bilities,
0/23/2026,and
)__*_()()(_(()*)()(*)(CompTIA
4:03:13
Mitigations
AM1Assessment.pdf10/23/2026,
of 16Page 1CompTIA
Certmaster
Certmaster
CE
8:13:01
Security+
CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+
Domain Domain
2.0 Threats,
2.0 Threats,
Vulnerabilities,
Vulnerabilities,
and4:03:13
Mitigations
and AM1
Mitigations
Assessment.pdf10/23/2026,
of 16Page
Assessment.pdf2026/10/23Page
1CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^
Security+
1 of 16 Domain
CompTIA Certmaster CE Security+ Domain 2.0
Threats, Vulnerabilities, and Mitigations
Assessment
Save
Terms in this set (45)
During a cybersecurity attack, how A .The threat actor conceals exploit code within an
would a threat actor use image files image file that targets a vulnerability in the browser
as a lure to target a vulnerability in a or document editing software.
browser or document editing
software?
A large corporation is assessing its B. Regularly update firmware to the latest, most
cybersecurity practices by focusing secure versions.
on potential security risks linked to
hardware and firmware within the
company's extensive network of
computer systems. For the IT
department, which of the following
strategies MOST effectively mitigates
the risks related to hardware and
firmware security vulnerabilities?
bilities,
0/23/2026,and4:03:13
Mitigations
AM1Assessment.pdf10/23/2026,
of 16Page 1CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+ Domain 2.0 Threats, Vulnerabilities,
4:03:13
and AM1
Mitigations
of 16Page
Assessment.pdf2026/10/23Page
1CompTIA Certmaster CE Security+
1 of 16 Domain
,bilities,
0/23/2026,and
)__*_()()(_(()*)()(*)(CompTIA
4:03:13
Mitigations
AM2Assessment.pdf10/23/2026,
of 16Page 2CompTIA
Certmaster
Certmaster
CE
8:13:01
Security+
CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+
Domain Domain
2.0 Threats,
2.0 Threats,
Vulnerabilities,
Vulnerabilities,
and4:03:13
Mitigations
and AM2
Mitigations
Assessment.pdf10/23/2026,
of 16Page
Assessment.pdf2026/10/23Page
2CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^
Security+
2 of 16 Domain
The server manager of a tech A. Radio-frequency ID cloning (incorrect)
company observes a significant C. Malware infection (incorrect)
increase in server resource
consumption, which is not
proportional to the workload on the
server. Which of the following is the
MOST plausible cause for these
observations?
A cyber technician works on a A. Legacy
corporate laptop where an
employee complains the software is
outdated. What type of vulnerability
describes the continued use of
outdated software methods,
technology, computer systems, or
application programs despite known
shortcomings?
The security team in a financial A. Implement a web application firewall (WAF).
organization identified a zero-day
vulnerability that enables cross-site
scripting (XSS) attacks on its internal
web portal. The chief information
security officer (CISO) instructs the
team to take immediate action.
Which action most effectively
minimizes the threat from the zero-
day vulnerability and the potential
XSS attacks?
bilities,
0/23/2026,and4:03:13
Mitigations
AM2Assessment.pdf10/23/2026,
of 16Page 2CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+ Domain 2.0 Threats, Vulnerabilities,
4:03:13
and AM2
Mitigations
of 16Page
Assessment.pdf2026/10/23Page
2CompTIA Certmaster CE Security+
2 of 16 Domain
,bilities,
0/23/2026,and
)__*_()()(_(()*)()(*)(CompTIA
4:03:13
Mitigations
AM3Assessment.pdf10/23/2026,
of 16Page 3CompTIA
Certmaster
Certmaster
CE
8:13:01
Security+
CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+
Domain Domain
2.0 Threats,
2.0 Threats,
Vulnerabilities,
Vulnerabilities,
and4:03:13
Mitigations
and AM3
Mitigations
Assessment.pdf10/23/2026,
of 16Page
Assessment.pdf2026/10/23Page
3CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^
Security+
3 of 16 Domain
An IT security specialist at a mid-size B. Implement mobile device management (MDM)
corporation observes a trend of policies to restrict unauthorized application
unauthorized apps appearing on installation.
company-provided mobile devices. C. Conduct device audits to identify and detect
The specialist suspects the unauthorized applications and signs of jailbreaking
employees are either sideloading or sideloading.
apps or have jailbroken their devices.
What steps should the security
specialist take to verify the cause of
the unauthorized applications and to
re-establish proper security
protocols? (Select the two best
options.)
Which of the following is an example C. Compromising a site often visited by a target
of a watering hole attack? group to breach their devices.
A systems administrator notices that C. Log tampering or deletion
several user accounts are frequently
getting locked out. Simultaneously,
during these lockout instances, the
system did not record any logs.
Which of the following is the MOST
likely explanation for the lack of logs
during these events?
bilities,
0/23/2026,and4:03:13
Mitigations
AM3Assessment.pdf10/23/2026,
of 16Page 3CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+ Domain 2.0 Threats, Vulnerabilities,
4:03:13
and AM3
Mitigations
of 16Page
Assessment.pdf2026/10/23Page
3CompTIA Certmaster CE Security+
3 of 16 Domain
0/23/2026,and
)__*_()()(_(()*)()(*)(CompTIA
4:03:13
Mitigations
AM1Assessment.pdf10/23/2026,
of 16Page 1CompTIA
Certmaster
Certmaster
CE
8:13:01
Security+
CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+
Domain Domain
2.0 Threats,
2.0 Threats,
Vulnerabilities,
Vulnerabilities,
and4:03:13
Mitigations
and AM1
Mitigations
Assessment.pdf10/23/2026,
of 16Page
Assessment.pdf2026/10/23Page
1CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^
Security+
1 of 16 Domain
CompTIA Certmaster CE Security+ Domain 2.0
Threats, Vulnerabilities, and Mitigations
Assessment
Save
Terms in this set (45)
During a cybersecurity attack, how A .The threat actor conceals exploit code within an
would a threat actor use image files image file that targets a vulnerability in the browser
as a lure to target a vulnerability in a or document editing software.
browser or document editing
software?
A large corporation is assessing its B. Regularly update firmware to the latest, most
cybersecurity practices by focusing secure versions.
on potential security risks linked to
hardware and firmware within the
company's extensive network of
computer systems. For the IT
department, which of the following
strategies MOST effectively mitigates
the risks related to hardware and
firmware security vulnerabilities?
bilities,
0/23/2026,and4:03:13
Mitigations
AM1Assessment.pdf10/23/2026,
of 16Page 1CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+ Domain 2.0 Threats, Vulnerabilities,
4:03:13
and AM1
Mitigations
of 16Page
Assessment.pdf2026/10/23Page
1CompTIA Certmaster CE Security+
1 of 16 Domain
,bilities,
0/23/2026,and
)__*_()()(_(()*)()(*)(CompTIA
4:03:13
Mitigations
AM2Assessment.pdf10/23/2026,
of 16Page 2CompTIA
Certmaster
Certmaster
CE
8:13:01
Security+
CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+
Domain Domain
2.0 Threats,
2.0 Threats,
Vulnerabilities,
Vulnerabilities,
and4:03:13
Mitigations
and AM2
Mitigations
Assessment.pdf10/23/2026,
of 16Page
Assessment.pdf2026/10/23Page
2CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^
Security+
2 of 16 Domain
The server manager of a tech A. Radio-frequency ID cloning (incorrect)
company observes a significant C. Malware infection (incorrect)
increase in server resource
consumption, which is not
proportional to the workload on the
server. Which of the following is the
MOST plausible cause for these
observations?
A cyber technician works on a A. Legacy
corporate laptop where an
employee complains the software is
outdated. What type of vulnerability
describes the continued use of
outdated software methods,
technology, computer systems, or
application programs despite known
shortcomings?
The security team in a financial A. Implement a web application firewall (WAF).
organization identified a zero-day
vulnerability that enables cross-site
scripting (XSS) attacks on its internal
web portal. The chief information
security officer (CISO) instructs the
team to take immediate action.
Which action most effectively
minimizes the threat from the zero-
day vulnerability and the potential
XSS attacks?
bilities,
0/23/2026,and4:03:13
Mitigations
AM2Assessment.pdf10/23/2026,
of 16Page 2CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+ Domain 2.0 Threats, Vulnerabilities,
4:03:13
and AM2
Mitigations
of 16Page
Assessment.pdf2026/10/23Page
2CompTIA Certmaster CE Security+
2 of 16 Domain
,bilities,
0/23/2026,and
)__*_()()(_(()*)()(*)(CompTIA
4:03:13
Mitigations
AM3Assessment.pdf10/23/2026,
of 16Page 3CompTIA
Certmaster
Certmaster
CE
8:13:01
Security+
CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+
Domain Domain
2.0 Threats,
2.0 Threats,
Vulnerabilities,
Vulnerabilities,
and4:03:13
Mitigations
and AM3
Mitigations
Assessment.pdf10/23/2026,
of 16Page
Assessment.pdf2026/10/23Page
3CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^
Security+
3 of 16 Domain
An IT security specialist at a mid-size B. Implement mobile device management (MDM)
corporation observes a trend of policies to restrict unauthorized application
unauthorized apps appearing on installation.
company-provided mobile devices. C. Conduct device audits to identify and detect
The specialist suspects the unauthorized applications and signs of jailbreaking
employees are either sideloading or sideloading.
apps or have jailbroken their devices.
What steps should the security
specialist take to verify the cause of
the unauthorized applications and to
re-establish proper security
protocols? (Select the two best
options.)
Which of the following is an example C. Compromising a site often visited by a target
of a watering hole attack? group to breach their devices.
A systems administrator notices that C. Log tampering or deletion
several user accounts are frequently
getting locked out. Simultaneously,
during these lockout instances, the
system did not record any logs.
Which of the following is the MOST
likely explanation for the lack of logs
during these events?
bilities,
0/23/2026,and4:03:13
Mitigations
AM3Assessment.pdf10/23/2026,
of 16Page 3CompTIA Certmaster
8:13:01CE
AM*@*^%^#!*&^*&^!()(@*&$*@10/23/2026,
Security+ Domain 2.0 Threats, Vulnerabilities,
4:03:13
and AM3
Mitigations
of 16Page
Assessment.pdf2026/10/23Page
3CompTIA Certmaster CE Security+
3 of 16 Domain
