Which activity is a typical part of the network audit process?

Installing new antivirus software on all endpoints

Reviewing firewall rules and access control lists against security policies

Configuring a new VPN for remote employees

Designing a new network topology for future expansion

A company's annual audit found no critical vulnerabilities, but the security team wants to improve its security posture beyond the minimum compliance requirements. Management is concerned about the cost of additional security measures. Which approach BEST justifies additional security investments?

Rely on the audit's compliance status as proof of adequate security

Wait for a security incident to justify the need for improvements

Implement every recommended security control from the audit

Conduct a risk assessment that quantifies potential financial losses from security incidents

During a network audit, a risk assessment reveals that the guest Wi-Fi network shares the same VLAN as the internal corporate network. An attacker on the guest network could potentially reach internal file servers. Which remediation should be prioritized FIRST in the remediation plan?

Increase the password complexity policy for all users

Implement VLAN segmentation to isolate guest traffic

Deploy additional intrusion detection sensors

Schedule a full backup of all file servers

Which element is typically included in a remediation plan?

A timeline for completing each remediation action

A list of all employees' salaries

A detailed history of the company's founding

A marketing strategy for the company

What is the purpose of continuous monitoring in maintaining compliance?

To replace the need for periodic audits

To detect and respond to security issues in real time

To reduce the need for security policies

To eliminate all security risks

CompTIANetwork+

Domain 4Objective 5

Audits and Compliance N10-009 Practice Questions (Page 4)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

Questions 16–20

16foundation · easy
Which activity is a typical part of the network audit process?
Select an answer first
17expert · hard
A company's annual audit found no critical vulnerabilities, but the security team wants to improve its security posture beyond the minimum compliance requirements. Management is concerned about the cost of additional security measures. Which approach BEST justifies additional security investments?
Select an answer first
18application · medium
During a network audit, a risk assessment reveals that the guest Wi-Fi network shares the same VLAN as the internal corporate network. An attacker on the guest network could potentially reach internal file servers. Which remediation should be prioritized FIRST in the remediation plan?
Select an answer first
19foundation · easy
Which element is typically included in a remediation plan?
Select an answer first
20foundation · easy
What is the purpose of continuous monitoring in maintaining compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.