A risk assessment identifies a vulnerability in a legacy system that cannot be patched because the vendor no longer provides support. The system is critical to operations. Which mitigation strategy should be prioritized?

Isolate the system with network segmentation and strict firewall rules.

Accept the risk and take no action.

Replace the system immediately.

Disable the system until a solution is found.

In risk analysis, what does the term 'likelihood' refer to?

The potential financial loss if a threat occurs

The probability that a threat will exploit a vulnerability

The number of vulnerabilities present in a system

The speed at which a threat can spread across a network

A company wants to protect its internal network from malware that spreads via email attachments. They already have a firewall and an email spam filter. Which additional control would be most effective in preventing malware from executing on user workstations?

Enable network-level encryption for all internal traffic.

Deploy an intrusion detection system (IDS) on the network perimeter.

Implement application allowlisting on workstations to only permit approved executables.

Increase the frequency of full-disk backups.

Which security control is designed to monitor network traffic for signs of malicious activity and generate alerts?

Intrusion detection system (IDS)

CompTIACloudNetX

Domain 2Objective 1

Threats and Mitigations CNX-001 Practice Questions (Page 3)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

28%of the exam

Questions 11–15

11application · medium
A risk assessment identifies a vulnerability in a legacy system that cannot be patched because the vendor no longer provides support. The system is critical to operations. Which mitigation strategy should be prioritized?
Select an answer first
12foundation · easy
In risk analysis, what does the term 'likelihood' refer to?
Select an answer first
13foundation · easy
An employee receives an email that appears to be from the company's IT department, asking them to click a link and enter their password to verify their account. Which type of threat does this describe?
Select an answer first
14application · medium
A company wants to protect its internal network from malware that spreads via email attachments. They already have a firewall and an email spam filter. Which additional control would be most effective in preventing malware from executing on user workstations?
Select an answer first
15foundation · easy
Which security control is designed to monitor network traffic for signs of malicious activity and generate alerts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.