A database administrator needs to back up a database but does not need to modify its schema. Under the principle of least privilege, what should the administrator be granted?

Read-only access to the database

Full administrative rights to the database

Write-only access to the database

What is the primary purpose of Identity and Access Management (IAM) in an organization?

To provide a backup and recovery solution for user data

To encrypt all data stored on company servers

To monitor network traffic for malicious activity

To control which users can access which resources and under what conditions

Which of the following is an example of a second authentication factor in MFA?

A one-time code sent to a mobile device

An organization wants to protect its web application from brute-force attacks on user accounts. The application currently allows unlimited login attempts. Which configuration is most effective?

Increase the password complexity requirements to 15 characters with no lockout.

Set the lockout threshold to 100 failed attempts.

Implement an account lockout policy that locks the account after 5 failed attempts for 15 minutes.

Allow unlimited attempts but log all failures for later review.

Why is it important to log authentication events?

To automatically block all failed login attempts

To improve the speed of the authentication process

To detect suspicious activity such as repeated failed logins

CertNexusCyberSec First Responder (CFR)

Domain 3Objective 2

Objective 3.2 Protect Access. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 1)

Part of the 3.0 Address the Security Concerns of Computing Environments domain, which accounts for 28% of the CYBERSEC-FIRST-RESPONDER exam.

26questions here

6free pages

8concepts

28%of the exam

Questions 1–5

1foundation · easy
A database administrator needs to back up a database but does not need to modify its schema. Under the principle of least privilege, what should the administrator be granted?
Select an answer first
2foundation · easy
What is the primary purpose of Identity and Access Management (IAM) in an organization?
Select an answer first
3foundation · easy
Which of the following is an example of a second authentication factor in MFA?
Select an answer first
4application · medium
An organization wants to protect its web application from brute-force attacks on user accounts. The application currently allows unlimited login attempts. Which configuration is most effective?
Select an answer first
5foundation · easy
Why is it important to log authentication events?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSEC-FIRST-RESPONDER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CertNexus. “CYBERSEC-FIRST-RESPONDER” is a trademark of its owner, used for identification only.