A company is required to protect sensitive data transmitted between its headquarters and a remote branch office. The data includes customer records and financial information. They currently use a site-to-site VPN, but they are concerned about the security of the VPN. Which additional control should they implement?

Implement end-to-end encryption for the data at the application layer, in addition to the VPN.

Replace the VPN with a leased line from the telecommunications provider.

Use a network intrusion detection system (IDS) to monitor the VPN traffic.

Disable the VPN and use a web application firewall (WAF) to protect the data.

A security analyst is investigating a data breach. The analyst notices that an internal server was communicating with an external IP address on port 443, but the server is not configured to make outbound HTTPS connections. Which type of attack is most likely occurring?

A distributed denial-of-service (DDoS) attack

Command and control (C2) communication over HTTPS

A man-in-the-middle (MITM) attack

A company is designing a hybrid cloud architecture. They have critical applications running on-premises and want to extend to the cloud for burst capacity. They need to ensure low latency and high security for the connection. Which solution should they choose?

Use a public cloud storage service to synchronize data between environments.

Use a cloud-based web application firewall (WAF) to protect the connection.

Use a dedicated private connection, such as AWS Direct Connect or Azure ExpressRoute, instead of a VPN over the internet.

Use a standard site-to-site VPN over the internet.

CompTIACySA+

Domain 1Objective 1

System and Network Architecture CS0-003 Practice Questions (Page 4)

Part of the Security operations domain, which accounts for 33% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~21–36 in this domain), expect 4–7 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

33%of the exam

Questions 16–20

16foundation · easy
In a security context, which operating system component is responsible for managing hardware resources and providing a platform for applications to run?
Select an answer first
17expert · hard
A company is required to protect sensitive data transmitted between its headquarters and a remote branch office. The data includes customer records and financial information. They currently use a site-to-site VPN, but they are concerned about the security of the VPN. Which additional control should they implement?
Select an answer first
18foundation · easy
Which encryption method uses a single shared key for both encryption and decryption?
Select an answer first
19expert · hard
A security analyst is investigating a data breach. The analyst notices that an internal server was communicating with an external IP address on port 443, but the server is not configured to make outbound HTTPS connections. Which type of attack is most likely occurring?
Select an answer first
20expert · hard
A company is designing a hybrid cloud architecture. They have critical applications running on-premises and want to extend to the cloud for burst capacity. They need to ensure low latency and high security for the connection. Which solution should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.

System and Network Architecture CS0-003 Practice Questions (Page 4)

Questions 16–20

In a security context, which operating system component is responsible for managing hardware resources and providing a platform for applications to run?

Which encryption method uses a single shared key for both encryption and decryption?

A security analyst is investigating a data breach. The analyst notices that an internal server was communicating with an external IP address on port 443, but the server is not configured to make outbound HTTPS connections. Which type of attack is most likely occurring?

A company is designing a hybrid cloud architecture. They have critical applications running on-premises and want to extend to the cloud for burst capacity. They need to ensure low latency and high security for the connection. Which solution should they choose?

Keep studying — Security operations