Performance-based questions (PBQs) are hands-on exam items that ask you to solve a problem in a simulated firewall, terminal, network diagram or virtual machine instead of picking an answer from a list. CompTIA defines PBQs as items that test your ability to solve problems in real-world settings, delivered as either simulations or within virtual environments, while Microsoft delivers the same idea as “labs” in a live cloud or on-premises environment. This guide explains the formats, shows a worked example, and gives you a weekly training method that does not rely on memorizing question banks.
What a PBQ looks like
The first thing to learn is the delivery format, because it determines what you can and cannot do during the exam. CompTIA splits its hands-on items into two families:
- Simulations approximate an environment or tool — a firewall console, a network diagram, a terminal window — with restricted functionality but multiple valid paths to a solution.
- Virtual environments are full virtual machines running the real software being assessed, which means every wrong path is also available to you.
Vendor coverage differs. CompTIA lists simulation PBQs on A+, Network+, Security+, CySA+, PenTest+, Linux+, Server+, Cloud+, Data+, DataSys+, DataAI, CloudNetX and Project+, lists both virtual and simulation PBQs on SecurityX, and states that Tech+ and Cloud Essentials+ carry no PBQs. Microsoft calls its hands-on sections “labs”: you may be given a live environment in the cloud or on-premises and asked to perform tasks in it, with the goal of eventually having labs on every role-based certification.
Example PBQ, solved step by step
The item below is my own illustrative example — not a real exam question — modeled on the firewall-simulation style CompTIA publishes in its demo. Read it, then follow the reasoning that scores points.
| Task (example) | What the grader checks | Common mistake |
|---|---|---|
| Configure the DMZ firewall so only TCP/443 reaches the web server from any source, and log denied traffic | Correct source/destination/port triple and an active logging rule, not the menu path you used | Blocking all traffic first, which breaks the required allow rule you never revisit |
| Label each cable/connection on the network diagram per the scenario | Every placement matches the stated topology constraint | Assuming a topology the scenario never states |
| Set the password policy fields listed in the ticket | Each field matches the ticket values exactly | Configuring “stronger” values than requested — deviations score as wrong |
Two behaviors in that example generalize. First, partial credit may be given on virtual PBQs, as it is on simulation PBQs, so an unfinished item is worth attempting rather than abandoning. Second, scoring addresses multiple possible solution approaches: if PowerShell, CLI or GUI all reach the same end state, Microsoft explicitly states it does not require a specific method — it tests the end result of your task. That is why the worked answer above focuses on the end state (rule triple, labels, ticket values) and ignores which console menu you would click.
Rules that change your strategy
Hands-on items interact with exam navigation in ways multiple-choice questions never do, and the official rules are specific:
- Identify the item type on arrival: simulation PBQs cover the entire testing area and have a reset button; virtual PBQs do not.
- You can skip simulation PBQs and return to them later — you cannot do the same with virtual PBQs, which show a warning screen before you enter and must be completed at that time.
- Time keeps running while you review. Microsoft warns that exam time does not stop while you are reviewing answers and advises managing time against both the clock and the questions remaining.
- Expect a mixed pattern: conventional items first (while the lab provisions in the background), then one or more performance sections, then more conventional items so the lab can be scored before the exam ends.
- Do not idle waiting for a task to execute. Start it, move to an independent task, and come back — some tasks only need to be started to earn credit.
These rules matter most in the first two minutes of a performance section. Skip-flagging a low-confidence simulation PBQ, banking the easy points, and returning with a calmer head is a strategy the format explicitly permits. Entering a virtual PBQ without reading the warning screen is a one-way door the same rules create.
A five-week training plan
PBQs reward fluency, not recall, so the plan below builds repetition in the actual environments. Adjust the week length to your exam date; the order is what matters.
- Week 1 — Map the objective list. Print the vendor’s exam objectives and mark every verb that implies configuration, troubleshooting or analysis. Those are your PBQ candidates; everything else is multiple-choice territory.
- Week 2 — Build a home lab. Install the real software where licensing allows (a Linux VM, a firewall distribution, a cloud free tier) and perform each mapped objective five times until the steps are muscle memory.
- Week 3 — Practice the artifact, not the answer. For each objective, produce the deliverable the exam would grade: the firewall rule table, the labeled diagram, the command sequence. Grade yourself against the objective text.
- Week 4 — Timed mixed sessions. Alternate hands-on tasks with multiple-choice questions under a clock, rehearsing the skip-and-return move on anything you would flag. Practicing error review after each session matters more than raw volume.
- Week 5 — Vendor walkthroughs. Work through CompTIA’s sample simulation PBQ and the Microsoft lab guidance the week before the exam so the interface itself holds no surprises.
What this practice cannot promise
No honest preparation method guarantees a pass, and any course or dump site that does is selling you something the vendors themselves never claim. Sample PBQs published by CompTIA are illustrative items, not real exam questions, and hands-on skill decays without use — which is exactly why the training plan keeps you inside the tool rather than inside a question bank. Treat vendor objectives and policy pages as the only authority on format and rules, and re-check them close to your exam date, because coverage changes as vendors add labs to more certifications.
If you are separating legitimate practice material from leaked exam content before you start training, see exam dumps vs practice questions. If a failed attempt is what brought you here, the official retake rules compared here tell you when you can sit again.