Which type of data is a DLP system most likely designed to protect from unauthorized transfer?

Sensitive information such as credit card numbers and personal health records

Publicly available marketing brochures

Operating system installation files

A DLP administrator is implementing a policy to prevent sensitive customer data from being copied to USB drives. The DLP solution includes endpoint agents. Which policy setting is most appropriate?

Disable the USB ports on all servers.

Log all USB device connections.

Block write operations to removable storage devices when the content matches sensitive data patterns.

Encrypt all files on the USB drives.

During an incident investigation, a security analyst needs to reconstruct the timeline of an attack that occurred over the past week. Which SIEM capability is most useful for this task?

Generating compliance reports for management.

Real-time alerting on new suspicious activity.

Configuring a new correlation rule for future attacks.

Searching historical logs and correlating events by timestamp and source IP.

Which configuration step is essential for a SIEM to effectively monitor security events?

Using the same log source for all devices

Disabling all alerts to reduce noise

Integrating log sources from relevant systems

CompTIAServer+

Domain 3Objective 4

Mitigation Strategies SK0-005 Practice Questions (Page 2)

Part of the Security and disaster recovery domain, which accounts for 24% of the SK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

24%of the exam

Questions 6–10

6foundation · easy
Which type of data is a DLP system most likely designed to protect from unauthorized transfer?
Select an answer first
7application · medium
A DLP administrator is implementing a policy to prevent sensitive customer data from being copied to USB drives. The DLP solution includes endpoint agents. Which policy setting is most appropriate?
Select an answer first
8application · medium
During an incident investigation, a security analyst needs to reconstruct the timeline of an attack that occurred over the past week. Which SIEM capability is most useful for this task?
Select an answer first
9foundation · easy
Which configuration step is essential for a SIEM to effectively monitor security events?
Select an answer first
10foundation · easy
A server administrator discovers a file that, when executed, replicates itself by attaching copies to other executable files on the same system. Which type of malware is this an example of?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SK0-005” is a trademark of its owner, used for identification only.