CompTIA Certmaster CE Security + Domain
1.0 General Security Concepts Assessment
Questions and Correct Answers
Question 1
An organization has an established change management program that includes
standard operating procedures (SOPs). It wants to implement changes consistently
and effectively. What role do SOPs play in the change management process?
Correct Answer
B. They define routine operations or changes, providing detailed instructions to
implement them.
Question 2
A cyber technician reduces a computer's attack surface by installing a cryptoprocessor
that a plug-in peripheral component interconnect express (PCIe) adaptor card can
remove. What type of cryptoprocessor can support this requirement?
Correct Answer
B. Hardware Security Module (HSM)
Question 3
How can a cybersecurity analyst effectively utilize version control to maintain a
historical record of changes and ensure security in the organization's IT systems and
applications?
Correct Answer
C. Use version control to track changes in network diagrams and configuration files.
Page 1 of 10
, Question 4
A user in a company wants a new USB flash drive. Rather than requesting one through
the proper channel, the user obtains one from one of the company's storage closets.
Upon approaching the closet door, the user notices a warning sign indicating cameras
are in use. What is the control objective of the observed sign?
Correct Answer
C. Deterrent
Question 5
A malicious actor initiates an attack on a software organization, believing it to have
successfully acquired sensitive data. Unbeknownst to the attacker, the organization
has deceived the attacker by intentionally providing fake sensitive information and
has now captured the attacker's tactics and tools. What deception technology did the
organization deploy to capture the attacker's techniques and tools?
Correct Answer
D. Honeyfile
Question 6
A cyber security analyst wants to reduce the attack surface for a computer that
contains top secret data. The analyst installs a cryptoprocessor as a module within the
central processing unit (CPU) on the designated computer to accomplish this. What
type of cryptoprocessor is the analyst installing?
Correct Answer
C. Trusted Platform Module (TPM)
Question 7
A corporation's IT department is integrating a new framework that permits, ascertains,
and applies various resources in accordance with established company policies. Which
principle should the department incorporate?
Correct Answer
A. Policy-driven access control
Page 2 of 10
1.0 General Security Concepts Assessment
Questions and Correct Answers
Question 1
An organization has an established change management program that includes
standard operating procedures (SOPs). It wants to implement changes consistently
and effectively. What role do SOPs play in the change management process?
Correct Answer
B. They define routine operations or changes, providing detailed instructions to
implement them.
Question 2
A cyber technician reduces a computer's attack surface by installing a cryptoprocessor
that a plug-in peripheral component interconnect express (PCIe) adaptor card can
remove. What type of cryptoprocessor can support this requirement?
Correct Answer
B. Hardware Security Module (HSM)
Question 3
How can a cybersecurity analyst effectively utilize version control to maintain a
historical record of changes and ensure security in the organization's IT systems and
applications?
Correct Answer
C. Use version control to track changes in network diagrams and configuration files.
Page 1 of 10
, Question 4
A user in a company wants a new USB flash drive. Rather than requesting one through
the proper channel, the user obtains one from one of the company's storage closets.
Upon approaching the closet door, the user notices a warning sign indicating cameras
are in use. What is the control objective of the observed sign?
Correct Answer
C. Deterrent
Question 5
A malicious actor initiates an attack on a software organization, believing it to have
successfully acquired sensitive data. Unbeknownst to the attacker, the organization
has deceived the attacker by intentionally providing fake sensitive information and
has now captured the attacker's tactics and tools. What deception technology did the
organization deploy to capture the attacker's techniques and tools?
Correct Answer
D. Honeyfile
Question 6
A cyber security analyst wants to reduce the attack surface for a computer that
contains top secret data. The analyst installs a cryptoprocessor as a module within the
central processing unit (CPU) on the designated computer to accomplish this. What
type of cryptoprocessor is the analyst installing?
Correct Answer
C. Trusted Platform Module (TPM)
Question 7
A corporation's IT department is integrating a new framework that permits, ascertains,
and applies various resources in accordance with established company policies. Which
principle should the department incorporate?
Correct Answer
A. Policy-driven access control
Page 2 of 10
