A company is migrating its on-premises data center to a public cloud. They need to maintain a secure connection between their on-premises network and the cloud VPC. Which solution should they implement?

Expose the cloud resources directly to the internet and rely on security groups.

Establish a VPN connection between the on-premises VPN gateway and the cloud VPN gateway.

Use a public cloud storage service to transfer data between environments.

Deploy a web application firewall (WAF) in front of the cloud resources.

An organization is implementing a new identity and access management (IAM) system. They need to support both on-premises and cloud applications, and they want to enforce conditional access policies based on user location and device compliance. Which solution should they choose?

Use a traditional on-premises identity management system without federation capabilities.

Use separate identity systems for on-premises and cloud applications.

Use a simple username and password for all applications without any additional controls.

Use a cloud-based identity provider (IdP) that supports federation and conditional access policies.

A healthcare organization transmits patient records between two facilities over the internet. They must ensure the data is protected from interception and that only authorized systems can decrypt it. Which solution should they use?

Rely on the internet service provider's (ISP) encryption for all data transmitted.

Use a web application firewall (WAF) to filter traffic between the facilities.

Send the data as email attachments with password-protected ZIP files.

Establish a site-to-site VPN with IPsec and use certificates for mutual authentication.

CompTIACySA+

Domain 1Objective 1

System and Network Architecture CS0-003 Practice Questions (Page 6)

Part of the Security operations domain, which accounts for 33% of the CS0-003 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~21–36 in this domain), expect 4–7 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

33%of the exam

Questions 26–30

26application · medium
A company is migrating its on-premises data center to a public cloud. They need to maintain a secure connection between their on-premises network and the cloud VPC. Which solution should they implement?
Select an answer first
27expert · hard
An organization is implementing a new identity and access management (IAM) system. They need to support both on-premises and cloud applications, and they want to enforce conditional access policies based on user location and device compliance. Which solution should they choose?
Select an answer first
28foundation · easy
Which operating system feature isolates processes from each other to prevent one process from accessing another's memory or resources?
Select an answer first
29application · medium
A healthcare organization transmits patient records between two facilities over the internet. They must ensure the data is protected from interception and that only authorized systems can decrypt it. Which solution should they use?
Select an answer first
30foundation · easy
Which infrastructure component is specifically designed to isolate untrusted traffic from trusted internal networks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CS0-003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CS0-003” is a trademark of its owner, used for identification only.

System and Network Architecture CS0-003 Practice Questions (Page 6)

Questions 26–30

A company is migrating its on-premises data center to a public cloud. They need to maintain a secure connection between their on-premises network and the cloud VPC. Which solution should they implement?

An organization is implementing a new identity and access management (IAM) system. They need to support both on-premises and cloud applications, and they want to enforce conditional access policies based on user location and device compliance. Which solution should they choose?

Which operating system feature isolates processes from each other to prevent one process from accessing another's memory or resources?

A healthcare organization transmits patient records between two facilities over the internet. They must ensure the data is protected from interception and that only authorized systems can decrypt it. Which solution should they use?

Which infrastructure component is specifically designed to isolate untrusted traffic from trusted internal networks?

Keep studying — Security operations