CompTIA Security+ Test Questions

Front

The Chief Security Officer (CSO) at a Financial Organization wants to implement additional detective security controls. Which of the following would BEST represent this type of control? Options: Installation of surveillance cameras, Enforcement of access control mechanisms, Implementation of biometric authentication systems, Performing regular system backups

Back

Installation of surveillance cameras

Front

A Company installed a new locking cabinet in the Computer room to hold extra flash drives and other supplies. Which type of security control did the Company configure?

Back

Preventive

Front

An Organization changes its Security posture after a Breach and wants to enhance encryption by putting measures in place to mitigate risk exposures that cannot be directly eliminated by the Cyber Security team. What type of control is being observed in this situation?

Back

Compensating

Front

After encountering a Cyber Attack, an Organization uses a monitoring solution that automatically restarts services after it has detected the system has crashed. What type of functional security control is the company implementing?

Back

Corrective

Front

As part of enhancing its Data Protection Strategy, a Corporation's IT Manager aims to ensure Defense-in-Depth by integrating a Technical Control alongside existing managerial and operational controls. Which measure BEST exemplifies a technical security control according to the classification scheme? Options: Setting up a Network Intrusion Detection Systems, Implementing a Risk Identification Tool, Conducting Employee CyberSecurity Training, Installing a Building Access Control System

Back

Setting up a Network Intrusion Detection Systems

Front

A Company finds that employees are accessing Streaming websites that are not being monitored for malware or viruses. Which type of control can the Network Administrator implement to protect the system and keep the employees from viewing unapproved sites?

Back

Technical

Front

After an Unauthorized Access Incident in the Server room over the weekend, the IT Department of a Company decides to implement New Security Controls to deter similar future incidents. Which of the following should they implement? Placing visible signs indicating Surveillance and severe penalties for unauthorized entry. Installing a Network-connected Smoke Detector System in the Server room. Applying reflective window film to the server room windows. Introducing a Key Control System for Office Systems.

Back

Placing visible signs indicating Surveillance and severe penalties for unauthorized entry.

Front

The Security Manager at a Financial Technology Company seeks to enforce a control that enhances User behavior to mitigate Cybersecurity risks. What type of control should an Analyst recommend the security manager put in place?

Back

The Analyst should recommend the Enforcement of a Strict Password Policy.

Front

A User in a Company wants a new USB flash drive. Rather than requesting one through the proper channel, the User obtains one from one of the Company's Storage Closets. Upon approaching the Closet door, the User notices a Warning Sign indicating cameras are in use. What is the control objective of the observed sign?

Back

Deterrent

Front

An IT Security Manager at a Technical College wants to increase the use of controls that generate Alerts where ongoing attacks are suspected in the Organization's Network Infrastructure. Which of the following is a suitable illustration of this type of control? Options: Implementing an Intrusion Detection System., Using strong Password policies, Establishing a secure Firewall., Regularly updating the Antivirus Software.

Back

Implementing an Intrusion Detection System.