A university IT department manages accounts for faculty, staff, and students. A professor needs access to student records for advising, but should not be able to modify grades. A graduate assistant needs to enter grades but should not view student contact information. The department is implementing a new access control system. Which approach BEST satisfies the principle of least privilege while maintaining operational efficiency?

Create role-based access control (RBAC) roles for 'Advisor' and 'Grade Entry' and assign users to the appropriate role

Give all faculty and staff the same level of access to simplify management

Use an access control list (ACL) on each resource to define permissions for each user

Grant each user individual permissions based on their specific requests

A law firm sends settlement offers to opposing counsel via email. A partner is concerned that a recipient could claim the firm never sent a particular offer, or that the email was altered in transit. The firm already uses TLS for email transport. Which additional control directly addresses the partner's concern?

Send the emails through a VPN tunnel

Digitally sign the emails with the firm's certificate

Encrypt the emails with the recipient's public key

Require the recipient to acknowledge receipt by reply

CompTIANetwork+

Domain 4Objective 4

Security Terminology N10-009 Practice Questions (Page 5)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

12concepts

Questions 21–25

21foundation · easy
A hacker plans to exploit a known vulnerability in a company's firewall to gain unauthorized access. In security terminology, what is the hacker considered?
Select an answer first
22expert · hard
A university IT department manages accounts for faculty, staff, and students. A professor needs access to student records for advising, but should not be able to modify grades. A graduate assistant needs to enter grades but should not view student contact information. The department is implementing a new access control system. Which approach BEST satisfies the principle of least privilege while maintaining operational efficiency?
Select an answer first
23application · medium
A law firm sends settlement offers to opposing counsel via email. A partner is concerned that a recipient could claim the firm never sent a particular offer, or that the email was altered in transit. The firm already uses TLS for email transport. Which additional control directly addresses the partner's concern?
Select an answer first
24foundation · easy
Which process involves identifying, assessing, and prioritizing risks to minimize their impact on an organization?
Select an answer first
25foundation · easy
Which security principle states that users should be granted the minimum level of access necessary to perform their job functions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Security Terminology N10-009 Practice Questions (Page 5)

Questions 21–25

A hacker plans to exploit a known vulnerability in a company's firewall to gain unauthorized access. In security terminology, what is the hacker considered?

Which process involves identifying, assessing, and prioritizing risks to minimize their impact on an organization?

Which security principle states that users should be granted the minimum level of access necessary to perform their job functions?

Keep studying — Network security