📜 questionsBank.title ⁉️

CompTIA Security+ Cybersecurity Proficiency: Advanced Threat & Risk Management Assessment

questionsBank.legalText

💡 questionsBank.answeredQuestions

1.What is the primary objective of implementing a Security Information and Event Management (SIEM) system in a cybersecurity infrastructure?
  • 1.To automate security policy updates.
  • 2.To provide real-time analysis of security alerts. ✓
  • 3.To manage identity and access control.
  • 4.To test security patches before deployment.
2.When conducting a risk assessment, which factor is considered the most critical to evaluate the overall risk level?
  • 1.Likelihood of occurrence. ✓
  • 2.Magnitude of systems.
  • 3.Employee satisfaction levels.
  • 4.Cost of security technologies.
3.What is the primary purpose of implementing a demilitarized zone (DMZ) in a network architecture?
  • 1.To host publicly accessible services. ✓
  • 2.To isolate internal traffic.
  • 3.To encrypt all incoming traffic.
  • 4.To manage bandwidth effectively.
4.In advanced threat management, what is the main function of threat intelligence platforms (TIPs)?
  • 1.To store historical attack data.
  • 2.To aggregate and analyze threat data from various sources. ✓
  • 3.To configure network devices remotely.
  • 4.To control access to sensitive data.
5.Which protocol is commonly used to provide encrypted communications at the transport layer?
  • 1.HTTP
  • 2.Transport Layer Security (TLS). ✓
  • 3.SMTP
  • 4.FTP
6.What is the best description of a zero-day vulnerability?
  • 1.A vulnerability that has been patched but not documented.
  • 2.A vulnerability that is exploited before the vendor is aware of it. ✓
  • 3.A vulnerability that affects zero components of the network.
  • 4.A vulnerability known for more than a year but not fixed.
7.Which of the following is the primary reason organizations conduct penetration testing?
  • 1.To meet legal compliance requirements.
  • 2.To identify and remediate vulnerabilities before they can be exploited. ✓
  • 3.To enhance employee cybersecurity training.
  • 4.To develop new security protocols.
8.What is a crucial element in the definition of a good backdoor created by an attacker?
  • 1.Easy to discover for maintenance.
  • 2.Operates quietly without detection. ✓
  • 3.Leaves visible logs for tracking.
  • 4.Changes frequently to avoid capture.
9.Which cryptographic attack involves the attacker trying every possible key until the correct one is found?
  • 1.Brute force attack. ✓
  • 2.Man-in-the-middle attack.
  • 3.Phishing attack.
  • 4.SQL injection attack.
10.Which of the following security practices involves inspecting code to find vulnerabilities before the software is deployed?
  • 1.Static code analysis. ✓
  • 2.Dynamic analysis.
  • 3.Network monitoring.
  • 4.Penetration testing.
questionsBank.page 1 questionsBank.of 3