CompTIA Security+ Practice Test 2

Front

Which centralized web-filtering technique groups websites into categories such as social networking, gambling, and webmail?

Back

Content categorization

Front

Tool for capturing metadata and statistics about network traffic to enhance security without recording each frame.

Back

A NetFlow collector

Front

What type of log provides data points on end-user activity monitored by the host's security software instead of the OS?

Back

Endpoint logs

Front

A mid-sized organization has faced a series of breaches due to insecure authentication methods. The security team concludes that current practices for user credentials need revision. What is the BEST course of action?

Back

Implement password management

Front

What phase should a cybersecurity team initiate when planning awareness programs to educate employees about potential security threats, defining objectives, selecting tools, and outlining the scope?

Back

Initial Phase

Front

A hospital has implemented a security device that processes sensitive patient information. The hospital wants to ensure that in the event of a failure, the confidentiality and integrity of the patient data take priority over the system's availability. What should the hospital set as the failure mode configuration for this security device?

Back

The security device should be configured to fail-closed.

Front

What allows a new IT security firm to become an authorized reseller for a popular firewall?

Back

Business Partners Agreement (BPA)

Front

Why does the security team want to implement security best practices and protocols in the manufacturing facility's IoT devices and embedded systems?

Back

To ensure the precise monitoring and control of manufacturing processes

Front

What can an organization use to mediate the copying of tagged data to authorized media and services and monitor statistics for policy violations after a breach?

Back

Data loss prevention (DLP)