A company is required to provide evidence of who accessed a sensitive file server and when, for a compliance audit. Which control should be implemented to meet this requirement?

Implement a firewall that restricts access to the file server to specific IP addresses

Deploy an IDS to monitor network traffic to the file server

Use a NAC solution to ensure only compliant devices can access the network

Enable detailed auditing on the file server to log successful and failed access attempts, and forward those logs to a SIEM for retention

A user in the marketing department needs to access a shared project folder, but should not be able to modify files in the finance department's folder. Which authorization model should be used to grant the user the appropriate permissions?

Assign the user to a 'Marketing' group that has read/write access to the project folder and read-only access to the finance folder

Grant the user full control over all shared folders

Use a MAC model with security labels that classify all folders as 'confidential'

Create a firewall rule that allows the user's IP address to access the file server

Which access control model allows the owner of a resource to determine who can access it and what level of access they receive?

Attribute-based access control (ABAC)

Discretionary access control (DAC)

Role-based access control (RBAC)

CompTIANetwork+

Domain 4Objective 1

Logical Security N10-009 Practice Questions (Page 7)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

12concepts

Questions 31–35

31foundation · easy
A company wants to ensure that only devices with up-to-date antivirus software can connect to the corporate network. Which solution can enforce this policy?
Select an answer first
32application · medium
A company is required to provide evidence of who accessed a sensitive file server and when, for a compliance audit. Which control should be implemented to meet this requirement?
Select an answer first
33application · medium
A user in the marketing department needs to access a shared project folder, but should not be able to modify files in the finance department's folder. Which authorization model should be used to grant the user the appropriate permissions?
Select an answer first
34foundation · easy
Which access control model allows the owner of a resource to determine who can access it and what level of access they receive?
Select an answer first
35foundation · easy
A network administrator needs to block all inbound traffic on port 23 (Telnet) while allowing other traffic. Which device can enforce this rule?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Logical Security N10-009 Practice Questions (Page 7)

Questions 31–35

A company wants to ensure that only devices with up-to-date antivirus software can connect to the corporate network. Which solution can enforce this policy?

A company is required to provide evidence of who accessed a sensitive file server and when, for a compliance audit. Which control should be implemented to meet this requirement?

A user in the marketing department needs to access a shared project folder, but should not be able to modify files in the finance department's folder. Which authorization model should be used to grant the user the appropriate permissions?

Which access control model allows the owner of a resource to determine who can access it and what level of access they receive?

A network administrator needs to block all inbound traffic on port 23 (Telnet) while allowing other traffic. Which device can enforce this rule?

Keep studying — Network security