A company's database has been targeted by brute-force attacks on user accounts. The security team wants to implement a control that will directly slow down or stop automated password guessing. Which measure is MOST effective?

Strong password complexity requirements

Account lockout policy after a certain number of failed attempts

Which additional authentication factor would most effectively reduce the risk of a successful brute-force attack on a database?

Multi-factor authentication (MFA)

A longer password expiration period

A development team is rewriting a legacy application that builds SQL queries by concatenating user input. The team wants to eliminate SQL injection vulnerabilities while minimizing code changes. Which approach should they use?

Stored procedures without parameters

Encrypting the database connection

A database server is experiencing intermittent denial of service attacks that overwhelm the connection pool. The administrator wants to reduce the impact while maintaining availability for legitimate users. Which mitigation strategy is MOST effective?

Implement connection rate limiting and increase connection pool size

Increase the database server's memory

Disable the database's public IP address

CompTIADataSys+

Domain 4Objective 5

Threat Mitigation DS0-001 Practice Questions (Page 3)

Part of the Data and database security domain, which accounts for 23% of the DS0-001 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

10concepts

23%of the exam

Questions 11–15

11application · medium
A company's database has been targeted by brute-force attacks on user accounts. The security team wants to implement a control that will directly slow down or stop automated password guessing. Which measure is MOST effective?
Select an answer first
12foundation · easy
Which additional authentication factor would most effectively reduce the risk of a successful brute-force attack on a database?
Select an answer first
13foundation · easy
A database administrator notices thousands of failed login attempts for the 'sa' account within a short time period, each with a different password. Which type of attack is this?
Select an answer first
14application · medium
A development team is rewriting a legacy application that builds SQL queries by concatenating user input. The team wants to eliminate SQL injection vulnerabilities while minimizing code changes. Which approach should they use?
Select an answer first
15application · medium
A database server is experiencing intermittent denial of service attacks that overwhelm the connection pool. The administrator wants to reduce the impact while maintaining availability for legitimate users. Which mitigation strategy is MOST effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DS0-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “DS0-001” is a trademark of its owner, used for identification only.