Which practice is an example of continuous monitoring?

Updating firewall rules after a security incident

Conducting an annual penetration test

Performing a one-time vulnerability scan

Reviewing security logs on a daily basis for suspicious activity

What is the primary purpose of a vulnerability assessment?

To identify weaknesses in network infrastructure and software before they can be exploited

To provide real-time protection against zero-day attacks

To ensure compliance with all regulatory requirements

To actively exploit vulnerabilities to test the organization's response

Which security control is primarily used to protect data confidentiality when transmitted over an untrusted network?

Intrusion detection system (IDS)

Which phase of the incident response process involves identifying the scope of the incident and determining which systems are affected?

Containment, eradication, and recovery

A company wants to protect its internal web application from SQL injection attacks. The application is hosted on a single server. Which control would be most effective?

Use parameterized queries in the application code.

Increase the server's logging level.

CompTIACloudNetX

Domain 2Objective 1

Threats and Mitigations CNX-001 Practice Questions (Page 1)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

28%of the exam

Questions 1–5

1foundation · easy
Which practice is an example of continuous monitoring?
Select an answer first
2foundation · easy
What is the primary purpose of a vulnerability assessment?
Select an answer first
3foundation · easy
Which security control is primarily used to protect data confidentiality when transmitted over an untrusted network?
Select an answer first
4foundation · easy
Which phase of the incident response process involves identifying the scope of the incident and determining which systems are affected?
Select an answer first
5application · medium
A company wants to protect its internal web application from SQL injection attacks. The application is hosted on a single server. Which control would be most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.