Performance-Based Questions (PBQs) are interactive, scenario-based questions that simulate real-world tasks in a virtual environment. Unlike multiple-choice questions where you identify the correct answer, PBQs ask you to actually perform a task: configure a firewall rule, drag network devices into a topology, match commands to their functions, or troubleshoot a simulated system. Practice with the four interactive PBQ simulators below, then read the strategy guide further down.
Interactive PBQ 1: A+ Core 1 - Network Troubleshooting
ipconfig output, then identify the affected machine and root cause.This panel represents additional simulation content. Click Back to return to the question.
Interactive PBQ 2: Security+ Firewall ACL Configuration
| # | Source | Destination | Service | Port | Protocol | Action |
|---|
Additional simulation content. Click Back to return to the ACL editor.
Interactive PBQ 3: A+ Core 1 - Ethernet Cable Wiring (Drag & Drop)
Additional cable specification reference. Click Back to return to the wiring task.
Interactive PBQ 4: Cloud+ AWS-Style Security Group
EC2 Instances
| Instance ID | Type | State | Public IP |
|---|---|---|---|
| i-0a1b2c3d4e5f | t3.medium | Running | 54.210.32.100 |
| i-0f6e7d8c9b0a | t3.small | Stopped | - |
S3 Buckets
| Bucket Name | Region | Objects |
|---|---|---|
| certlabz-assets | us-east-1 | 1,247 |
| certlabz-logs | us-east-1 | 34,891 |
VPC Security Groups
| # | Type | Protocol | Port Range | Source | Action |
|---|
IAM Users
| User | Groups | MFA |
|---|---|---|
| admin | Administrators | Enabled |
| deploy-bot | CI-CD | Disabled |
CloudWatch Metrics
CPU utilization, network I/O, and disk metrics for your instances are displayed here. No action required for this task.
Additional VPC subnet configuration. Click Back to return.
What Are CompTIA PBQs?
CompTIA introduced PBQs to test applied skills, not just memorization. A candidate who has only read about subnetting will struggle on a PBQ asking them to correctly subnet a /26 network and assign IPs to hosts. Someone who has actually done it dozens of times will breeze through it.
Why PBQs Matter
PBQs typically appear at the beginning of the exam (positions 1 through 6) and are estimated to account for roughly 20% of your total score. Skipping them is never the right strategy, even if you plan to return later.
Types of CompTIA PBQs
Drag and Drop
Drag items (protocols, devices, commands, steps) into the correct positions on a diagram, table, or process flow. Common in Network+ topology questions and A+ component identification.
Simulated Environment
Interact with a simulated OS, CLI, or application interface. You might configure firewall rules in a simulated pfSense UI or run commands in a simulated Linux terminal.
Fill in the Blank / Command Completion
Type a command, IP address, or configuration value into a text field. These test command-line syntax recall, especially relevant for Linux+, Network+, and Security+.
Matching / Sorting
Match items in two columns (protocol to port number, attack type to description) or sort steps in the correct sequence (incident response phases, troubleshooting methodology).
Network Diagram Configuration
Place routers, switches, firewalls, and servers in the correct positions on a network diagram given a set of requirements. Tests understanding of network architecture.
Configuration Simulation
Configure a device or service within a realistic GUI or CLI simulator: assign IP addresses, enable ports, set ACL rules, or configure VLAN tagging in a simulated switch interface.
How PBQs Are Scored
CompTIA PBQs use partial credit scoring on most exams. If a drag-and-drop has 5 items and you place 4 correctly, you will receive partial credit rather than zero. This means:
- Never leave a PBQ blank. Even a partially correct answer earns points.
- If you are unsure, make your best guess based on logical elimination.
- PBQs typically appear at the beginning of the exam (positions 1 through 6).
Partial Credit Tip
Even if you can only confidently place 2 of 5 drag-and-drop items, place all 5 anyway. The two correct ones earn points and the three guesses might get lucky. There is no penalty for wrong answers on PBQs.
PBQ Counts by CompTIA Exam
| Exam | Approx. PBQ Count | Common PBQ Types |
|---|---|---|
| A+ Core 1 (220-1101) | 3 to 5 | Hardware identification, network topology drag-drop |
| A+ Core 2 (220-1102) | 3 to 5 | OS troubleshooting sim, security configuration |
| Network+ (N10-009) | 3 to 5 | Network diagram, subnetting, protocol matching |
| Security+ (SY0-701) | 3 to 5 | Firewall ACL, log analysis, encryption matching |
| CySA+ (CS0-003) | 3 to 5 | SIEM log analysis, IR workflow ordering, tool matching |
| PenTest+ (PT0-003) | 3 to 5 | Nmap command analysis, exploit matching, report writing |
| Linux+ (XK0-005) | 3 to 5 | Command-line simulation, file permissions, systemd |
| Cloud+ (CV0-004) | 3 to 5 | Cloud architecture diagram, security group config |
5 Strategies to Ace CompTIA PBQs
Skip and Return
If a PBQ takes more than 5 minutes and you are stuck, flag it and move on. Multiple-choice questions are faster. Bank points there first, then return to PBQs at the end with remaining time.
Read the Scenario Carefully
PBQ scenarios contain all the information you need. Re-read the requirements before interacting with the simulation. Look for keywords like "allow only," "block all," and "order these steps."
Practice in Real Environments
The best PBQ prep is hands-on practice. Use GNS3 for Network+, VirtualBox or VMware for A+ and Linux+, and free AWS or Azure tiers for Cloud+. Muscle memory beats memorization for simulated tasks.
Memorize Port Numbers Cold
Port number drag-drops appear on multiple exams. Know the top 20 ports (20/21 FTP, 22 SSH, 23 Telnet, 25 SMTP, 53 DNS, 80 HTTP, 110 POP3, 143 IMAP, 443 HTTPS, 3389 RDP) without hesitation.
Never Leave One Blank
CompTIA uses partial credit on most PBQs. A random answer earns more than zero. Before moving on, place every item in your best-guess position. There is no penalty for wrong answers.

