Which type of network security threat is characterized by an attacker overwhelming a target with a flood of traffic from multiple compromised systems?

Man-in-the-middle (MITM) attack

Distributed denial-of-service (DDoS) attack

A vulnerability scan reveals that a web server is running an outdated version of software with a known remote code execution vulnerability. Which mitigation strategy is most appropriate to address this issue?

Change the server's hostname to avoid detection

Disable the web server's logging to reduce attack surface

Apply the vendor-provided security patch to update the software

Increase the server's memory to handle more requests

Which activity is specifically performed during a vulnerability assessment?

Exploiting vulnerabilities to gain unauthorized access

Scanning systems and networks for known weaknesses

Restoring systems from backups after an incident

Configuring firewall rules to block malicious traffic

What is the primary purpose of an incident response plan?

To replace the need for security monitoring tools

To assign blame for security breaches

To provide a structured approach for detecting, responding to, and recovering from security incidents

To prevent all security incidents from occurring

A security team wants to detect new malware variants that are not yet identified by signature-based antivirus. They need a solution that can identify suspicious behavior on endpoints. Which approach should they implement?

Implement endpoint detection and response (EDR) with behavioral analysis.

Increase the frequency of vulnerability scans.

Deploy a network-based intrusion detection system (NIDS) that uses signature matching.

Enable full-disk encryption on all endpoints.

CompTIACloudNetX

Domain 2Objective 1

Threats and Mitigations CNX-001 Practice Questions (Page 4)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

28%of the exam

Questions 16–20

16foundation · easy
Which type of network security threat is characterized by an attacker overwhelming a target with a flood of traffic from multiple compromised systems?
Select an answer first
17foundation · easy
A vulnerability scan reveals that a web server is running an outdated version of software with a known remote code execution vulnerability. Which mitigation strategy is most appropriate to address this issue?
Select an answer first
18foundation · easy
Which activity is specifically performed during a vulnerability assessment?
Select an answer first
19foundation · easy
What is the primary purpose of an incident response plan?
Select an answer first
20application · medium
A security team wants to detect new malware variants that are not yet identified by signature-based antivirus. They need a solution that can identify suspicious behavior on endpoints. Which approach should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.