What is the main goal of continuous monitoring in network security?

To replace the need for periodic vulnerability assessments

To detect and respond to new threats and vulnerabilities in a timely manner

To ensure that all network traffic is encrypted

To eliminate all false positives from security alerts

During risk analysis, why is it important to prioritize threats and vulnerabilities based on their potential impact?

To eliminate all risks completely

To satisfy regulatory requirements for risk assessment

To allocate limited resources to the most critical risks first

To identify the root cause of each vulnerability

A security analyst is conducting a vulnerability assessment and discovers that a web server is running an outdated version of Apache with known vulnerabilities. The server is behind a firewall that only allows HTTP and HTTPS traffic. What should the analyst do to reduce the risk?

Apply the latest security patches to the Apache server.

Immediately shut down the web server until the patch is applied.

Disable the firewall rules for the web server.

Move the web server to a different network segment.

Which mitigation strategy is most effective in reducing the risk of a distributed denial-of-service (DDoS) attack against a web application?

Implementing rate limiting and traffic filtering at the network perimeter

Increasing the password complexity requirements for users

Encrypting all data stored in the database

Disabling the application's error messages

A security analyst is reviewing a vulnerability scan report and finds a critical vulnerability in a web server that is exposed to the internet. The patch is available but requires a reboot, which would cause a brief outage. The server is not business-critical and can be rebooted during off-hours. What should the analyst do first?

Add a firewall rule to block all traffic to the server until the patch is applied.

Apply the patch immediately during off-hours and verify the server returns to service.

Disable the server's internet access until the next scheduled maintenance window.

Document the vulnerability and wait for the next scheduled maintenance window.

CompTIACloudNetX

Domain 2Objective 1

Threats and Mitigations CNX-001 Practice Questions (Page 2)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

28%of the exam

Questions 6–10

6foundation · easy
What is the main goal of continuous monitoring in network security?
Select an answer first
7foundation · easy
During risk analysis, why is it important to prioritize threats and vulnerabilities based on their potential impact?
Select an answer first
8application · medium
A security analyst is conducting a vulnerability assessment and discovers that a web server is running an outdated version of Apache with known vulnerabilities. The server is behind a firewall that only allows HTTP and HTTPS traffic. What should the analyst do to reduce the risk?
Select an answer first
9foundation · easy
Which mitigation strategy is most effective in reducing the risk of a distributed denial-of-service (DDoS) attack against a web application?
Select an answer first
10application · medium
A security analyst is reviewing a vulnerability scan report and finds a critical vulnerability in a web server that is exposed to the internet. The patch is available but requires a reboot, which would cause a brief outage. The server is not business-critical and can be rebooted during off-hours. What should the analyst do first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.