A network administrator needs to restrict which users can access a specific file share on the corporate network. Which access control method assigns permissions based on the user's job role rather than on an individual basis?

Attribute-based access control (ABAC)

Role-based access control (RBAC)

Discretionary access control (DAC)

A security appliance monitors network traffic for suspicious patterns and automatically blocks malicious packets. Which type of system is this?

Intrusion prevention system (IPS)

Intrusion detection system (IDS)

A company's SIEM is generating too many alerts, many of which are false positives. The security team is overwhelmed and may miss real threats. They want to improve the signal-to-noise ratio. Which approach is most effective?

Tune the SIEM correlation rules to reduce false positives and prioritize alerts based on risk, while maintaining logging of all events

Increase the number of data sources feeding the SIEM

Disable all alerts and only review logs manually

A company has an IDS that generates a high number of false positives, causing the security team to ignore alerts. They want to reduce false positives while still detecting real threats. They are considering tuning the IDS signatures and implementing a SIEM to correlate events. Which approach is most effective?

Disable the IDS and rely on the firewall to block malicious traffic

Tune the IDS signatures to match the specific network environment and use a SIEM to correlate events from multiple sources to reduce false positives

Increase the sensitivity of the IDS to catch more threats

What is the primary purpose of placing a database server in a separate network segment from the general user network?

To simplify IP address management

To protect sensitive data by limiting access

CompTIANetwork+

Domain 4Objective 1

Logical Security N10-009 Practice Questions (Page 3)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

12concepts

Questions 11–15

11foundation · easy
A network administrator needs to restrict which users can access a specific file share on the corporate network. Which access control method assigns permissions based on the user's job role rather than on an individual basis?
Select an answer first
12foundation · easy
A security appliance monitors network traffic for suspicious patterns and automatically blocks malicious packets. Which type of system is this?
Select an answer first
13expert · hard
A company's SIEM is generating too many alerts, many of which are false positives. The security team is overwhelmed and may miss real threats. They want to improve the signal-to-noise ratio. Which approach is most effective?
Select an answer first
14expert · hard
A company has an IDS that generates a high number of false positives, causing the security team to ignore alerts. They want to reduce false positives while still detecting real threats. They are considering tuning the IDS signatures and implementing a SIEM to correlate events. Which approach is most effective?
Select an answer first
15foundation · easy
What is the primary purpose of placing a database server in a separate network segment from the general user network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.