CompTIA Security+ (SY0-701) Domain 2: Threats - Mitigations.

Build real exam instincts for identifying threat actors, mapping TTPs, prioritizing vulnerabilities, and choosing practical mitigations. These six 90-question tests blend intel-driven scenarios, malware and social-engineering traps, vuln-management workflows, and hardening strategies so you can diagnose risk and pick the right control under pressure. What you’ll practice (learning objectives)Classify threat actors, campaigns, and TTPs; map to MITRE ATT&CK and the kill chain.Distinguish malware types, persistence/C2 techniques, and appropriate containment/eradication steps.Spot social engineering and physical intrusions; select effective people/process/tech countermeasures.Identify application, web, and cloud/container vulns; apply secure coding and supply-chain controls.Run scans, interpret findings (CVEs/CVSS), reduce false positives, and plan risk-based remediation.Harden endpoints, networks, and SaaS/IaaS; apply segmentation, isolation, DLP, and compensating controls.Practice tests in this section (all are 90 questions, 90 minutes, randomized, with explanations for every option)Test 1 — Threat Actors, Campaigns & TTPsAdversary goals and resources, IoCs vs TTPs, kill-chain stages, ATT&CK technique mapping, prioritization.Test 2 — Malware, Ransomware & BotnetsMalware families, fileless/polymorphic behavior, C2, lateral movement, containment/eradication, recovery pitfalls.Test 3 — Social Engineering & Physical IntrusionPhish/vish/smish, pretexting, impersonation, tailgating, badge cloning; awareness, verification, and facility controls.Test 4 — App/Web Vulns & Secure CodingOWASP-style flaws (auth, input, deserialization), memory safety, secrets handling, SBOM/supply-chain risk, code review.Test 5 — Scanning, Ass