PBQ Simulator: Five Exam-Style Tasks
How it works
Performance-based questions (PBQs) make you do the job instead of picking a letter: fix a rule table, read logs, rank risks, place devices, carve up an address block. Here are five of them. Everything works by tapping and choosing from lists, so it plays the same on a phone as on a computer; nothing needs dragging. Pick a task, answer, then press Check: you get a score, the correct answer and the reason for every part. Turn on the exam timer if you want to practice under pressure; the real exams give you no separate clock for PBQs, so most people budget about five minutes each.
My favorite PBQ trick: the rule table that is perfect except for the order. Every rule is right, and the blocklisted address still walks in, because the firewall stopped reading at the first match. — Nyx
Play
PBQ habits that save points
- Read the requirements twice and tick them off one by one; most lost points come from one missed line.
- Order matters in rule tables and processes: first match wins, specific before general.
- Flag and move on. You can usually come back to a PBQ. Many people answer the multiple-choice questions first, then return.
- Never leave one blank. PBQs give partial credit, so every right box counts.
Keep studying
- One incident, five logs, one timeline — the hands-on version of a log-correlation PBQ
- Log Hunt — spot the attack in a log
- Subnetting and DHCP lab — build the subnets for real
- Common ports cheat sheet
- Security+ practice test
- CySA+ roadmap
- Port Match — ports and secure swaps
- Binary & Hex — speed drills and subnet masks
Your best scores and the timer setting are saved only in this browser on this device (no account, no cookies, no tracking). Clear your browser storage to reset them. All scenarios, logs, findings and addresses are invented; addresses come from the ranges reserved for documentation. Written by StashGrid with AI help and checked against the sources listed for each fact. These are practice tasks in the style of PBQs, not real exam content. StashGrid isn’t affiliated with CompTIA, CISA or FIRST. Spotted an error? Tell us and we’ll fix it.