SecProve

Negation miss

The stem contains a NOT, EXCEPT, or LEAST and you missed it. Your choice would be correct for the unnegated version of the question.

Most common in
All cert exams

The Trap in One Sentence

You missed a NOT, EXCEPT, or LEAST in the stem. Your choice would be correct if the negation weren't there.

Pairs Candidates Confuse

'Which is NOT a preventive control?'vsReading it as 'Which IS a preventive control?'

Negation flips the answer

'All of the following EXCEPT'vsSame trap

Pick the outlier, not the fit

'LEAST appropriate'vsPicking the most appropriate

Reversed scale

How to Avoid It

  • →Underline every NOT, EXCEPT, LEAST, MOST, BEST, FIRST, FINAL, PRIMARILY before reading choices.
  • →On negated stems, eliminate the three correct-sounding answers — the outlier is your pick.
  • →If three of four choices look like they fit, re-read the stem for a negation.

Frequently Asked Questions

How do I recognize a negation-miss trap in an exam question?

The stem contains a NOT, EXCEPT, LEAST, FALSE, or similar negation word that flips the polarity of the question. The trap relies on you missing the modifier on a quick read and picking the answer that would be correct without it.

What's the tell-tale phrasing that signals this trap?

Capitalized or bolded modifiers: "Which is NOT a preventive control?", "All of the following EXCEPT…", "Which is the LEAST appropriate?", "Which statement is FALSE?". Cert exams emphasize these visually because they know candidates miss them. Treat any all-caps word in the stem as a stop sign.

If three answers all seem to fit, how do I decide?

If three out of four choices look correct, the stem is almost certainly negated. Re-read it specifically scanning for NOT/EXCEPT/LEAST/FALSE. The right answer to a negated stem is the OUTLIER — the one that DOESN'T fit, the one that's FALSE, the one that's LEAST appropriate.

What's a real example of a negation-miss trap?

Stem: "All of the following are detective controls EXCEPT:" Choices: (a) IDS, (b) audit log review, (c) door lock, (d) CCTV camera. (a), (b), and (d) are detective. (c) is preventive. The right answer is (c). Negation-miss candidates pick (a), (b), or (d) because they're correctly identifying detective controls — they just missed the EXCEPT.

How is negation-miss different from plural-vs-singular?

Negation-miss flips the polarity of the question (looking for the wrong fit instead of the right fit). Plural-vs-singular changes the number of correct answers (one vs many). Both are stem-parsing traps, but they target different reader habits.

Why do item writers love this distractor mechanism?

Negated stems are the cheapest way to inflate item difficulty without changing content. The same four choices can be reused across three stems (positive, negative, exception-form), each generating a different correct answer. Item writers exploit candidate haste — under time pressure, single modifier words are easy to skim past.

Where does this trap show up most often?

Every cert exam uses negated stems on 5-10% of items. CISSP and CISM lean on them in governance/risk domains. CompTIA exams use them lightly but explicitly (the words are emphasized). Performance-based items rarely negate, so multiple-choice items concentrate them.

How do I deliberately drill against this archetype?

The general defense is muscle-memory: physically underline every NOT, EXCEPT, LEAST, FALSE in every stem before reading choices (mentally if you're remote-proctoring). It costs about 2 seconds per question and catches roughly 5-10% of misses across any cert exam. The SecProve trap drill linked above pulls these items when they're tagged in the bank you're studying — practice the stem-marking habit on every question regardless.

Practice Against This Trap

No cert-prep questions tag this archetype as a distractor yet — it’s recognized in the taxonomy but hasn’t shown up in the current Sec+ bank. Check back as more cert tracks (CISSP, CySA+, CCSP) ship.

Related Traps