CompTIA Security+ SY0-701 Security Hardening Practice Test

 

Topic 14 focuses on Security Hardening of Computing Resources for the CompTIA Security+ certification and the SY0-701 exam, using practical cybersecurity scenarios aligned to the published Security+ objectives. For broader exam preparation, review the CompTIA Security+ SY0-701 Exam Dumps page. Each question includes a concise explanation of the correct answer and the technical reason the other choices are incorrect.

Question 1

Which approved minimum configuration establishes required security settings for a class of systems?

1. Secure baseline
2. Secure cookie
3. Code signing
4. ICS/SCADA hardening

Correct Answer: A

 

Correct Answer

Answer A is correct because Secure baseline means an approved minimum configuration that establishes required security settings for a class of systems.

Incorrect Answers

Answer B is incorrect because Secure cookie would fit a different scenario. Secure cookie refers to a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.

Answer C is incorrect because Code signing addresses a different requirement. Code signing refers to digital signing of software to verify publisher identity and detect modification.

Answer D is incorrect because ICS/SCADA hardening represents a different security function. ICS/SCADA hardening refers to security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

 

Question 2

To reduce compromise risk on portable endpoints, which security approach should be selected?

1. Wireless site survey
2. Mobile-device hardening
3. Wireless heat map
4. Cloud-infrastructure hardening

Correct Answer: B

 

Correct Answer

Answer B is correct because Mobile-device hardening means security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy.

Incorrect Answers

Answer A is incorrect because Wireless site survey addresses a different requirement. Wireless site survey refers to assessment of radio coverage, interference, channel use, and access-point placement.

Answer C is incorrect because Wireless heat map would fit a different scenario. Wireless heat map refers to a visual representation of wireless signal strength or coverage across a physical area.

Answer D is incorrect because Cloud-infrastructure hardening addresses a different security requirement. Cloud-infrastructure hardening refers to application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.

 

Question 3

Which term describes secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services?

1. Wireless heat map
2. CYOD
3. Secure baseline
4. Workstation hardening

Correct Answer: D

 

Correct Answer

Answer D is correct because Workstation hardening means secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services.

Incorrect Answers

Answer A is incorrect because Wireless heat map represents a different security function. Wireless heat map refers to a visual representation of wireless signal strength or coverage across a physical area.

Answer B is incorrect because CYOD would fit a different scenario. CYOD refers to a deployment model in which users choose from a list of organization-approved devices.

Answer C is incorrect because Secure baseline addresses a different requirement. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

 

Question 4

To protect control-plane and administrative functions on routers, which security approach should be selected?

1. COPE
2. Secure cookie
3. Router hardening
4. Secure baseline

Correct Answer: C

 

Correct Answer

Answer C is correct because Router hardening means secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

Incorrect Answers

Answer A is incorrect because COPE addresses a different requirement. COPE refers to a deployment model in which the organization owns devices but permits limited personal use.

Answer B is incorrect because Secure cookie would fit a different scenario. Secure cookie refers to a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.

Answer D is incorrect because Secure baseline addresses a different security requirement. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

 

Question 5

Which term describes application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources?

1. Cloud-infrastructure hardening
2. ICS/SCADA hardening
3. Router hardening
4. IoT hardening

Correct Answer: A

 

Correct Answer

Answer A is correct because Cloud-infrastructure hardening means application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.

Incorrect Answers

Answer B is incorrect because ICS/SCADA hardening represents a different security function. ICS/SCADA hardening refers to security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

Answer C is incorrect because Router hardening would fit a different scenario. Router hardening refers to secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

Answer D is incorrect because IoT hardening addresses a different requirement. IoT hardening refers to security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction.

 

Question 6

To reduce attack surface on high-value service hosts, which security approach should be selected?

1. Router hardening
2. CYOD
3. Server hardening
4. Secure baseline

Correct Answer: C

 

Correct Answer

Answer C is correct because Server hardening means secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software.

Incorrect Answers

Answer A is incorrect because Router hardening addresses a different requirement. Router hardening refers to secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

Answer B is incorrect because CYOD addresses a different security requirement. CYOD refers to a deployment model in which users choose from a list of organization-approved devices.

Answer D is incorrect because Secure baseline would fit a different scenario. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

 

Question 7

Which term describes security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability?

1. Wireless heat map
2. Server hardening
3. IoT hardening
4. ICS/SCADA hardening

Correct Answer: D

 

Correct Answer

Answer D is correct because ICS/SCADA hardening means security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

Incorrect Answers

Answer A is incorrect because Wireless heat map addresses a different requirement. Wireless heat map refers to a visual representation of wireless signal strength or coverage across a physical area.

Answer B is incorrect because Server hardening would fit a different scenario. Server hardening refers to secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software.

Answer C is incorrect because IoT hardening represents a different security function. IoT hardening refers to security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction.

 

Question 8

To manage devices with constrained interfaces and inconsistent patching support, which security approach should be selected?

1. IoT hardening
2. Wireless site survey
3. Secure baseline
4. Input validation

Correct Answer: A

 

Correct Answer

Answer A is correct because IoT hardening means security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction.

Incorrect Answers

Answer B is incorrect because Wireless site survey addresses a different requirement. Wireless site survey refers to assessment of radio coverage, interference, channel use, and access-point placement.

Answer C is incorrect because Secure baseline addresses a different security requirement. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

Answer D is incorrect because Input validation would fit a different scenario. Input validation refers to checking and constraining application input before it is used.

 

Question 9

Which term describes assessment of radio coverage, interference, channel use, and access-point placement?

1. Static code analysis
2. Code signing
3. Wireless site survey
4. Server hardening

Correct Answer: C

 

Correct Answer

Answer C is correct because Wireless site survey means assessment of radio coverage, interference, channel use, and access-point placement.

Incorrect Answers

Answer A is incorrect because Static code analysis represents a different security function. Static code analysis refers to analysis of source code or binaries without executing the application.

Answer B is incorrect because Code signing would fit a different scenario. Code signing refers to digital signing of software to verify publisher identity and detect modification.

Answer D is incorrect because Server hardening addresses a different requirement. Server hardening refers to secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software.

 

Question 10

To identify weak, excessive, or overlapping coverage zones, which security approach should be selected?

1. Static code analysis
2. ICS/SCADA hardening
3. WPA3
4. Wireless heat map

Correct Answer: D

 

Correct Answer

Answer D is correct because Wireless heat map means a visual representation of wireless signal strength or coverage across a physical area.

Incorrect Answers

Answer A is incorrect because Static code analysis addresses a different security requirement. Static code analysis refers to analysis of source code or binaries without executing the application.

Answer B is incorrect because ICS/SCADA hardening addresses a different requirement. ICS/SCADA hardening refers to security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

Answer C is incorrect because WPA3 would fit a different scenario. WPA3 refers to a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

 

Question 11

Which term describes centralized administration of mobile-device configuration, applications, compliance, and remote actions?

1. Server hardening
2. Cloud-infrastructure hardening
3. Mobile device management (MDM)
4. IoT hardening

Correct Answer: C

 

Correct Answer

Answer C is correct because Mobile device management (MDM) means centralized administration of mobile-device configuration, applications, compliance, and remote actions.

Incorrect Answers

Answer A is incorrect because Server hardening would fit a different scenario. Server hardening refers to secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software.

Answer B is incorrect because Cloud-infrastructure hardening represents a different security function. Cloud-infrastructure hardening refers to application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.

Answer D is incorrect because IoT hardening addresses a different requirement. IoT hardening refers to security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction.

 

Question 12

To support user-owned devices while applying policy and data protection controls, which security approach should be selected?

1. Input validation
2. Wireless site survey
3. ICS/SCADA hardening
4. BYOD

Correct Answer: D

 

Correct Answer

Answer D is correct because BYOD means a deployment model in which users connect personally owned devices to organizational resources.

Incorrect Answers

Answer A is incorrect because Input validation addresses a different security requirement. Input validation refers to checking and constraining application input before it is used.

Answer B is incorrect because Wireless site survey would fit a different scenario. Wireless site survey refers to assessment of radio coverage, interference, channel use, and access-point placement.

Answer C is incorrect because ICS/SCADA hardening addresses a different requirement. ICS/SCADA hardening refers to security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

 

Question 13

What is a deployment model in which the organization owns devices but permits limited personal use?

1. Secure baseline
2. Cloud-infrastructure hardening
3. COPE
4. WPA3

Correct Answer: C

 

Correct Answer

Answer C is correct because COPE means a deployment model in which the organization owns devices but permits limited personal use.

Incorrect Answers

Answer A is incorrect because Secure baseline addresses a different requirement. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

Answer B is incorrect because Cloud-infrastructure hardening would fit a different scenario. Cloud-infrastructure hardening refers to application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.

Answer D is incorrect because WPA3 represents a different security function. WPA3 refers to a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

 

Question 14

To balance user choice with supportability and security standardization, which security approach should be selected?

1. Mobile device management (MDM)
2. Input validation
3. Router hardening
4. CYOD

Correct Answer: D

 

Correct Answer

Answer D is correct because CYOD means a deployment model in which users choose from a list of organization-approved devices.

Incorrect Answers

Answer A is incorrect because Mobile device management (MDM) addresses a different security requirement. Mobile device management (MDM) refers to centralized administration of mobile-device configuration, applications, compliance, and remote actions.

Answer B is incorrect because Input validation would fit a different scenario. Input validation refers to checking and constraining application input before it is used.

Answer C is incorrect because Router hardening addresses a different requirement. Router hardening refers to secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

 

Question 15

What is a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections?

1. Secure cookie
2. Mobile-device hardening
3. WPA3
4. Secure baseline

Correct Answer: C

 

Correct Answer

Answer C is correct because WPA3 means a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

Incorrect Answers

Answer A is incorrect because Secure cookie addresses a different requirement. Secure cookie refers to a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.

Answer B is incorrect because Mobile-device hardening represents a different security function. Mobile-device hardening refers to security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy.

Answer D is incorrect because Secure baseline would fit a different scenario. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

 

Question 16

To authenticate users or devices for wired or wireless access through a central service, which security approach should be selected?

1. Code signing
2. RADIUS
3. Sandboxing
4. Cloud-infrastructure hardening

Correct Answer: B

 

Correct Answer

Answer B is correct because RADIUS means a centralized AAA protocol commonly used for enterprise network access authentication.

Incorrect Answers

Answer A is incorrect because Code signing addresses a different security requirement. Code signing refers to digital signing of software to verify publisher identity and detect modification.

Answer C is incorrect because Sandboxing addresses a different requirement. Sandboxing refers to execution of untrusted or risky code in an isolated restricted environment.

Answer D is incorrect because Cloud-infrastructure hardening would fit a different scenario. Cloud-infrastructure hardening refers to application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.

 

Question 17

Which term describes checking and constraining application input before it is used?

1. Sandboxing
2. Wireless site survey
3. Input validation
4. Secure cookie

Correct Answer: C

 

Correct Answer

Answer C is correct because Input validation means checking and constraining application input before it is used.

Incorrect Answers

Answer A is incorrect because Sandboxing represents a different security function. Sandboxing refers to execution of untrusted or risky code in an isolated restricted environment.

Answer B is incorrect because Wireless site survey would fit a different scenario. Wireless site survey refers to assessment of radio coverage, interference, channel use, and access-point placement.

Answer D is incorrect because Secure cookie addresses a different requirement. Secure cookie refers to a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.

 

Question 18

To reduce theft or misuse of session-related browser data, which security approach should be selected?

1. WPA3
2. Secure cookie
3. Wireless site survey
4. BYOD

Correct Answer: B

 

Correct Answer

Answer B is correct because Secure cookie means a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.

Incorrect Answers

Answer A is incorrect because WPA3 addresses a different requirement. WPA3 refers to a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

Answer C is incorrect because Wireless site survey would fit a different scenario. Wireless site survey refers to assessment of radio coverage, interference, channel use, and access-point placement.

Answer D is incorrect because BYOD addresses a different security requirement. BYOD refers to a deployment model in which users connect personally owned devices to organizational resources.

 

Question 19

Which term describes analysis of source code or binaries without executing the application?

1. Static code analysis
2. Sandboxing
3. BYOD
4. COPE

Correct Answer: A

 

Correct Answer

Answer A is correct because Static code analysis means analysis of source code or binaries without executing the application.

Incorrect Answers

Answer B is incorrect because Sandboxing addresses a different requirement. Sandboxing refers to execution of untrusted or risky code in an isolated restricted environment.

Answer C is incorrect because BYOD would fit a different scenario. BYOD refers to a deployment model in which users connect personally owned devices to organizational resources.

Answer D is incorrect because COPE represents a different security function. COPE refers to a deployment model in which the organization owns devices but permits limited personal use.

 

Question 20

To help systems and users trust that code came from an expected source and was not altered, which security approach should be selected?

1. Cloud-infrastructure hardening
2. Code signing
3. Secure cookie
4. Security monitoring

Correct Answer: B

 

Correct Answer

Answer B is correct because Code signing means digital signing of software to verify publisher identity and detect modification.

Incorrect Answers

Answer A is incorrect because Cloud-infrastructure hardening addresses a different security requirement. Cloud-infrastructure hardening refers to application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.

Answer C is incorrect because Secure cookie addresses a different requirement. Secure cookie refers to a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.

Answer D is incorrect because Security monitoring would fit a different scenario. Security monitoring refers to collection and review of telemetry from hardened systems.

 

Question 21

Which term describes execution of untrusted or risky code in an isolated restricted environment?

1. CYOD
2. Sandboxing
3. WPA3
4. Security monitoring

Correct Answer: B

 

Correct Answer

Answer B is correct because Sandboxing means execution of untrusted or risky code in an isolated restricted environment.

Incorrect Answers

Answer A is incorrect because CYOD addresses a different requirement. CYOD refers to a deployment model in which users choose from a list of organization-approved devices.

Answer C is incorrect because WPA3 represents a different security function. WPA3 refers to a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

Answer D is incorrect because Security monitoring would fit a different scenario. Security monitoring refers to collection and review of telemetry from hardened systems.

 

Question 22

To detect drift, attacks, and operational problems after controls are deployed, which security approach should be selected?

1. Security monitoring
2. Sandboxing
3. ICS/SCADA hardening
4. COPE

Correct Answer: A

 

Correct Answer

Answer A is correct because Security monitoring means collection and review of telemetry from hardened systems.

Incorrect Answers

Answer B is incorrect because Sandboxing addresses a different requirement. Sandboxing refers to execution of untrusted or risky code in an isolated restricted environment.

Answer C is incorrect because ICS/SCADA hardening addresses a different security requirement. ICS/SCADA hardening refers to security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

Answer D is incorrect because COPE would fit a different scenario. COPE refers to a deployment model in which the organization owns devices but permits limited personal use.

 

Question 23

To deploy consistent hardened settings and detect configuration drift, which security approach should be selected?

1. Mobile device management (MDM)
2. Static code analysis
3. CYOD
4. Secure baseline

Correct Answer: D

 

Correct Answer

Answer D is correct because Secure baseline means an approved minimum configuration that establishes required security settings for a class of systems.

Incorrect Answers

Answer A is incorrect because Mobile device management (MDM) represents a different security function. Mobile device management (MDM) refers to centralized administration of mobile-device configuration, applications, compliance, and remote actions.

Answer B is incorrect because Static code analysis would fit a different scenario. Static code analysis refers to analysis of source code or binaries without executing the application.

Answer C is incorrect because CYOD addresses a different security requirement. CYOD refers to a deployment model in which users choose from a list of organization-approved devices.

 

Question 24

Which term describes security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy?

1. BYOD
2. Wireless heat map
3. Mobile-device hardening
4. Static code analysis

Correct Answer: C

 

Correct Answer

Answer C is correct because Mobile-device hardening means security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy.

Incorrect Answers

Answer A is incorrect because BYOD addresses a different security requirement. BYOD refers to a deployment model in which users connect personally owned devices to organizational resources.

Answer B is incorrect because Wireless heat map represents a different security function. Wireless heat map refers to a visual representation of wireless signal strength or coverage across a physical area.

Answer D is incorrect because Static code analysis addresses a different requirement. Static code analysis refers to analysis of source code or binaries without executing the application.

 

Question 25

To reduce desktop attack surface and user-driven compromise, which security approach should be selected?

1. Mobile device management (MDM)
2. Workstation hardening
3. IoT hardening
4. Input validation

Correct Answer: B

 

Correct Answer

Answer B is correct because Workstation hardening means secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services.

Incorrect Answers

Answer A is incorrect because Mobile device management (MDM) addresses a different security requirement. Mobile device management (MDM) refers to centralized administration of mobile-device configuration, applications, compliance, and remote actions.

Answer C is incorrect because IoT hardening represents a different security function. IoT hardening refers to security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction.

Answer D is incorrect because Input validation would fit a different scenario. Input validation refers to checking and constraining application input before it is used.

 

Question 26

Which term describes secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication?

1. COPE
2. ICS/SCADA hardening
3. IoT hardening
4. Router hardening

Correct Answer: D

 

Correct Answer

Answer D is correct because Router hardening means secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

Incorrect Answers

Answer A is incorrect because COPE addresses a different requirement. COPE refers to a deployment model in which the organization owns devices but permits limited personal use.

Answer B is incorrect because ICS/SCADA hardening addresses a different security requirement. ICS/SCADA hardening refers to security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

Answer C is incorrect because IoT hardening represents a different security function. IoT hardening refers to security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction.

 

Question 27

To reduce risk from cloud misconfiguration and excessive permissions, which security approach should be selected?

1. CYOD
2. Secure baseline
3. Cloud-infrastructure hardening
4. Workstation hardening

Correct Answer: C

 

Correct Answer

Answer C is correct because Cloud-infrastructure hardening means application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.

Incorrect Answers

Answer A is incorrect because CYOD represents a different security function. CYOD refers to a deployment model in which users choose from a list of organization-approved devices.

Answer B is incorrect because Secure baseline would fit a different scenario. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

Answer D is incorrect because Workstation hardening addresses a different security requirement. Workstation hardening refers to secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services.

 

Question 28

Which term describes secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software?

1. Server hardening
2. RADIUS
3. Secure baseline
4. WPA3

Correct Answer: A

 

Correct Answer

Answer A is correct because Server hardening means secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software.

Incorrect Answers

Answer B is incorrect because RADIUS addresses a different requirement. RADIUS refers to a centralized AAA protocol commonly used for enterprise network access authentication.

Answer C is incorrect because Secure baseline represents a different security function. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

Answer D is incorrect because WPA3 addresses a different security requirement. WPA3 refers to a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

 

Question 29

To protect operational technology without causing unsafe disruption, which security approach should be selected?

1. BYOD
2. ICS/SCADA hardening
3. Wireless heat map
4. Code signing

Correct Answer: B

 

Correct Answer

Answer B is correct because ICS/SCADA hardening means security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.

Incorrect Answers

Answer A is incorrect because BYOD addresses a different security requirement. BYOD refers to a deployment model in which users connect personally owned devices to organizational resources.

Answer C is incorrect because Wireless heat map represents a different security function. Wireless heat map refers to a visual representation of wireless signal strength or coverage across a physical area.

Answer D is incorrect because Code signing would fit a different scenario. Code signing refers to digital signing of software to verify publisher identity and detect modification.

 

Question 30

Which term describes security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction?

1. IoT hardening
2. Wireless site survey
3. BYOD
4. Security monitoring

Correct Answer: A

 

Correct Answer

Answer A is correct because IoT hardening means security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction.

Incorrect Answers

Answer B is incorrect because Wireless site survey addresses a different requirement. Wireless site survey refers to assessment of radio coverage, interference, channel use, and access-point placement.

Answer C is incorrect because BYOD represents a different security function. BYOD refers to a deployment model in which users connect personally owned devices to organizational resources.

Answer D is incorrect because Security monitoring addresses a different security requirement. Security monitoring refers to collection and review of telemetry from hardened systems.

 

Question 31

To design wireless networks with adequate coverage and reduced unintended signal exposure, which security approach should be selected?

1. Sandboxing
2. Wireless site survey
3. Input validation
4. WPA3

Correct Answer: B

 

Correct Answer

Answer B is correct because Wireless site survey means assessment of radio coverage, interference, channel use, and access-point placement.

Incorrect Answers

Answer A is incorrect because Sandboxing addresses a different security requirement. Sandboxing refers to execution of untrusted or risky code in an isolated restricted environment.

Answer C is incorrect because Input validation represents a different security function. Input validation refers to checking and constraining application input before it is used.

Answer D is incorrect because WPA3 would fit a different scenario. WPA3 refers to a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

 

Question 32

What is a visual representation of wireless signal strength or coverage across a physical area?

1. Secure baseline
2. Wireless site survey
3. Wireless heat map
4. Workstation hardening

Correct Answer: C

 

Correct Answer

Answer C is correct because Wireless heat map means a visual representation of wireless signal strength or coverage across a physical area.

Incorrect Answers

Answer A is incorrect because Secure baseline represents a different security function. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

Answer B is incorrect because Wireless site survey addresses a different security requirement. Wireless site survey refers to assessment of radio coverage, interference, channel use, and access-point placement.

Answer D is incorrect because Workstation hardening addresses a different requirement. Workstation hardening refers to secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services.

 

Question 33

To enforce mobile security policy at scale, which security approach should be selected?

1. Mobile device management (MDM)
2. Static code analysis
3. Workstation hardening
4. Router hardening

Correct Answer: A

 

Correct Answer

Answer A is correct because Mobile device management (MDM) means centralized administration of mobile-device configuration, applications, compliance, and remote actions.

Incorrect Answers

Answer B is incorrect because Static code analysis would fit a different scenario. Static code analysis refers to analysis of source code or binaries without executing the application.

Answer C is incorrect because Workstation hardening represents a different security function. Workstation hardening refers to secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services.

Answer D is incorrect because Router hardening addresses a different security requirement. Router hardening refers to secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

 

Question 34

What is a deployment model in which users connect personally owned devices to organizational resources?

1. BYOD
2. Server hardening
3. Workstation hardening
4. Input validation

Correct Answer: A

 

Correct Answer

Answer A is correct because BYOD means a deployment model in which users connect personally owned devices to organizational resources.

Incorrect Answers

Answer B is incorrect because Server hardening represents a different security function. Server hardening refers to secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software.

Answer C is incorrect because Workstation hardening addresses a different security requirement. Workstation hardening refers to secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services.

Answer D is incorrect because Input validation addresses a different requirement. Input validation refers to checking and constraining application input before it is used.

 

Question 35

To retain enterprise control while allowing some user flexibility, which security approach should be selected?

1. Input validation
2. COPE
3. Sandboxing
4. Mobile device management (MDM)

Correct Answer: B

 

Correct Answer

Answer B is correct because COPE means a deployment model in which the organization owns devices but permits limited personal use.

Incorrect Answers

Answer A is incorrect because Input validation would fit a different scenario. Input validation refers to checking and constraining application input before it is used.

Answer C is incorrect because Sandboxing represents a different security function. Sandboxing refers to execution of untrusted or risky code in an isolated restricted environment.

Answer D is incorrect because Mobile device management (MDM) addresses a different security requirement. Mobile device management (MDM) refers to centralized administration of mobile-device configuration, applications, compliance, and remote actions.

 

Question 36

What is a deployment model in which users choose from a list of organization-approved devices?

1. COPE
2. BYOD
3. WPA3
4. CYOD

Correct Answer: D

 

Correct Answer

Answer D is correct because CYOD means a deployment model in which users choose from a list of organization-approved devices.

Incorrect Answers

Answer A is incorrect because COPE addresses a different security requirement. COPE refers to a deployment model in which the organization owns devices but permits limited personal use.

Answer B is incorrect because BYOD addresses a different requirement. BYOD refers to a deployment model in which users connect personally owned devices to organizational resources.

Answer C is incorrect because WPA3 represents a different security function. WPA3 refers to a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

 

Question 37

To secure supported wireless networks against weaknesses in older Wi-Fi security methods, which security approach should be selected?

1. Router hardening
2. Code signing
3. RADIUS
4. WPA3

Correct Answer: D

 

Correct Answer

Answer D is correct because WPA3 means a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections.

Incorrect Answers

Answer A is incorrect because Router hardening represents a different security function. Router hardening refers to secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

Answer B is incorrect because Code signing would fit a different scenario. Code signing refers to digital signing of software to verify publisher identity and detect modification.

Answer C is incorrect because RADIUS addresses a different security requirement. RADIUS refers to a centralized AAA protocol commonly used for enterprise network access authentication.

 

Question 38

Which centralized AAA protocol commonly is used for enterprise network access authentication?

1. Static code analysis
2. RADIUS
3. Router hardening
4. BYOD

Correct Answer: B

 

Correct Answer

Answer B is correct because RADIUS means a centralized AAA protocol commonly used for enterprise network access authentication.

Incorrect Answers

Answer A is incorrect because Static code analysis addresses a different security requirement. Static code analysis refers to analysis of source code or binaries without executing the application.

Answer C is incorrect because Router hardening represents a different security function. Router hardening refers to secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.

Answer D is incorrect because BYOD addresses a different requirement. BYOD refers to a deployment model in which users connect personally owned devices to organizational resources.

 

Question 39

To reduce injection and unexpected-input vulnerabilities, which security approach should be selected?

1. Secure baseline
2. Security monitoring
3. COPE
4. Input validation

Correct Answer: D

 

Correct Answer

Answer D is correct because Input validation means checking and constraining application input before it is used.

Incorrect Answers

Answer A is incorrect because Secure baseline addresses a different security requirement. Secure baseline refers to an approved minimum configuration that establishes required security settings for a class of systems.

Answer B is incorrect because Security monitoring would fit a different scenario. Security monitoring refers to collection and review of telemetry from hardened systems.

Answer C is incorrect because COPE represents a different security function. COPE refers to a deployment model in which the organization owns devices but permits limited personal use.

 

Question 40

Which web cookie is configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes?

1. Secure cookie
2. Code signing
3. Workstation hardening
4. RADIUS

Correct Answer: A

 

Correct Answer

Answer A is correct because Secure cookie means a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.

Incorrect Answers

Answer B is incorrect because Code signing represents a different security function. Code signing refers to digital signing of software to verify publisher identity and detect modification.

Answer C is incorrect because Workstation hardening addresses a different requirement. Workstation hardening refers to secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services.

Answer D is incorrect because RADIUS addresses a different security requirement. RADIUS refers to a centralized AAA protocol commonly used for enterprise network access authentication.