Comptia Sec+ Practice 3

A healthcare provider manages large volumes of sensitive patient health records and needs to ensure the data is securely protected in various states. Which TWO of the following encryption strategies should the provider implement to comprehensively secure patient health records? (SELECT TWO)

Encrypting data at rest using Advanced Encryption Standard (AES).
Implementing Secure/Multipurpose Internet Mail Extensions (S/MIME) for email communication.
Using a web application firewall (WAF) to encrypt incoming and outgoing traffic.
Deploying a virtual private network (VPN) for remote access to health records.

Upon accessing the security dashboard, a system administrator observes alerts indicating multiple instances of policy violations related to unauthorized software installations on employee workstations. To address these violations and improve overall security compliance, which of the following actions should be taken? (SELECT TWO)

Conduct an immediate scan of all workstations for unauthorized software.
Update the organization's software policy to allow more flexibility in installations.
Implement application whitelisting to control software installation and execution.
Provide training to employees on approved software usage and security policies.

An IT manager at DataCorp is implementing a new role-based access control (RBAC) system. The manager needs to ensure that permission assignments align with security best practices and organizational needs. Which TWO of the following actions should the manager take to achieve this goal? (SELECT TWO)

Regularly review and update role definitions.
Grant all users administrative privileges for ease of access.
Assign permissions based on job functions and responsibilities.
Implement a time-based access control for sensitive resources.

A luxury hotel is planning to install access control vestibules at entrances to its VIP guest floors for enhanced security. The hotel wants the vestibules to provide effective security without compromising guest convenience. Which TWO of the following features should be included in the access control vestibules to meet these requirements? (SELECT TWO)

Facial recognition technology for quick and secure authentication
A turnstile mechanism to physically control entry and exit
A full-body X-ray scanner for thorough security checks
An intercom system for guests to communicate with hotel staff

A university decides to implement application allow lists on its administrative computers to improve cybersecurity. Which TWO of the following outcomes are most likely to be achieved through this implementation? (SELECT TWO)

Streamlining the software procurement process.
Reducing the likelihood of data leakage.
Preventing the execution of unapproved software.
Automating software updates for efficiency.

A healthcare provider is planning a maintenance window to update its patient record system with enhanced security measures. To ensure the update is successful and minimizes impact on operations, which TWO of the following actions should be prioritized in planning the maintenance window? (SELECT TWO)

Schedule the maintenance during hours of least activity in the healthcare facility.
Notify all relevant staff and departments well in advance of the maintenance.
Prepare a detailed backout plan in case the update encounters issues.
Train staff on new features immediately following the maintenance.

A retail company experiences an unexpected data breach involving customer payment information. The IT manager decides to conduct an ad hoc risk assessment to understand the breach’s impact and prevent future incidents. What should the IT manager prioritize in this assessment? (SELECT TWO)

Reviewing the company's data encryption policies.
Analyzing the effectiveness of the incident response plan.
Assessing the financial impact of the data breach on the company.
Identifying vulnerabilities in the point-of-sale (POS) system.

A large corporation recently experienced a network breach where attackers exploited vulnerabilities in the Simple Mail Transfer Protocol (SMTP) service running on their mail server. As part of the response, the security team decides to review and update the firewall settings related to ports and protocols. Considering the need to maintain email functionality while enhancing security, which of the following firewall modifications would be most effective?

Block all SMTP traffic at the firewall.
Restrict SMTP traffic to only allow connections from trusted external IP addresses.
Replace SMTP with a more secure protocol for email communication.
Enable logging for all SMTP traffic to monitor for suspicious activities.

A small business adopts a cloud-based password manager to improve security and manage passwords more effectively. After implementation, the business owner is concerned about the security of storing all passwords in one place. What feature should the business owner look for in a password manager to alleviate this concern?

The ability to generate complex passwords automatically.
End-to-end encryption of passwords stored in the password manager.
Integration with the business's existing single sign-on (SSO) solution.
A user-friendly interface to encourage employee adoption.

A smart home technology company provides a range of IoT devices, including smart thermostats, security cameras, and lighting systems. These devices are connected to the internet and can be controlled remotely by homeowners. Given the recent rise in IoT-targeted cyberattacks, what should be the company’s FIRST step in hardening these smart home devices against potential security breaches?

Implementing a firewall at the network level to monitor and control incoming and outgoing network traffic.
Ensuring all IoT devices are using strong, unique default passwords that users are encouraged to change upon setup.
Regularly releasing firmware updates for the IoT devices to patch any identified security vulnerabilities.
Providing users with a detailed manual on best practices for securing their home network.

A healthcare organization is enhancing its network architecture to support its critical online services. The IT team is planning to deploy a load balancer. Which of the following is an important consideration when configuring the load balancer to ensure high availability and security for the organization’s services?

Implementing a round-robin algorithm for equal distribution of traffic across all servers.
Configuring the load balancer to serve as the primary storage for patient data.
Setting up the load balancer to perform SSL offloading for encrypted traffic.
Using the load balancer to filter and block spam emails from external sources.

A company’s security team discovers that one of their critical applications was compromised through a malicious update. The team is tasked with implementing measures to protect against similar incidents in the future. Which of the following measures should be included in their security strategy? (SELECT TWO)

Conducting regular security audits of the application
Implementing a whitelist of approved software sources
Restricting internet access for application servers
Using a secure, dedicated update server

A financial services company is integrating Secure Access Service Edge (SASE) into its network infrastructure to modernize security and networking capabilities. The CISO is considering various components and features that are essential to maximize the effectiveness of SASE. Which TWO of the following elements should be prioritized in the SASE implementation for optimal security and performance? (SELECT TWO)

Incorporating a cloud access security broker (CASB) for monitoring and securing cloud-based applications.
Implementing a traditional hardware-based firewall at each branch office for localized protection.
Deploying secure web gateways (SWG) for safe and compliant internet access and web browsing.
Enabling high-capacity data storage within SASE to handle large volumes of financial transactions.

A company’s receptionist receives a call from an individual claiming to be from the IT department, stating they need remote access to update software on the company’s server. The caller provides specific technical details and sounds professional, but the receptionist has not been notified of any scheduled updates. In the context of social engineering, what is the appropriate action for the receptionist to take in this situation?

Grant remote access as the caller seems knowledgeable and professional
Ask the caller for their employee ID and verify it with the IT department
Direct the caller to send an official email request to the IT department
Hang up and ignore the call as it might be a social engineering attempt

In an organization, the IT department sets up an automated attestation process for reviewing and confirming user access rights. However, a subsequent security review finds that several users still have access rights that they should not possess. What is the MOST likely reason for the failure of the automated attestation process?

The attestation process does not include a manual review component.
Users are bypassing the attestation process by using VPNs.
The automated system is not integrated with all the organization's resources.
There is a lack of regular training on the importance of attestation.

A web application in a financial organization is experiencing slow response times. Analysis reveals an unusual pattern of database queries being executed, including several that involve large data extractions. What is the MOST likely security concern indicated by this pattern, and what should be the initial response?

SQL Injection attack; review web application firewall (WAF) settings
Distributed Denial of Service (DDoS) attack; increase server resources
Insider threat; conduct user access review
Misconfiguration; audit application configuration settings

An educational institution uses a legacy student information system that lacks modern security features. The IT department proposes an upgrade, but stakeholders are hesitant due to the potential learning curve and integration challenges. As a result, the upgrade is postponed, and later a security breach compromises sensitive student data. What lesson can be learned about legacy applications and change management from this scenario?

The necessity of conducting regular security audits on all systems.
The importance of stakeholder involvement in decision-making processes.
The value of upgrading legacy systems to enhance security.
The need for comprehensive data encryption on all institutional systems.

To enhance an organization’s defenses against privilege escalation attacks, which TWO of the following strategies should be prioritized? (SELECT TWO)

Employ the principle of least privilege for all user accounts and services.
Implement a robust intrusion detection system (IDS) to monitor network traffic.
Conduct regular vulnerability assessments and penetration testing.
Regularly conduct security awareness training focused on phishing and malware.

A major online retailer experienced a Distributed Denial of Service (DDoS) attack during a significant sales event, leading to the temporary shutdown of its website. The attack did not result in any data breach or ransom demands but caused substantial financial loss due to interrupted sales. What type of threat actor is most likely responsible for this incident?

A cybercriminal group seeking financial extortion
A competitor engaging in corporate sabotage
An individual or group aiming to cause disruption and chaos
A state-sponsored actor disrupting economic activities

A multinational corporation with extensive research and development in cutting-edge technology experienced two separate espionage incidents. In the first incident, trade secrets and proprietary research were stolen and traced to a competitor. In the second incident, confidential communication between top executives was intercepted, revealing strategic business plans. The attack methods were discreet and focused on data collection. Which TWO of the following motivations are most likely behind these espionage incidents? (SELECT TWO)

Industrial espionage to gain competitive advantage
State-sponsored espionage for national strategic interests
Financial gain through selling stolen corporate secrets
Corporate sabotage to disrupt business operations

A financial consulting firm has recently implemented a CYOD policy, providing its employees with a choice of laptops and tablets for their work. The firm is particularly concerned about protecting sensitive financial data and maintaining regulatory compliance. Which TWO of the following security measures should be prioritized to address these concerns in the CYOD environment? (SELECT TWO)

Enforcing the use of strong passwords and multi-factor authentication for device access.
Installing a standardized set of security software on all CYOD devices regardless of the model.
Implementing a Virtual Desktop Infrastructure (VDI) for accessing sensitive financial data.
Requiring all CYOD devices to connect to the company network exclusively through wired connections.

To enhance the security of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks, which two of the following practices should be prioritized? (SELECT TWO)

Integrating the ICS/SCADA networks with the organization's general-purpose IT networks for centralized management.
Regularly performing vulnerability assessments and penetration testing on the ICS/SCADA systems.
Allowing unrestricted internet access from ICS/SCADA devices for ease of updates and maintenance.
Implementing strict access control measures for both physical and network access to ICS/SCADA components.

A large corporation has implemented automated guard rails in its cloud environment to enforce security policies. Despite this, a recent audit revealed that several cloud storage buckets containing sensitive data were publicly accessible. Which of the following is the MOST likely reason for this security lapse?

Lack of employee cybersecurity awareness training.
Inadequate network firewall configurations.
Guard rails not properly configured to enforce access controls.
Insufficient antivirus software on end-user devices.

During a routine OSINT gathering exercise, a cybersecurity team at TechGuard Inc. discovers a leaked database containing login credentials that match their company’s email domain. What is the most effective initial action for the team to mitigate the potential risk posed by this exposure?

Notify all employees to change their passwords immediately.
Conduct an internal investigation to identify the source of the leak.
Monitor the dark web for further information about the leaked database.
Conduct an internal investigation to identify the source of the leak.

InfoGuard Corp. conducts a vulnerability analysis and identifies several vulnerabilities with varying exposure factors. The vulnerabilities include an unpatched software vulnerability (EF 60%), weak passwords used by employees (EF 40%), and a misconfigured firewall (EF 70%). To effectively manage these vulnerabilities based on their exposure factors, which TWO of the following actions should InfoGuard Corp. prioritize? (SELECT TWO)

Focus on strengthening employee password policies to address the weak passwords.
Prioritize patching the unpatched software vulnerability.
Replace the misconfigured firewall with a new one.
Implement additional security training for employees regarding firewall configuration.

A large enterprise is reviewing its security policies for critical systems, including firewalls, IDSs, and access control systems. The IT security team needs to decide which systems should be configured to fail-open and which should fail-closed, based on the potential impact on security and operations. Considering the balance between maintaining security and ensuring business continuity, which TWO of the following systems should be configured to fail-closed? (SELECT TWO)

The firewall protecting the internal network from external threats.
The IDS monitoring traffic for suspicious activities in the DMZ.
The access control system managing entry to the data center.
The load balancer distributing traffic across multiple web servers.

Comptia Sec+ Practice 3

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

Average score
Your score