A company uses an on-premises Active Directory (AD) environment and wants to enable single sign-on (SSO) for its cloud-based SaaS applications. They also need to audit user access across all systems. Which solution should they implement?

Federate AD with the SaaS applications using SAML 2.0 and integrate all authentication logs into a SIEM.

Create separate user accounts in each SaaS application and manually review access quarterly.

Implement a virtual private network (VPN) for all users and access SaaS applications through the VPN.

Use a password manager to store credentials for each SaaS application and enable multi-factor authentication (MFA).

A company stores customer credit card numbers in a database. The security team wants to minimize the risk of exposure if the database is compromised. Which control is most effective?

Use a network intrusion detection system (IDS) to monitor database traffic.

Encrypt the credit card numbers in the database and restrict access to the decryption keys.

Store the credit card numbers in a separate database without any encryption.

Implement strong password policies for all database users.

A financial institution is designing a new data center to host customer transaction databases. They must ensure that data at rest is protected and that network segmentation prevents lateral movement in case of a breach. Which combination of controls best meets these requirements?

Implement full-disk encryption on all servers and use a shared network segment for all database and application servers.

Encrypt the databases with AES-256 and place them in a separate VLAN with strict firewall rules between segments.

Deploy a web application firewall (WAF) in front of the databases and use TLS for all connections.

Use a single flat network for all servers and rely on host-based firewalls on each server.

CompTIACySA+

Domain 1Objective 1

System and Network Architecture CS0-003 Practice Questions (Page 1)

Part of the Security operations domain, which accounts for 33% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~21–36 in this domain), expect 4–7 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

33%of the exam

Questions 1–5

1application · medium
A company uses an on-premises Active Directory (AD) environment and wants to enable single sign-on (SSO) for its cloud-based SaaS applications. They also need to audit user access across all systems. Which solution should they implement?
Select an answer first
2foundation · easy
Which network architecture model divides a network into smaller, isolated segments to limit the spread of an attack and enforce security policies?
Select an answer first
3application · medium
A company stores customer credit card numbers in a database. The security team wants to minimize the risk of exposure if the database is compromised. Which control is most effective?
Select an answer first
4application · medium
A financial institution is designing a new data center to host customer transaction databases. They must ensure that data at rest is protected and that network segmentation prevents lateral movement in case of a breach. Which combination of controls best meets these requirements?
Select an answer first
5foundation · easy
Which data protection technique replaces sensitive data with a non-sensitive placeholder that maintains the data's format and usability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.

System and Network Architecture CS0-003 Practice Questions (Page 1)

Questions 1–5

A company uses an on-premises Active Directory (AD) environment and wants to enable single sign-on (SSO) for its cloud-based SaaS applications. They also need to audit user access across all systems. Which solution should they implement?

Which network architecture model divides a network into smaller, isolated segments to limit the spread of an attack and enforce security policies?

A company stores customer credit card numbers in a database. The security team wants to minimize the risk of exposure if the database is compromised. Which control is most effective?

A financial institution is designing a new data center to host customer transaction databases. They must ensure that data at rest is protected and that network segmentation prevents lateral movement in case of a breach. Which combination of controls best meets these requirements?

Which data protection technique replaces sensitive data with a non-sensitive placeholder that maintains the data's format and usability?

Keep studying — Security operations