CompTIA Security+ practice questions: the prompt for ChatGPT, Claude and Gemini

You are writing exam-style multiple-choice practice questions for me. I am preparing for CompTIA Security+, set by CompTIA. Write questions that match the real exam's content, difficulty and style, drawn from the current official syllabus.

Write 20 questions. Each must be a standalone multiple-choice question that can be answered from its own stem and options, with exactly the right answer(s) marked and nothing ambiguous.

Set each question's `topic` to one of these names, copied exactly (same words, same capitalization; these are the only topic names the import accepts):
- General Security Concepts (subtopics: Compare and contrast various types of security controls; Summarize fundamental security concepts; Explain the importance of change management processes and the impact to security; Explain the importance of using appropriate cryptographic solutions)
- Threats, Vulnerabilities, and Mitigations (subtopics: Compare and contrast common threat actors and motivations; Explain common threat vectors and attack surfaces; Explain various types of vulnerabilities; Given a scenario, analyze indicators of malicious activity; Explain the purpose of mitigation techniques used to secure the enterprise)
- Security Architecture (subtopics: Compare and contrast security implications of different architecture models; Given a scenario, apply security principles to secure enterprise infrastructure; Compare and contrast concepts and strategies to protect data; Explain the importance of resilience and recovery in security architecture)
- Security Operations (subtopics: Given a scenario, apply common security techniques to computing resources; Explain the security implications of proper hardware, software, and data asset management; Explain various activities associated with vulnerability management; Explain security alerting and monitoring concepts and tools; Given a scenario, modify enterprise capabilities to enhance security; Given a scenario, implement and maintain identity and access management; Explain the importance of automation and orchestration related to secure operations; Explain appropriate incident response activities; Given a scenario, use data sources to support an investigation)
- Security Program Management and Oversight (subtopics: Summarize elements of effective security governance; Explain elements of the risk management process; Explain the processes associated with third-party risk assessment and management; Summarize elements of effective security compliance; Explain types and purposes of audits and assessments; Given a scenario, implement security awareness practices)
Where subtopics are listed, set `subtopic` to one of them; otherwise choose a short, specific `subtopic` of your own or leave it out.

Spread the questions across the topics in the real exam's proportions, about:
- General Security Concepts: 2 (12% of the real exam)
- Threats, Vulnerabilities, and Mitigations: 4 (22% of the real exam)
- Security Architecture: 4 (18% of the real exam)
- Security Operations: 6 (28% of the real exam)
- Security Program Management and Oversight: 4 (20% of the real exam)

Give each question exactly 4 options. Options are plain text without letter prefixes (DoMcq labels them A, B, C… by position); make them similar in length and form so the right one does not stand out.
Most questions have one correct option. Where the real exam uses multiple-answer items, write some with two or more correct options: the stem must then say how many to choose ("Choose TWO.", "Choose THREE."), `answer` lists every correct letter in ascending order ("BD"), and at least one option must be incorrect.
Never use these as an option: "all of the above", "none of the above". Avoid "both A and B" style options too.

Write stems the way the real exam does, for example: "Which of the following best describes"; "Which of the following is the most likely"; "Which of the following would be the most helpful"; "Which of the following attacks is the company facing?"; "Which of the following is the administrator trying to accomplish?".
Keep each stem self-contained (any scenario the question needs is in the stem), concrete and free of trick wording. Do not refer to other questions, images, tables or exhibits.
Every item is a standard multiple-choice question: do not write performance-based, drag-and-drop items.

Mix the difficulty: about 6 easy, 10 medium and 4 hard, and set each question's `difficulty` to "easy", "medium" or "hard" accordingly.

In `explanation`, say in two to four sentences why the correct answer is correct, in a way that teaches the underlying point, not just restates the option.

In `source`, give a short reference I can check in my own study materials (a syllabus topic, a chapter or section name, a learning objective, or a standard's clause), at most 200 characters; never invent a page number or a quotation.

Leave out `rationales` and `id`.

Before you answer, check your own work: no two questions ask the same thing; no question gives away another's answer; the correct option sits in a different position from one question to the next (never always the same letter); every `answer` letter exists for that question; the correct option is correct according to the current official material, not folklore; facts are accurate. Fix anything you find.

Output the whole set as one JSON object in the `domcq/1` format (schema: https://domcq.com/schema/v1; this is the import format of https://domcq.com):

```json
{
  "format": "domcq/1",
  "exam": "comptia-secplus",
  "set": "CompTIA Security+ practice – [a short name for this set]",
  "questions": [
    {
      "stem": "[the question, 10–2000 characters]",
      "options": [
        "[option 1]",
        "[option 2]",
        "[option 3]",
        "[option 4]"
      ],
      "answer": "B",
      "explanation": "[why the correct answer is correct, 1–3000 characters]",
      "topic": "General Security Concepts",
      "subtopic": "[optional, more specific]",
      "difficulty": "medium",
      "source": "[a reference I can check]"
    }
  ]
}
```

Rules the import enforces: `format` is exactly "domcq/1"; `set` is 1–120 characters; `questions` holds all 20; each question has exactly the fields shown (no others); `stem` is 10–2000 characters and each option 1–500; `options` are all different; `answer` uses capital letters A–F naming options by position, in ascending order, never every option; `explanation` (1–3000 characters) and `topic` are required; `subtopic` (up to 120 characters), `difficulty` ("easy", "medium" or "hard") and `source` (up to 200 characters) are optional. Use plain double quotes in JSON strings (escape any inside text as \"), no trailing commas, no comments.

Reply with the JSON object inside a single ```json code fence and nothing else: no introduction, no commentary, no notes after it. If the set is long, keep going until every question is written and the JSON is complete and closed.