What is the primary difference between authentication and authorization?

Authentication is used for users, while authorization is used for devices.

Authentication grants access rights, while authorization verifies identity.

Authentication is a one-time process, while authorization is continuous.

Authentication verifies identity, while authorization determines what an authenticated user can do.

A financial services company has implemented a strong perimeter firewall, an IDS, and full-disk encryption on all laptops. However, a recent phishing attack successfully compromised a user's credentials, and the attacker accessed sensitive client data. Which of the following additions would BEST strengthen the company's security posture by addressing the weakness that allowed this attack to succeed?

Increase the frequency of full backups

Upgrade the IDS to a newer model

Implement multi-factor authentication (MFA) for all user accounts

Deploy a second firewall in series with the existing one

A system administrator is configuring a backup solution for a database that contains financial records. The administrator wants to ensure that the backup files cannot be modified by an attacker who gains access to the backup storage. Which control is BEST suited to protect the integrity of the backup files?

Encrypting the backup files with a strong algorithm

Scheduling backups to run during off-peak hours

Write-once, read-many (WORM) storage

Storing the backups on a separate network segment

CompTIANetwork+

Domain 4Objective 4

Security Terminology N10-009 Practice Questions (Page 3)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

12concepts

Questions 11–15

11foundation · easy
What is the primary difference between authentication and authorization?
Select an answer first
12foundation · easy
An unpatched web server has a known software flaw that could allow an attacker to gain unauthorized access. In security terminology, what is this flaw called?
Select an answer first
13expert · hard
A financial services company has implemented a strong perimeter firewall, an IDS, and full-disk encryption on all laptops. However, a recent phishing attack successfully compromised a user's credentials, and the attacker accessed sensitive client data. Which of the following additions would BEST strengthen the company's security posture by addressing the weakness that allowed this attack to succeed?
Select an answer first
14application · medium
A system administrator is configuring a backup solution for a database that contains financial records. The administrator wants to ensure that the backup files cannot be modified by an attacker who gains access to the backup storage. Which control is BEST suited to protect the integrity of the backup files?
Select an answer first
15foundation · easy
Which term describes strategies used to reduce the severity or likelihood of a security threat?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Security Terminology N10-009 Practice Questions (Page 3)

Questions 11–15

What is the primary difference between authentication and authorization?

An unpatched web server has a known software flaw that could allow an attacker to gain unauthorized access. In security terminology, what is this flaw called?

Which term describes strategies used to reduce the severity or likelihood of a security threat?

Keep studying — Network security