Question 1

In the middle of a cyberattack, a security engineer removes the infected devices from the network and locks down all compromised accounts. In which of the following incident response phases is the security engineer currently operating?

Accepted Answer

The security engineer is in the Containment phase, which involves isolating affected systems to prevent further damage and spread of the attack.

Question 2

An organization suffered an outage, and a critical system took 90 minutes to come back online. Though there was no data loss during the outage, the expectation was that the critical system would be available again within 60 minutes. Which of the following is the 60-minute expectation an example of?

Accepted Answer

RTO (Recovery Time Objective) is the maximum acceptable amount of time that a system can be down after a failure or disaster, which in this case is 60 minutes.

Question 3

A smart switch has the ability to monitor electrical levels and shut off power to a building in the event of power surge of power surge or other fault situation. The switch was installed on a wired network in a hospital and is monitored by the facilities department via a cloud application. The security administrator isolated the switch on a separate VLAN and set up a patching routine. Which of the following steps should also be taken to harden the smart switch?

Accepted Answer

Changing the default password is a fundamental security measure to prevent unauthorized access to the smart switch.

Question 4

A remote user recently took a two-week vacation abroad and brought along a corporate-owned laptop. Upon returning to work, the user has been unable to connect the laptop to the VPN. Which of the following is the MOST likely reason for the user's inability to connect the laptop to the VPN?

Accepted Answer

The user's laptop was likely isolated from the network due to foreign travel as a security measure to prevent unauthorized access or potential threats from unfamiliar networks.

Question 5

A website developer is working on a new e-commerce website and has asked an information security expert for the most appropriate way to store credit card numbers to create an easy reordering process. Which of the following methods would BEST accomplish this goal?

Accepted Answer

The answer of A website developer is working on a...

Question 6

A company processes highly sensitive data and senior management wants to protect the sensitive data by utilizing classification labels. Which of the following access control schemes would be BEST for the company to implement?

Accepted Answer

Mandatory access control (MAC) is best for protecting highly sensitive data using classification labels, as it enforces strict access controls based on data classification and user clearance levels.

Question 7

A security engineer has enabled two-factor authentication on all workstations. Which of the following approaches are the MOST secure? (Choose two.)

Accepted Answer

The answer of A security engineer has enabled two-factor authentication...

Question 8

A company's Chief Information Officer (CIO) is meeting with the Chief Information Security Officer (CISO) to plan some activities to enhance the skill levels of the company's developers. Which of the following would be MOST suitable for training the developers?

Accepted Answer

The answer of A company's Chief Information Officer (CIO) is...

Question 9

A retail executive recently accepted a job with a major competitor. The following week, a security analyst reviews the security logs and identifies successful logon attempts to access the departed executive's accounts. Which of the following security practices would have addressed the issue?

Accepted Answer

Offboarding is the process of removing access rights and accounts for employees who leave an organization, which would prevent unauthorized access to their accounts after departure.

Exam 16: CompTIA Security+ 2021