Which of the following best describes the function of a sandbox environment?

It isolates untested or potentially malicious code for analysis

What is the primary goal of security awareness training?

To ensure employees understand and follow security best practices

What is the main purpose of implementing a security baseline in an organization?

To compare current system states against an established secure standard

Which of the following is a core objective of cybersecurity?

Ensuring confidentiality, integrity, and availability

Which of the following best defines the concept of defense in depth?

Implementing multiple layers of security to protect systems

Which best describes the principle of least privilege?

Ensuring users only have minimum necessary permissions to perform duties

studbud

Section 1 Quiz

10 termsStudBud Administration15 plays

CompTIA Security+ 701

Flashcards10 cardsFPractice quizPHost liveL

Questions 10

Answers

1
Which of the following best describes the function of a sandbox environment?
It isolates untested or potentially malicious code for analysis
It encrypts files before transmission over a network
It stores backup data offsite for disaster recovery
It segments a network to prevent unauthorized access
2
Which of the following describes the process of identifying, evaluating, and prioritizing risks?
Risk assessment
Vulnerability scanning
Threat modeling
Patch management
3
What is the primary goal of security awareness training?
To ensure employees understand and follow security best practices
To reduce the number of IT support tickets
To teach users how to install security updates
To allow users to configure their own access levels
4
Which of the following security controls is an example of a deterrent control?
Locked server rack
Surveillance cameras
Alarm system
Security awareness training
5
Which of the following best represents a cybersecurity framework?
SSL/TLS
VPN
SIEM
ISO 27001
6
What is the main purpose of implementing a security baseline in an organization?
To compare current system states against an established secure standard
To configure firewalls to block unauthorized access
To encrypt sensitive data at rest and in transit
To allow developers to test new applications in a live environment
7
Which of the following is a core objective of cybersecurity?
Ensuring confidentiality, integrity, and availability
Tracking employee performance
Minimizing system uptime
Maximizing convenience for users
8
Which of the following best defines the concept of defense in depth?
Using the latest firewall model to secure a network perimeter
Using a single, strong authentication method for all services
Implementing multiple layers of security to protect systems
Granting users access to all systems for operational efficiency
9
Which best describes the principle of least privilege?
Allowing users to choose their own access levels
Granting users access to all resources to perform their job functions
Ensuring users only have minimum necessary permissions to perform duties
Preventing users from accessing any sensitive information
10
Which type of threat actor is most likely to be well-funded, persistent, and targeting national infrastructure?
Insider threat
Script kiddie
Hacktivist
Nation-state

Section 1 Quiz Flashcards | StudBud