CompTIA Security + (Part 1)

A company's IT department considers different approaches to obtaining digital certificates for its internal network infrastructure. The IT department evaluated the use of a Certificate Signing Request (CSR) and third-party Certificate Authorities (CAs) to meet their security requirements. What is the primary advantage of using a CSR and a third-party CA for obtaining digital certificates compared to other methods?

• Using a Certificate Signing Request and a third-party Certificate Authority allows for faster deployment of digital certificates within the network.

• Using a Certificate Signing Request and a third-party Certificate Authority eliminates the need for regular certificate renewals and maintenance.

• Digital certificates obtained through a Certificate Signing Request and a third-party Certificate Authority provide stronger encryption algorithms and key lengths.

• Digital certificates obtained through a Certificate Signing Request and a third-party Certificate Authority have a higher level of trust and recognition within the industry.

Answer explanation

Digital certificates from a CSR and third-party CA are widely recognized and trusted, enhancing security and credibility within the industry compared to self-signed certificates or internal CAs.

An educational institution plans to transition from a traditional to a digital learning system. The school's administration has assembled a Change Management Board (CMB) to ensure smooth and secure execution. Within the scope of this educational institution's digital transformation project, what would be the primary role of the CMB?

• Overseeing the daily operations of the school's IT department

        

   

• Conducting cybersecurity awareness training for all school staff

• Assessing, approving, and managing changes in the IT infrastructure

• Developing and implementing the school's digital learning curriculum

Answer explanation

The primary role of the Change Management Board (CMB) is to assess, approve, and manage changes in the IT infrastructure, ensuring a smooth transition to the digital learning system.

An educational institution plans to transition from a traditional to a digital learning system. The school's administration has assembled a Change Management Board (CMB) to ensure smooth and secure execution. Within the scope of this educational institution's digital transformation project, what would be the primary role of the CMB?

• Overseeing the daily operations of the school's IT department

• Conducting cybersecurity awareness training for all school staff

• Assessing, approving, and managing changes in the IT infrastructure

• Developing and implementing the school's digital learning curriculum

Answer explanation

The primary role of the Change Management Board (CMB) is to assess, approve, and manage changes in the IT infrastructure, ensuring a smooth transition to the digital learning system.

A global e-commerce company faces challenges with its legacy monolithic application. The application is becoming increasingly difficult to maintain due to its intertwined components and struggles to scale quickly enough to handle sudden traffic surges during big sales events. The company has already invested in cloud technology and on-premises infrastructure but still faces scalability and manageability issues. What would MOST effectively address these challenges?

•     

  Virtualization

• Serverless infrastructure

• Microservices

• Embedded systems

Answer explanation

Microservices effectively address the challenges of a monolithic application by breaking it into smaller, manageable components. This architecture enhances scalability and maintainability, allowing the company to handle traffic surges more efficiently.

Experts at a scientific facility suspect that operatives from another government entity planted malware and are spying on one of their top secret systems. Which attacker type is likely responsible based on the attacker's location and likely goals?

• Criminal syndicates 

• State actors

• Hacktivists

• Unskilled attackers

A cyber group is reviewing its web filtering capabilities after a recent breach. Which centralized web-filtering technique groups websites into categories such as social networking, gambling, and webmail?

•  Content categorization

• Block rules

• Uniform resource locators (URL) scanning

• Reputation-based filtering

An organization wants to enhance its cybersecurity by implementing web filtering. The company needs a solution that provides granular control over web traffic, ensures policy enforcement even when employees are off the corporate network, and can log and analyze Internet usage patterns. Which of the following strategies BEST meets these requirements?

•     

  Manual uniform resource locators (URLs) blocking

   

• Centralized web filtering

• Agent-based filtering

• Reputation-based filtering

A company is looking to expand its business into new markets despite associated risks. It prepares to accept higher risks for potentially higher returns. Which of the following approaches BEST meets the company's risk management approach parameters?

• Risk appetite

   

• Risk mitigation

• Risk intolerance

• Risk threshold

Answer explanation

The company is willing to accept higher risks for potentially higher returns, which aligns with the concept of risk appetite. This term refers to the level of risk an organization is prepared to take to achieve its objectives.

A tech company is in the process of decommissioning a fleet of old servers. It wants to ensure that sensitive data stored on these servers is fully eliminated and are not accesible in the event of unauthorized attempts. What primary process should the company implement before disposing or repurposing these servers?

•  

   Moving the servers to a secure storage location

   

• Selling the servers immediately

• Sanitizing the servers

• Deleting all the files on the servers

Answer explanation

The primary process the company should implement is sanitizing the servers. This ensures that all sensitive data is irretrievably destroyed, preventing unauthorized access, unlike simply deleting files which may leave data recoverable.

A network security administrator for a mid-sized enterprise must enhance the company’s security posture. The existing infrastructure includes a network with several connected devices, a firewall, and a virtual private network (VPN) for remote access. People have raised concerns about the potential attack surface, especially from inside threats. The enterprise recently shifted toward a hybrid working model, amplifying the need for secure remote access. The task requires implementing a solution that secures the enterprise infrastructure and ensures secure communication and access. Which approach should the network security administrator take to meet the company's needs?

•  Implement 802.1X for port security.   

• Establish a jump server for secure communication.

• Replace the current firewall with a Next Generation Firewall (NGFW).

• Configure an intrusion prevention system (IPS).