CompTIA Sec+ Practice Questions (Set 3)

An org uses SSO and added cloud accounting software. What should be configured during deployment to ensure access?

A cyber team discussed best practices for printing centers. What attack method is most related to this area of concern?

Which of the following agreement types defines the time frame in which a vendor needs to respond?

Why should an organization enforce a data classification policy to best protect its most sensitive and critical info?

Which team is best suited to determine if company systems can be exploited by a known, potential vulnerability?

An IT manager drafts a plan for how the company operates during global incidents. What type of plan is being created?

Which of the following is a feature of a next-generation SIEM system?

Which term describes an executive team testing the company's incident response plan during a boardroom meeting scenario?

Which of the following is a possible factor for MFA?

A user installed forum software, then saw odd port traffic. What is the likely cause of this unauthorized connection?

Which of the following phases of an incident response involves generating reports?

A utility company needs a platform for app VMs. Which option best meets all hosting and management requirements listed?

A company wants minimal records, compliance, and proper disposal. What policy best meets all of these requirements?

Why would a security analyst run daily vulnerability scans on all corporate endpoints across the organization’s network?

Off-site employees access resources securely. What solution best ensures remote access without the risk of interception?

What is used to protect a computer from malware and prevent lateral movement across the network by malicious software?

An attacker posing as the CEO calls an employee to buy gift cards. What social engineering technique is being used here?

A company is replacing servers to reduce OS count. What strategy should it use to meet this security requirement?

A security admin wants to protect data on stolen laptops. What should be considered to secure company data effectively?

A pentest shows MAC table flooding on switches. What’s the best way to mitigate this type of network-based attack?

A dev team wants to prevent reverse engineering. What technique should the security admin do to protect the software?

A CISO wants frequent, detailed reviews to track compliance. What method supports this objective for ongoing oversight?

Which of the following considerations is the most important regarding cryptography used in an IoT device?

What best describes researching laws and regulations tied to info security operations in a specific industry?

A test system is down, but servers are online. Based on monitoring info, what is the most likely cause of the outage?

A critical patch was released. What should systems admin do to ensure all required systems receive the update properly?

A workstation’s logs were deleted during a C2 investigation. What logs should the analyst most likely check next?

What addresses individual rights like the right to be informed, access, and forgotten regarding personal data?

Which of the following security measures is required when using a cloud-based platform for IoT management?

Which of the following examples would be best mitigated by input sanitization?

A company wants to ensure its final software isn’t tampered with. What should it most likely use to guarantee integrity?

A company wants to verify software came from the vendor. What is the best way to confirm the software’s authenticity?

Which of the following is classified as high availability in a cloud environment?

An analyst scans internet-facing web servers without a system account. What type of scan is most likely being performed?

A stolen company device was accessed w/ credentials. What’s the best way to improve mobile data security for employees?

An LDAP browser shows cert errors & fails to connect. What’s the most likely solution to enable secure LDAP connections?

Which of the following methods would most likely be used to identify legacy systems?

A coffee shop wants to limit internet access to customers w/ receipts. What’s the best method to enforce this?

A security analyst wrote a script for a task. Why is it beneficial for the team to understand how the script functions?

An admin sees R&D isn't using the VPN for company services. What scenario best describes this type of user activity?

What is the most important factor for an organization to evaluate when building and maintaining a data privacy program?

Which of the following methods can be used to detect attackers who have successfully infiltrated a network? (Choose 2)

Employees get blocked page messages from spoofed sites. What should the administrator do in response to this situation?

A scan shows a vulnerability not on the system. What best describes this type of inaccurate vulnerability scan result?

A system for customer transactions runs an end-of-life OS. What would best improve enterprise security in this case?

Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?

Weak passwords caused a breach. What two policy changes would best reduce the risk of similar incidents happening again?

Client files are accessed only by employees with a need to know. What security concept does this best describe?

An architect needs faster external JSON transfers. What will most likely meet this need instead of current SFTP usage?

What method is best to secure credit card data when only the last 4 digits need to be visible for verification purposes?

A security admin adds CCTV and signs at a data center. What two types of controls do these actions best represent?

An app server's software shows abnormal outbound traffic. What vulnerability was most likely exploited in this scenario?

A switch stack boosts availability, but only 1 ISP is used. What risk factor best describes this network design choice?

What defines the agreement between a company & client on service delivery & time needed to provide requested resources?

HR revised an IT contract a lot. What process should be followed to properly track and manage the contract revisions?

Marketing set up project software without approval. What term best describes this scenario within the organization?

A company needs secure logins after account takeovers. What solution best meets the conditions for stronger auth?

A security admin is hardening systems using real-world adversary data. What KB should they reference for this task?

A tornado destroyed a city's data center. What should staff use right after to maintain essential public services?

Which of the following best describes a use case for a DNS sinkhole?

Which of the following security concepts is accomplished with the installation of a RADIUS server?

A team segmented an old server to a VLAN w/ limited access What 2 controls best describe the actions taken to secure it?

A healthcare org is building a web app for emergencies What is the most important factor to consider during development?

An analyst finds image files that may hold location data. What type of info is the analyst trying to extract from them?

Which of the following is the most important security concern when using legacy systems to provide production service?

Management wants a low-cost DR plan without extra internet costs. What is the best option for this situation?

Which of the following best describes the risk present after controls and mitigating factors have been applied?

Which of the following is considered a preventive control?

Customers can upload PDFs to a public site. What would a security analyst most likely recommend to protect the app?

A flood of emails with short links to dead domains was detected. What action should the security team should take next?

A user needs remote access but Telnet is banned. What should be setup to allow secure access to the remote dev server?

A hurricane-prone company needs a DR site for immediate operations. What type of site best meets this requirement?

A new employee sees odd links in an HR email. What attack vector is most likely being used in this suspicious message?

The CISO wants to compare company policies to external rules. What should the CISO use to understand compliance gaps?

A user wants to add unauthorized apps & features to a phone. What allows installing software beyond default options?

A hosting provider must prove 6 months of data protection. What shows controls were in place & requirements were met?

A team moves on-prem software --> cloud. What must be in place to ensure the org follows proper security best practices?

A business needs a recovery site with no immediate failover & low recovery effort. What type of site is the best option?

What security control is most likely used when a critical legacy server is segmented into a private network?

An admin must harden a server before deployment. What 2 steps could the admin take to complete this process securely?

The CISO must justify budget after finding data privacy non-compliant What consequence should be presented to the board?

Why would a security engineer configure outbound emails to use S/MIME digital signatures for all company communications?

A security admin needs a cost-effective way to secure many domains. What type of cert should be implemented for this?

Which of the following should a security operations center use to improve its incident response procedure?

Malware was installed using admin credentials, and Telnet was used. What most likely happened in this security incident?

Which of the following is a common source of unintentional corporate credential leakage in cloud environments?

In digital forensics, which type of data is most volatile & should be collected first during the investigation process?

Which of the following describes the category of data that is most impacted when it is lost?

A manager sees a suspicious refund link in email What security practice helped the manager identify this type of attack?

A user ignored a warning on public Wi-Fi and saw card fraud. What type of attack most likely occurred in this scenario?

Which of the following alert types is the most likely to be ignored over time?