CompTIA SecurityX QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
Domain 1: Security Architecture (Questions 1-20)
1. An organization is designing a new data center and wants to ensure that a single power failure does not take
down the entire facility. Which of the following should they implement?
,A) A single large UPS
B) Dual power feeds from separate substations
C) A backup generator only
D) Redundant cooling systems
Answer: B
Rationale: Dual power feeds from separate substations provide true redundancy against a single point of failure
(the substation). A single UPS or generator is a single point of failure. Redundant cooling addresses a different
threat.
2. A security architect is implementing a system that requires high availability and fault tolerance. The system
must continue operating even if a single disk fails. Which RAID level should they choose?
A) RAID 0
B) RAID 1
C) RAID 5
D) RAID 6
Answer: B
,Rationale: RAID 1 (mirroring) provides fault tolerance by duplicating data across two disks. RAID 0 has no
redundancy. RAID 5 and 6 can survive disk failures but have more complex rebuilds and write penalties; RAID 1
is the simplest for pure fault tolerance.
3. Which of the following best describes a "cold site" for disaster recovery?
A) A fully equipped backup site that can be operational within hours.
B) A site with hardware and infrastructure but no data.
C) An empty facility with power and network connectivity only.
D) A mobile trailer with generators and servers.
Answer: C
Rationale: A cold site is an empty facility with basic utilities. It requires the most time to become operational. A
hot site is fully equipped. A warm site has some equipment. A mobile site is a type of cold/warm site.
4. An organization wants to segment its network to limit the spread of malware. They place all web servers in
one VLAN and all database servers in another. What is this an example of?
A) Network address translation
B) Microsegmentation
C) Physical segmentation
, D) VLAN hopping
Answer: B
Rationale: Microsegmentation is the practice of creating fine-grained security zones, often using VLANs or
software-defined networking, to isolate workloads and limit lateral movement.
5. Which cloud deployment model provides the greatest level of control over security?
A) Public cloud
B) Private cloud
C) Community cloud
D) Hybrid cloud
Answer: B
Rationale: A private cloud is dedicated to a single organization, giving it the most control over physical security,
network configuration, and data residency.
6. A company is using a SaaS application. Under the shared responsibility model, who is responsible for
securing the data stored in the application?
A) The cloud provider
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
Domain 1: Security Architecture (Questions 1-20)
1. An organization is designing a new data center and wants to ensure that a single power failure does not take
down the entire facility. Which of the following should they implement?
,A) A single large UPS
B) Dual power feeds from separate substations
C) A backup generator only
D) Redundant cooling systems
Answer: B
Rationale: Dual power feeds from separate substations provide true redundancy against a single point of failure
(the substation). A single UPS or generator is a single point of failure. Redundant cooling addresses a different
threat.
2. A security architect is implementing a system that requires high availability and fault tolerance. The system
must continue operating even if a single disk fails. Which RAID level should they choose?
A) RAID 0
B) RAID 1
C) RAID 5
D) RAID 6
Answer: B
,Rationale: RAID 1 (mirroring) provides fault tolerance by duplicating data across two disks. RAID 0 has no
redundancy. RAID 5 and 6 can survive disk failures but have more complex rebuilds and write penalties; RAID 1
is the simplest for pure fault tolerance.
3. Which of the following best describes a "cold site" for disaster recovery?
A) A fully equipped backup site that can be operational within hours.
B) A site with hardware and infrastructure but no data.
C) An empty facility with power and network connectivity only.
D) A mobile trailer with generators and servers.
Answer: C
Rationale: A cold site is an empty facility with basic utilities. It requires the most time to become operational. A
hot site is fully equipped. A warm site has some equipment. A mobile site is a type of cold/warm site.
4. An organization wants to segment its network to limit the spread of malware. They place all web servers in
one VLAN and all database servers in another. What is this an example of?
A) Network address translation
B) Microsegmentation
C) Physical segmentation
, D) VLAN hopping
Answer: B
Rationale: Microsegmentation is the practice of creating fine-grained security zones, often using VLANs or
software-defined networking, to isolate workloads and limit lateral movement.
5. Which cloud deployment model provides the greatest level of control over security?
A) Public cloud
B) Private cloud
C) Community cloud
D) Hybrid cloud
Answer: B
Rationale: A private cloud is dedicated to a single organization, giving it the most control over physical security,
network configuration, and data residency.
6. A company is using a SaaS application. Under the shared responsibility model, who is responsible for
securing the data stored in the application?
A) The cloud provider
