A company's network is vulnerable to a known exploit in its email server software. The administrator cannot apply the vendor's patch immediately because it would disrupt a critical business application. Which of the following is the most effective mitigation strategy to reduce the risk while the patch is being scheduled?

Change all user passwords to a longer, more complex value

Increase the logging level on the email server

Implement an intrusion prevention system (IPS) rule to block traffic matching the exploit signature

Disable the email server until the patch is applied

A security analyst is reviewing a vulnerability scan report. The report lists a missing security patch on a web server, a weak password policy, and an open FTP port. Which of the following BEST describes these findings?

They are mitigations that reduce the likelihood of an attack

They are vulnerabilities that could be exploited by threats

They are risks that have already been exploited

They are threats that could exploit weaknesses in the system

CompTIANetwork+

Domain 4Objective 4

Security Terminology N10-009 Practice Questions (Page 1)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

12concepts

Questions 1–5

1application · medium
A company's network is vulnerable to a known exploit in its email server software. The administrator cannot apply the vendor's patch immediately because it would disrupt a critical business application. Which of the following is the most effective mitigation strategy to reduce the risk while the patch is being scheduled?
Select an answer first
2foundation · easy
Which security goal ensures that a party cannot deny the authenticity of their signature on a document or a message they sent?
Select an answer first
3foundation · easy
After a user successfully logs in, the system checks whether the user has permission to access a specific file. Which security process is the system performing?
Select an answer first
4foundation · easy
Which security goal is primarily concerned with ensuring that systems and data are accessible to authorized users when needed?
Select an answer first
5application · medium
A security analyst is reviewing a vulnerability scan report. The report lists a missing security patch on a web server, a weak password policy, and an open FTP port. Which of the following BEST describes these findings?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Security Terminology N10-009 Practice Questions (Page 1)

Questions 1–5

Which security goal ensures that a party cannot deny the authenticity of their signature on a document or a message they sent?

After a user successfully logs in, the system checks whether the user has permission to access a specific file. Which security process is the system performing?

Which security goal is primarily concerned with ensuring that systems and data are accessible to authorized users when needed?

A security analyst is reviewing a vulnerability scan report. The report lists a missing security patch on a web server, a weak password policy, and an open FTP port. Which of the following BEST describes these findings?

Keep studying — Network security