A network switch has been configured to allow only specific MAC addresses to connect to its ports. What security measure is this?

MAC address filtering on a wireless access point

What is the primary goal of implementing port security on network switches?

To increase network speed by reducing collisions

To encrypt data transmitted between switches

To prevent unauthorized devices from connecting to the network

To monitor network traffic for suspicious activity

What is the primary purpose of a network firewall in a data infrastructure environment?

To provide secure remote access via VPN

To encrypt all data stored on the network

To detect and remove malware from endpoints

To monitor and filter network traffic based on security rules

A database administrator is configuring a firewall for a database server that is part of a three-tier application. The web server needs to connect to the database on TCP port 1521 (Oracle). The application server also needs to connect to the database on the same port. The security team wants to ensure that only these two servers can access the database. The firewall has a default-deny policy. Which configuration is correct?

Create a single allow rule for TCP 1521 with the source set to the web server's IP, and rely on the default-deny policy to block the application server.

Create a single allow rule for TCP 1521 with the source set to the web server's IP, and another rule for the application server's IP on a different port.

Create two separate allow rules for TCP 1521, one with the web server's IP as the source and one with the application server's IP as the source.

Create a single allow rule for TCP 1521 with the source set to 'Any'.

Why are water-based fire suppression systems generally avoided in areas containing sensitive electronic data infrastructure?

Water can cause extensive damage to electronic equipment.

Water systems require more frequent maintenance.

Water systems are more expensive to install than gas systems.

Water is not effective at extinguishing electrical fires.

CompTIADataSys+

Domain 4Objective 4

Infrastructure Security DS0-001 Practice Questions (Page 1)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

4concepts

23%of the exam

Questions 1–5

1foundation · easy
A network switch has been configured to allow only specific MAC addresses to connect to its ports. What security measure is this?
Select an answer first
2foundation · easy
What is the primary goal of implementing port security on network switches?
Select an answer first
3foundation · easy
What is the primary purpose of a network firewall in a data infrastructure environment?
Select an answer first
4expert · medium
A database administrator is configuring a firewall for a database server that is part of a three-tier application. The web server needs to connect to the database on TCP port 1521 (Oracle). The application server also needs to connect to the database on the same port. The security team wants to ensure that only these two servers can access the database. The firewall has a default-deny policy. Which configuration is correct?
Select an answer first
5foundation · easy
Why are water-based fire suppression systems generally avoided in areas containing sensitive electronic data infrastructure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.