COMPTIA SECURITY+ CERTMASTER CE EXAM BANK |
ACCURATE CURRENTLY TESTING VERSIONS ALL
EXAM QUESTIONS AND ANSWERS | EXPERT VERIFIED
FOR GUARANTEED PASS | CERTMASTER COMPTIA
NETWORK+ FINAL ASSESSMENT LATEST UPDATE
1. A security analyst wishes to implement a system that enforces access
decisions to ensure privileges granted to an individual are appropriate for
their role. Which component is critical for enforcing these access control
decisions?
A) Policy Administration Point (PAP)
B) Policy Enforcement Point (PEP)
C) Policy Information Point (PIP)
D) Policy Decision Point (PDP)
Answer B: Policy Enforcement Point (PEP)
Rationale: The PEP enforces access decisions by intercepting and
granting/denying requests based on policies from the PDP.
2. Which of the following best describes the CIA triad in information
security?
,A) Cost, Implementation, and Assessment
B) Confidentiality, Integrity, and Availability
C) Controls, Identification, and Authentication
D) Compliance, Inspection, and Auditing
Answer B: Confidentiality, Integrity, and Availability
Rationale: The CIA triad is the foundation of information security, ensuring data is
accessible only to authorized users (confidentiality), accurate and unaltered
(integrity), and reliably available when needed (availability).
3. A system is designed to make it difficult or impossible to deny that
someone has performed an action. What security principle is being enforced?
A) Non-repudiation
B) Authentication
C) Authorization
D) Accounting
Answer A: Non-repudiation
Rationale: Non-repudiation ensures an individual cannot deny having performed
an action, typically using digital signatures or logs.
4. A business development team reports files are missing from the database
system, and server login screens show a lock symbol requiring users to
contact an email address. What type of attack is the company facing?
A) Rootkit
,B) Ransomware
C) Spyware
D) Bloatware
Answer B: Ransomware
Rationale: Ransomware encrypts files and demands payment for decryption, often
displaying a ransom note with contact instructions.
5. Which of the following types of control decreases the likelihood of a
cybersecurity breach occurring?
A) Corrective
B) Transfer
C) Detective
D) Preventive
Answer D: Preventive
Rationale: Preventive controls (e.g., firewalls, access controls, encryption) are
designed to stop a security incident before it occurs.
6. What is the primary risk associated with using default passwords on
network devices?
A) Performance degradation
B) Increased bandwidth usage
C) Unauthorized access
D) Data corruption
, Answer C: Unauthorized access
Rationale: Default credentials are widely documented and easily exploited by
attackers to gain unauthorized access.
7. Which access control model grants permissions based on the roles
individuals have in an organization?
A) DAC (Discretionary Access Control)
B) MAC (Mandatory Access Control)
C) RBAC (Role-Based Access Control)
D) ABAC (Attribute-Based Access Control)
Answer C: RBAC (Role-Based Access Control)
Rationale: RBAC assigns permissions to roles rather than individual users,
simplifying administration and ensuring consistent access.
8. Which of the following is an example of a physical security control?
A) Firewall
B) Encryption
C) Biometric door lock
D) Antivirus software
Answer C: Biometric door lock
Rationale: Physical controls restrict physical access to facilities, such as locks,
fences, guards, and biometric entry systems.
ACCURATE CURRENTLY TESTING VERSIONS ALL
EXAM QUESTIONS AND ANSWERS | EXPERT VERIFIED
FOR GUARANTEED PASS | CERTMASTER COMPTIA
NETWORK+ FINAL ASSESSMENT LATEST UPDATE
1. A security analyst wishes to implement a system that enforces access
decisions to ensure privileges granted to an individual are appropriate for
their role. Which component is critical for enforcing these access control
decisions?
A) Policy Administration Point (PAP)
B) Policy Enforcement Point (PEP)
C) Policy Information Point (PIP)
D) Policy Decision Point (PDP)
Answer B: Policy Enforcement Point (PEP)
Rationale: The PEP enforces access decisions by intercepting and
granting/denying requests based on policies from the PDP.
2. Which of the following best describes the CIA triad in information
security?
,A) Cost, Implementation, and Assessment
B) Confidentiality, Integrity, and Availability
C) Controls, Identification, and Authentication
D) Compliance, Inspection, and Auditing
Answer B: Confidentiality, Integrity, and Availability
Rationale: The CIA triad is the foundation of information security, ensuring data is
accessible only to authorized users (confidentiality), accurate and unaltered
(integrity), and reliably available when needed (availability).
3. A system is designed to make it difficult or impossible to deny that
someone has performed an action. What security principle is being enforced?
A) Non-repudiation
B) Authentication
C) Authorization
D) Accounting
Answer A: Non-repudiation
Rationale: Non-repudiation ensures an individual cannot deny having performed
an action, typically using digital signatures or logs.
4. A business development team reports files are missing from the database
system, and server login screens show a lock symbol requiring users to
contact an email address. What type of attack is the company facing?
A) Rootkit
,B) Ransomware
C) Spyware
D) Bloatware
Answer B: Ransomware
Rationale: Ransomware encrypts files and demands payment for decryption, often
displaying a ransom note with contact instructions.
5. Which of the following types of control decreases the likelihood of a
cybersecurity breach occurring?
A) Corrective
B) Transfer
C) Detective
D) Preventive
Answer D: Preventive
Rationale: Preventive controls (e.g., firewalls, access controls, encryption) are
designed to stop a security incident before it occurs.
6. What is the primary risk associated with using default passwords on
network devices?
A) Performance degradation
B) Increased bandwidth usage
C) Unauthorized access
D) Data corruption
, Answer C: Unauthorized access
Rationale: Default credentials are widely documented and easily exploited by
attackers to gain unauthorized access.
7. Which access control model grants permissions based on the roles
individuals have in an organization?
A) DAC (Discretionary Access Control)
B) MAC (Mandatory Access Control)
C) RBAC (Role-Based Access Control)
D) ABAC (Attribute-Based Access Control)
Answer C: RBAC (Role-Based Access Control)
Rationale: RBAC assigns permissions to roles rather than individual users,
simplifying administration and ensuring consistent access.
8. Which of the following is an example of a physical security control?
A) Firewall
B) Encryption
C) Biometric door lock
D) Antivirus software
Answer C: Biometric door lock
Rationale: Physical controls restrict physical access to facilities, such as locks,
fences, guards, and biometric entry systems.
