A security analyst is investigating a potential privilege escalation on a Windows server. The analyst finds that a standard user account was able to execute a command with administrative privileges. Which Windows feature is most likely to have been exploited?

Windows Defender Firewall misconfiguration

User Account Control (UAC) bypass

BitLocker Drive Encryption failure

A security team is implementing a data loss prevention (DLP) solution. They need to monitor and protect sensitive data across endpoints, network traffic, and cloud applications. Which approach is most effective?

Use an endpoint-based DLP solution only, and rely on it to protect all data.

Deploy a comprehensive DLP solution that covers endpoints, network, and cloud, and integrate it with the SIEM for centralized monitoring.

Use a network-based DLP solution only, and rely on it to inspect all traffic.

Use a cloud-based DLP solution only, and rely on it to protect all data.

A company needs to securely share sensitive files with external partners. The files are stored in a cloud storage service. Which solution provides the best balance of security and usability?

Upload the files to a public FTP server and share the credentials.

Use the cloud service's built-in sharing feature with expiring links and access restrictions.

Print the files and mail them to the partners.

Email the files as encrypted attachments to the partners.

Which infrastructure component is used to distribute incoming network traffic across multiple servers to ensure high availability and performance?

Intrusion prevention system (IPS)

A database administrator needs to grant a new analyst read-only access to a customer database for reporting purposes. Which principle should the administrator apply?

Grant the analyst access to the database server's operating system.

Grant the minimum necessary privileges to perform the job function.

Grant read-only access to all databases in the system.

Grant the analyst full administrative access to the database.

CompTIACySA+

Domain 1Objective 1

System and Network Architecture CS0-003 Practice Questions (Page 2)

Part of the Security operations domain, which accounts for 33% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~21–36 in this domain), expect 4–7 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

33%of the exam

Questions 6–10

6expert · hard
A security analyst is investigating a potential privilege escalation on a Windows server. The analyst finds that a standard user account was able to execute a command with administrative privileges. Which Windows feature is most likely to have been exploited?
Select an answer first
7expert · hard
A security team is implementing a data loss prevention (DLP) solution. They need to monitor and protect sensitive data across endpoints, network traffic, and cloud applications. Which approach is most effective?
Select an answer first
8application · medium
A company needs to securely share sensitive files with external partners. The files are stored in a cloud storage service. Which solution provides the best balance of security and usability?
Select an answer first
9foundation · easy
Which infrastructure component is used to distribute incoming network traffic across multiple servers to ensure high availability and performance?
Select an answer first
10application · medium
A database administrator needs to grant a new analyst read-only access to a customer database for reporting purposes. Which principle should the administrator apply?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.