injection and extraction become possible. Monitoring watches for drift, abuse and attacks for as long as the model is in service.
Question 4 · Matching · AI-assisted security
The security operations center is adopting AI tools, and the rollout guide uses five terms that every analyst needs to know.
Match each description to the term.
User and entity behavior analytics learns what is normal for each account and device and alerts on departures from it. Automated triage scores and groups alerts so analysts start with the likeliest real ones. Keeping a human in the loop means a person approves an action before it runs, which matters most for actions that are hard to undo. A hallucination is a confident, false answer, which is why AI output is checked before it is acted on. A deepfake is AI-generated media impersonating a real person.
Question 5 · Matching · AI governance, risk, and compliance
The compliance team is mapping the company’s AI program to outside frameworks, and you’ve been asked which is which.
Match each description to the framework.
The NIST AI Risk Management Framework is voluntary guidance organized around four functions: govern, map, measure and manage. The EU AI Act is law, and its obligations depend on the risk level of the system. ISO/IEC 42001 is a certifiable standard for an AI management system. The OWASP Top 10 for LLM Applications lists the most critical risks in applications built on large language models, and MITRE ATLAS catalogs the tactics and techniques attackers use against AI systems.
CompTIA’s page on performance-based questions doesn’t list SecAI+ yet, so check CompTIA’s exam page for its question types. These tasks practice the exam’s objectives in the hands-on style CompTIA uses on its other exams. CompTIA’s page on performance-based questions, read on November 12, 2026.
Guide
CompTIA describes performance-based questions as exam items that test your ability to solve problems in real-world settings. Most are simulations: an approximation of a tool such as a firewall, a network diagram, a terminal window or an operating system.
You don’t pick an answer. You do the task, and there can be more than one correct way to do it.
Try each question cold. Getting it wrong first and then reading why teaches more than reading the answer and nodding along.
A right answer reached by guessing is a wrong answer waiting for exam day. Every question here explains why each part is what it is.
CompTIA says a simulation question can be skipped and returned to later, with your work saved. If one is eating your time, move on, answer the multiple-choice questions and come back.
14 free labs in your browser: Linux and Windows command line, firewall rules and SOHO router setup, checked as you go.
Open the toolFree performance-based questions for 19 CompTIA exams: firewall rules, network diagrams, command-line tasks and drag-and-drop.
Open the toolFree practice tests for 261 popular certification exams, with explanations and a score by exam domain.
Open the toolFAQs
Find quick answers or contact our support team.
CompTIA’s page on performance-based questions doesn’t list SecAI+ yet, so check CompTIA’s exam page for its question types. These tasks practice the exam’s objectives in the hands-on style CompTIA uses on its other exams. That is from CompTIA’s page on performance-based questions, read on November 12, 2026.
No. They’re original tasks written to each exam’s published objectives. Using leaked real exam questions breaks every vendor’s exam rules.
CompTIA says a performance-based question can have more than one correct way through it, that its scoring allows for the different approaches, and that partial credit may be given. Here, each question is scored by its parts, so you can see which part you missed.
CompTIA says a simulation question can be skipped and returned to later, and that your work on it is saved when you move on. A virtual-environment question has to be completed when you reach it: a warning screen tells you so first.
No. The questions run in your browser and nothing is saved. Sign up only if you want full practice exams and progress tracking.
OpenpassAI
Hi 👋 I’m OpenpassAI. Ready to prepare for your exam the smarter way?
Ready to explore OpenpassAI? I can show you how the platform helps you prepare, practice, and pass.
