Which security control is specifically designed to detect and block known malware by scanning files and processes on a server?

Data loss prevention (DLP) system

Intrusion prevention system (IPS)

A company wants to prevent employees from sending confidential documents to personal email addresses. The DLP solution is deployed as an email gateway. Which policy is most effective?

Log all outbound emails for later review.

Block outbound emails that contain confidential document patterns and are addressed to personal email domains.

Block all outbound emails to personal domains.

A healthcare organization must prevent patient records from being emailed to personal accounts. The security team is evaluating DLP solutions. Which DLP capability is most directly suited to this requirement?

Content inspection of outbound email for patterns like medical record numbers.

SIEM correlation rules for failed login attempts.

Network traffic analysis to detect unusual data transfer volumes.

Endpoint encryption of all files on user workstations.

What is the primary role of a Security Information and Event Management (SIEM) system?

To encrypt data transmitted over the network

To scan files for malware signatures

To aggregate and analyze security data from multiple sources across the network

To block malicious network traffic in real time

Which type of data is typically collected by a SIEM for security analysis?

Logs from servers, firewalls, and applications

CompTIAServer+

Domain 3Objective 4

Mitigation Strategies SK0-005 Practice Questions (Page 6)

Part of the Security and disaster recovery domain, which accounts for 24% of the SK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

24%of the exam

Questions 26–30

26foundation · easy
Which security control is specifically designed to detect and block known malware by scanning files and processes on a server?
Select an answer first
27application · medium
A company wants to prevent employees from sending confidential documents to personal email addresses. The DLP solution is deployed as an email gateway. Which policy is most effective?
Select an answer first
28application · medium
A healthcare organization must prevent patient records from being emailed to personal accounts. The security team is evaluating DLP solutions. Which DLP capability is most directly suited to this requirement?
Select an answer first
29foundation · easy
What is the primary role of a Security Information and Event Management (SIEM) system?
Select an answer first
30foundation · easy
Which type of data is typically collected by a SIEM for security analysis?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SK0-005” is a trademark of its owner, used for identification only.