CompTIA Security+ Practice Test 4

After establishing and documenting your baseline configuration, which step should be implemented?

What questions might a security analyst ask when analyzing budgeting and costing during an extensive procurement review?

A recently hired security analyst at a local organization wants to better understand the organization’s network infrastructure. Which of the following activities would provide a list of servers, workstations, printers, switches, and routers currently active in the network?

A CTO of a medium-sized enterprise noticed that several software applications were not updated regularly, leading to potential security vulnerabilities. Upon investigation, he realized that no specific team or individual was assigned as the owner of these applications. To enhance security, what should the CTO emphasize?

Which testing methodology can be used to analyze source code to find any security vulnerabilities that make an organization’s applications susceptible to attacks?

WPA3-Enterprise is a security protocol that requires a minimum encryption standard of 192-bit AES. Which of the following advanced encryption methods is supported by WPA3-Enterprise to provide even more robust data protection? (Choose two.)

An organization recently adopted a mobile strategy where employees are provided with company-owned devices. These devices are allowed for personal use, but the organization retains the ability to manage and monitor them. Which deployment model is this organization using?

In which way does mobile device management (MDM) software make it easy for administrators to view inventory control and track assets such as devices and the type of data each device contains?

You are tasked with deploying wireless access points in a large food packaging factory. After deploying the WAPs, employees report inconsistent wireless connectivity in some areas. Which tool would be most effective for the IT team to visualize areas of weak wireless signal strength?

You have been tasked with securing a central server that houses patients’ medical records in a local hospital. Which two hardening techniques can encrypt patient data in medical devices? (Choose two.)

Which of the following is NOT an example of data in use?

A local power supply company is having problems with continuous power supply. You want to protect a highly available server from short power outages between 5 and 10 minutes. You are considering long-term options that can protect your servers from these outages. Which power management solution should be considered?

How does continuous data protection (CDP) capture every version of the data at every point in time?

Your team is considering different types of backup for a large set of critical data. Which of the following can be a drawback of offsite backup?

How does an operations manager facilitate constructive feedback during a security incident response simulation (SIRS)?

A natural disaster has struck a data center that houses critical servers for a healthcare institution. How can a manager ensure the first incident response team is prepared to assess the immediate damage to the physical infrastructure and cyber assets? (Choose two.)

You are building computer systems for a research company that requires multiple systems for complex calculations. Which mechanism should be used to distribute workload across multiple computers to speed up computational tasks?

Which high-availability component enables web servers hosting high-traffic sites to run optimally without interruptions in case of hardware or network failure?

You are looking at different hashes that verify a password’s integrity. Which hashing algorithm type is used for the following hash:

D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2D2

You’re subscribed to a famous online video streaming service. You travel to an Asian country for vacation. When you try to access the streaming service, it fails to load the content. Searching for answers online, you find out that the streaming service doesn’t offer any content in that country. Which security restrictions are used in this scenario?