CompTIA Security+ Performance-Based Questions (PBQs), Explained
If you are booking CompTIA Security+, the question on your mind is probably narrow and practical: what are the performance-based questions, and can I lose the whole exam on them? The short answer is that PBQs are interactive simulations - configure a firewall, read through logs, map out a network segment - and they usually appear at the start of the paper. CompTIA weights them more heavily than the multiple-choice items and does not publish exactly how much, so they matter more than their count of two to five suggests.
This post explains what PBQs test, how the SY0-701 exam is put together, and, honestly, where a CompTIA Security+ mock test will help you and where it will not.
The SY0-701 format in plain numbers
The exam gives you up to 90 questions in 90 minutes. That is roughly 60 seconds per question on average - but PBQs eat far more than a minute each, which is why time pressure is the quiet killer on Security+. Scoring is scaled from 100 to 900, and you need 750 to pass. A scaled score is not a percentage; you cannot simply say "I need 83% right," because the harder items and the PBQs carry more weight.
The practical lesson: if a simulation is fighting you, do not sink ten minutes into it early. Flag it, clear the multiple-choice questions you know cold, and come back. Running out of time with twenty easy marks unanswered is the most common way strong candidates fail.
What performance-based questions actually ask
A PBQ drops you into a task rather than a list of options. Typical scenarios: drag firewall rules into the correct order, match attack types to the log evidence in front of you, place devices into the right network zone, or pick and configure the appropriate control for a described risk. They reward people who have touched the tools, not just memorised definitions. Reading a book on access control is different from being handed a rule set and told to fix it.
Because they are hands-on, PBQs pull directly from the operational side of the syllabus - the domains about running security day to day, not just naming concepts.
The five domains and their weights
Every question, PBQ or multiple-choice, maps to one of five domains. Their official weightings tell you where to spend study time. Notice that Security operations is the largest single slice, and it is exactly where most simulations live.
| Domain | Weight |
|---|---|
| General security concepts | 12% |
| Threats, vulnerabilities, and mitigations | 22% |
| Security architecture | 18% |
| Security operations | 28% |
| Security program management and oversight | 20% |
If you are asking yourself how do I pass SECURITY-PLUS-SY0-701 without a lab background, the weighting is your map: Security operations plus Threats and mitigations together make up half the exam, so that is where hands-on practice pays back the most.
Where a mock test helps - and one honest limit
A good mock test pack builds the two things books cannot: recall speed and time discipline. You learn to recognise a phishing-versus-pretexting distinction in seconds, and you learn what 90 questions in 90 minutes actually feels like on the clock.
What this mock contains, plainly. Our SECURITY-PLUS-SY0-701 mock test is multiple-choice and multiple-response only. It covers all five domains at their official weightings and matches the real 90-question, 90-minute format, so your pacing and recall get a genuine workout. What it does not do is reproduce the PBQ simulation interface - you will not configure a live firewall widget here. Your scaled score is our estimate, and because CompTIA weights PBQs more heavily than multiple-choice without publishing that weighting, treat the number as guidance, not a guarantee.
The sensible plan is to combine both. Use a practise exam for cybersecurity fundamentals to lock in knowledge and timing, and use CompTIA's own official practice or a hands-on lab to rehearse the simulation clicks. Do the reps on the multiple-choice bank until you are consistently clearing it inside the clock, then buy a mock test pack to confirm you can hold that pace across a full sitting. Walk in having already felt the format, and the PBQs stop being the thing that ambushes you.