CompTIA Security+ Domain 2.0 Threats, Vulnerabilities, and Mitigations Assessment PDF: Practice Questions and Answers

CompTIA
+ Domain10/13/2026,
Certmaster
2.0 Threats,CE
1:58:15
Vulnerabilities,
Security+
AMCompTIA
Domain
and Mitigations
Certmaster
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
CE
Vulnerabilities,
Security+ Domain
and Mitigations
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
Vulnerabilities, and Mitigations
(&*$ **FAssessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^
VJyvhjbnoP+_IREOLKDJ(UWRORWUOI
(&*$ **F VJyvhjbnoP+_IR




CompTIA Certmaster CE Security+ Domain 2.0
Threats, Vulnerabilities, and Mitigations
Assessment

Save




Terms in this set (45)



During a cybersecurity attack, how A .The threat actor conceals exploit code within an
would a threat actor use image files image file that targets a vulnerability in the browser
as a lure to target a vulnerability in a or document editing software.
browser or document editing
software?


A large corporation is assessing its B. Regularly update firmware to the latest, most
cybersecurity practices by focusing secure versions.
on potential security risks linked to
hardware and firmware within the
company's extensive network of
computer systems. For the IT
department, which of the following
strategies MOST effectively mitigates
the risks related to hardware and
firmware security vulnerabilities?




CompTIA
+ Domain10/13/2026,
Certmaster
2.0 Threats,CE
1:58:15
Vulnerabilities,
Security+
AMCompTIA
Domain
and Mitigations
Certmaster
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
CE
Vulnerabilities,
Security+ Domain
and Mitigations
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
Vulnerabilities, and Mitigations
(&*$ **FAssessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^
VJyvhjbnoP+_IREOLKDJ(UWRORWUOI
(&*$ **F VJyvhjbnoP+_IR

,CompTIA
+ Domain10/13/2026,
Certmaster
2.0 Threats,CE
1:58:15
Vulnerabilities,
Security+
AMCompTIA
Domain
and Mitigations
Certmaster
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
CE
Vulnerabilities,
Security+ Domain
and Mitigations
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
Vulnerabilities, and Mitigations
(&*$ **FAssessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^
VJyvhjbnoP+_IREOLKDJ(UWRORWUOI
(&*$ **F VJyvhjbnoP+_IR




The server manager of a tech A. Radio-frequency ID cloning (incorrect)
company observes a significant C. Malware infection (incorrect)
increase in server resource
consumption, which is not
proportional to the workload on the
server. Which of the following is the
MOST plausible cause for these
observations?


A cyber technician works on a A. Legacy
corporate laptop where an
employee complains the software is
outdated. What type of vulnerability
describes the continued use of
outdated software methods,
technology, computer systems, or
application programs despite known
shortcomings?


The security team in a financial A. Implement a web application firewall (WAF).
organization identified a zero-day
vulnerability that enables cross-site
scripting (XSS) attacks on its internal
web portal. The chief information
security officer (CISO) instructs the
team to take immediate action.
Which action most effectively
minimizes the threat from the zero-
day vulnerability and the potential
XSS attacks?




CompTIA
+ Domain10/13/2026,
Certmaster
2.0 Threats,CE
1:58:15
Vulnerabilities,
Security+
AMCompTIA
Domain
and Mitigations
Certmaster
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
CE
Vulnerabilities,
Security+ Domain
and Mitigations
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
Vulnerabilities, and Mitigations
(&*$ **FAssessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^
VJyvhjbnoP+_IREOLKDJ(UWRORWUOI
(&*$ **F VJyvhjbnoP+_IR

,CompTIA
+ Domain10/13/2026,
Certmaster
2.0 Threats,CE
1:58:15
Vulnerabilities,
Security+
AMCompTIA
Domain
and Mitigations
Certmaster
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
CE
Vulnerabilities,
Security+ Domain
and Mitigations
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
Vulnerabilities, and Mitigations
(&*$ **FAssessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^
VJyvhjbnoP+_IREOLKDJ(UWRORWUOI
(&*$ **F VJyvhjbnoP+_IR




An IT security specialist at a mid-size B. Implement mobile device management (MDM)
corporation observes a trend of policies to restrict unauthorized application
unauthorized apps appearing on installation.
company-provided mobile devices. C. Conduct device audits to identify and detect
The specialist suspects the unauthorized applications and signs of jailbreaking
employees are either sideloading or sideloading.
apps or have jailbroken their devices.
What steps should the security
specialist take to verify the cause of
the unauthorized applications and to
re-establish proper security
protocols? (Select the two best
options.)


Which of the following is an example C. Compromising a site often visited by a target
of a watering hole attack? group to breach their devices.


A systems administrator notices that C. Log tampering or deletion
several user accounts are frequently
getting locked out. Simultaneously,
during these lockout instances, the
system did not record any logs.
Which of the following is the MOST
likely explanation for the lack of logs
during these events?




CompTIA
+ Domain10/13/2026,
Certmaster
2.0 Threats,CE
1:58:15
Vulnerabilities,
Security+
AMCompTIA
Domain
and Mitigations
Certmaster
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
CE
Vulnerabilities,
Security+ Domain
and Mitigations
2.0 Threats,
Assessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^$&*&$
Vulnerabilities, and Mitigations
(&*$ **FAssessment(*((&#*!(*#*($$(*($(*$Y(&*&$(*)&*)((&$*^
VJyvhjbnoP+_IREOLKDJ(UWRORWUOI
(&*$ **F VJyvhjbnoP+_IR