A security analyst needs to monitor network traffic for suspicious patterns and generate alerts when potential intrusions are detected, but the system must not block any traffic. Which type of system should be deployed?

Intrusion prevention system (IPS)

Intrusion detection system (IDS)

A financial institution has a security operations center (SOC) that monitors network traffic for suspicious activity. The SOC team wants to receive alerts for potential intrusions but is concerned about false positives overwhelming the team. They also want to ensure that legitimate business traffic is not disrupted. Which approach best balances these concerns?

Deploy a firewall with logging enabled

Deploy an IPS in inline mode with a strict rule set

Deploy an IDS in passive mode and tune the signatures

Deploy an IPS in inline mode with a permissive rule set

Which physical security measure is used to control access to a server room by requiring a valid credential, such as a badge or PIN?

Electronic access control system

A company is developing a security policy for remote work. The policy must balance employee privacy with the need to protect corporate data. The legal team has advised that the policy must be enforceable and clearly communicated. Which element is most critical to include in the policy?

A detailed description of firewall rules

A requirement for employees to sign a non-disclosure agreement

A clear statement that company devices are subject to monitoring

CompTIANetwork+

Domain 4Objective 8

Security Features and Defense N10-009 Practice Questions (Page 7)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

11concepts

Questions 31–35

31foundation · easy
A security analyst needs to monitor network traffic for suspicious patterns and generate alerts when potential intrusions are detected, but the system must not block any traffic. Which type of system should be deployed?
Select an answer first
32foundation · easy
An attacker sends an email that appears to be from a legitimate bank, asking the recipient to click a link and verify their account information. Which social engineering tactic is being used?
Select an answer first
33expert · hard
A financial institution has a security operations center (SOC) that monitors network traffic for suspicious activity. The SOC team wants to receive alerts for potential intrusions but is concerned about false positives overwhelming the team. They also want to ensure that legitimate business traffic is not disrupted. Which approach best balances these concerns?
Select an answer first
34foundation · easy
Which physical security measure is used to control access to a server room by requiring a valid credential, such as a badge or PIN?
Select an answer first
35expert · hard
A company is developing a security policy for remote work. The policy must balance employee privacy with the need to protect corporate data. The legal team has advised that the policy must be enforceable and clearly communicated. Which element is most critical to include in the policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Security Features and Defense N10-009 Practice Questions (Page 7)

Questions 31–35

A security analyst needs to monitor network traffic for suspicious patterns and generate alerts when potential intrusions are detected, but the system must not block any traffic. Which type of system should be deployed?

An attacker sends an email that appears to be from a legitimate bank, asking the recipient to click a link and verify their account information. Which social engineering tactic is being used?

Which physical security measure is used to control access to a server room by requiring a valid credential, such as a badge or PIN?

A company is developing a security policy for remote work. The policy must balance employee privacy with the need to protect corporate data. The legal team has advised that the policy must be enforceable and clearly communicated. Which element is most critical to include in the policy?

Keep studying — Network security