A project team is implementing a new system that processes customer orders. Which operational security practice is most important to ensure that only authorized employees can perform order processing tasks?

Using a surge protector for the servers

Installing a firewall to protect the network perimeter

Implementing the principle of least privilege for user accounts

Encrypting data in transit between the system and customers

A project manager is implementing security practices for a remote team that uses personal devices to access the company's project management system. The team frequently shares files and collaborates on documents. Which operational security practice is most effective in reducing the risk of unauthorized access if a device is lost or stolen?

Schedule regular antivirus scans on all personal devices.

Implement a policy that requires changing passwords every 90 days.

Require multi-factor authentication (MFA) for all access to the system.

Provide a virtual private network (VPN) for each team member.

A project team is deploying a new internal application. The security policy requires that only authorized personnel can access the application, and that all access attempts are recorded. Which approach should the project manager implement?

Deploy an intrusion prevention system (IPS) and a firewall.

Encrypt all data stored by the application and use TLS for connections.

Implement role-based access control (RBAC) and enable audit logging.

Use a strong password policy and require periodic password changes.

Which of the following is an operational security procedure that helps ensure that an organization's processes continue to function during an unexpected disruption?

Implementing a firewall to block unauthorized network traffic

Developing and testing a business continuity plan

Using strong passwords for all user accounts

Installing antivirus software on all workstations

A project manager is working with a team that stores sensitive files in a shared cloud drive. The team often shares links with external partners. What is the most effective way to protect the data while still allowing collaboration?

Use a shared generic account for all external partners.

Set link expiration dates and require a password for shared links.

Encrypt the files before uploading and share the encryption key via email.

Disable all external sharing and use a VPN for remote access.

CompTIAProject+

Domain 4Objective 2

Information Security PK0-005 Practice Questions (Page 3)

Part of the Basics of IT and governance domain, which accounts for 18% of the PK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

4concepts

18%of the exam

Questions 11–15

11foundation · easy
A project team is implementing a new system that processes customer orders. Which operational security practice is most important to ensure that only authorized employees can perform order processing tasks?
Select an answer first
12application · medium
A project manager is implementing security practices for a remote team that uses personal devices to access the company's project management system. The team frequently shares files and collaborates on documents. Which operational security practice is most effective in reducing the risk of unauthorized access if a device is lost or stolen?
Select an answer first
13application · medium
A project team is deploying a new internal application. The security policy requires that only authorized personnel can access the application, and that all access attempts are recorded. Which approach should the project manager implement?
Select an answer first
14foundation · easy
Which of the following is an operational security procedure that helps ensure that an organization's processes continue to function during an unexpected disruption?
Select an answer first
15application · medium
A project manager is working with a team that stores sensitive files in a shared cloud drive. The team often shares links with external partners. What is the most effective way to protect the data while still allowing collaboration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PK0-005” is a trademark of its owner, used for identification only.