A security analyst is configuring a Windows server that runs a legacy application with a known buffer overflow vulnerability. The analyst wants to enable a mitigation that will prevent the application from executing code that is injected into non-executable memory regions. Which setting should be enabled?

Address Space Layout Randomization (ASLR) for the application.

Data Execution Prevention (DEP) for the application.

Application whitelisting for the application.

Stack canaries for the application.

What is the main security benefit of Address Space Layout Randomization (ASLR)?

It makes it difficult for attackers to predict the location of key memory structures

It prevents all forms of code injection

It encrypts the contents of memory

It marks memory as non-executable

What is the primary purpose of a Content Security Policy (CSP) in the context of XSS mitigation?

To restrict the sources from which a page can load resources

To authenticate users before they access the application

To log all user interactions for auditing purposes

To encrypt all traffic between the client and server

A web developer is fixing a stored XSS vulnerability in a comment form. Which combination of controls directly addresses the root cause of the flaw?

Network segmentation and firewall rules

Input validation and output encoding

Rate limiting and account lockout policies

Why is sanitizing user input important for application security?

It encrypts the data before storage

It reduces the need for authentication

It removes or neutralizes dangerous characters that could be used in injection attacks

CompTIACySA+

Domain 2Objective 4

Mitigation Controls CS0-003 Practice Questions (Page 5)

Part of the Vulnerability management domain, which accounts for 30% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~20–33 in this domain), expect 4–7 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

30%of the exam

Questions 21–25

21application · medium
A security analyst is configuring a Windows server that runs a legacy application with a known buffer overflow vulnerability. The analyst wants to enable a mitigation that will prevent the application from executing code that is injected into non-executable memory regions. Which setting should be enabled?
Select an answer first
22foundation · easy
What is the main security benefit of Address Space Layout Randomization (ASLR)?
Select an answer first
23foundation · easy
What is the primary purpose of a Content Security Policy (CSP) in the context of XSS mitigation?
Select an answer first
24foundation · easy
A web developer is fixing a stored XSS vulnerability in a comment form. Which combination of controls directly addresses the root cause of the flaw?
Select an answer first
25foundation · easy
Why is sanitizing user input important for application security?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.