A project team is deploying a new web application that will be accessible over the internet. The security team requires that all traffic be encrypted and that the application be protected from common web attacks. Which set of controls is most appropriate?

Use TLS for all connections and deploy a web application firewall (WAF).

Implement strong password policies and account lockout.

Use a VPN for all users and disable public access.

Perform regular vulnerability scans and patch the application.

A project manager is responsible for a system that stores personal data of EU citizens. The system is hosted in a public cloud. The legal team requires that data be protected against unauthorized access and that the organization can demonstrate compliance with data protection regulations. Which combination of controls is most appropriate?

Implement a data retention policy and delete data after 30 days.

Store all data in an on-premises data center and disable remote access.

Encrypt data at rest and in transit, and enable detailed audit logging.

Use a private cloud with dedicated hardware and no internet connectivity.

A project manager is implementing a security awareness program for a team that handles sensitive customer information. The goal is to reduce the risk of social engineering attacks. Which practice is most effective?

Deploy an email spam filter and antivirus software.

Implement a strong password policy and require MFA.

Conduct regular phishing simulation exercises and provide targeted training.

Restrict access to customer data to a small group of people.

A project team is migrating sensitive customer data to a new cloud storage service. The compliance team requires that data be protected from unauthorized access and that the organization can verify who accessed the data. Which combination of controls should the project manager implement?

Apply data classification labels and train users on handling procedures.

Implement a data retention policy and schedule regular backups.

Use a VPN for all administrative access and disable public sharing.

Enable encryption and enable detailed audit logging.

CompTIAProject+

Domain 4Objective 2

Information Security PK0-005 Practice Questions (Page 4)

Part of the Basics of IT and governance domain, which accounts for 18% of the PK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

4concepts

18%of the exam

Questions 16–20

16application · medium
A project team is deploying a new web application that will be accessible over the internet. The security team requires that all traffic be encrypted and that the application be protected from common web attacks. Which set of controls is most appropriate?
Select an answer first
17expert · hard
A project manager is responsible for a system that stores personal data of EU citizens. The system is hosted in a public cloud. The legal team requires that data be protected against unauthorized access and that the organization can demonstrate compliance with data protection regulations. Which combination of controls is most appropriate?
Select an answer first
18application · medium
A project manager is implementing a security awareness program for a team that handles sensitive customer information. The goal is to reduce the risk of social engineering attacks. Which practice is most effective?
Select an answer first
19application · medium
A project team is migrating sensitive customer data to a new cloud storage service. The compliance team requires that data be protected from unauthorized access and that the organization can verify who accessed the data. Which combination of controls should the project manager implement?
Select an answer first
20foundation · easy
Which data security control is primarily used to ensure the integrity of data by detecting unauthorized modifications?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “PK0-005” is a trademark of its owner, used for identification only.

Information Security PK0-005 Practice Questions (Page 4)

Questions 16–20

A project team is deploying a new web application that will be accessible over the internet. The security team requires that all traffic be encrypted and that the application be protected from common web attacks. Which set of controls is most appropriate?

A project manager is implementing a security awareness program for a team that handles sensitive customer information. The goal is to reduce the risk of social engineering attacks. Which practice is most effective?

A project team is migrating sensitive customer data to a new cloud storage service. The compliance team requires that data be protected from unauthorized access and that the organization can verify who accessed the data. Which combination of controls should the project manager implement?

Which data security control is primarily used to ensure the integrity of data by detecting unauthorized modifications?

Keep studying — Basics of IT and governance