A risk assessment identifies that a legacy application on the internal network cannot be patched because the vendor no longer provides updates. The application processes sensitive financial data and is critical to operations. Which remediation approach BEST manages this risk?

Document the risk and take no further action

Isolate the legacy application with strict firewall rules and monitor its traffic

Disconnect the application from the network immediately

Apply vendor patches from a similar newer application version

Which technology is commonly used to support continuous monitoring?

A paper-based incident response plan

Security Information and Event Management (SIEM) systems

A firewall rule review checklist

A spreadsheet of network devices

A network administrator is conducting an internal audit and discovers that several switches have default SNMP community strings enabled. The administrator documents this finding and wants to ensure it is properly addressed. What is the NEXT step in the audit process?

Add the finding to the audit report with a risk rating and remediation recommendation

Disable SNMP entirely on all switches to eliminate the risk

Schedule a follow-up audit to check for the issue later

Immediately change the SNMP community strings on all affected switches

In risk assessment, what does the term 'likelihood' refer to?

The probability that a threat will exploit a vulnerability

The number of vulnerabilities in a system

The potential impact of a security breach

The cost of implementing security controls

CompTIANetwork+

Domain 4Objective 5

Audits and Compliance N10-009 Practice Questions (Page 1)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

Questions 1–5

1expert · hard
A risk assessment identifies that a legacy application on the internal network cannot be patched because the vendor no longer provides updates. The application processes sensitive financial data and is critical to operations. Which remediation approach BEST manages this risk?
Select an answer first
2foundation · easy
Which technology is commonly used to support continuous monitoring?
Select an answer first
3application · medium
A network administrator is conducting an internal audit and discovers that several switches have default SNMP community strings enabled. The administrator documents this finding and wants to ensure it is properly addressed. What is the NEXT step in the audit process?
Select an answer first
4foundation · easy
Which compliance standard is specifically designed to protect cardholder data in the payment card industry?
Select an answer first
5foundation · easy
In risk assessment, what does the term 'likelihood' refer to?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.