CompTIA Security+ Cert Prep #8 (24)

comptia-security-cert-prep-8-25

Exit

Question 1 of 1

Time Left

235790

120

block

A software developer is responsible for writing the code on an accounting application. Another software developer is responsible for developing code on a system in human resources. Once a year they have to switch roles for several weeks. Which of the following practices is being implemented?

Select the correct answer(s).

(0/0)

238384

120

none

Which of the following types of risk reducing policies also has the added indirect benefit of cross training employees when implemented?

Select the correct answer(s).

(0/0)

238385

120

none

In order to prevent and detect fraud, which of the following should be implemented?

Select the correct answer(s).

(0/0)

238386

120

none

The Chief Technical Officer (CTO) has been informed of a potential fraud committed by a database administrator performing several other job functions within the company. Which of the following is the BEST method to prevent such activities in the future?

Select the correct answer(s).

(0/0)

238387

120

none

Separation of duties is often implemented between developers and administrators in order to separate which of the following?

Select the correct answer(s).

(0/0)

238388

120

none

A user in the company is in charge of various financial roles but needs to prepare for an upcoming audit. They use the same account to access each financial system. Which of the following security controls will MOST likely be implemented within the company?

Select the correct answer(s).

(0/0)

238389

120

none

Everyone in the accounting department has the ability to print and sign checks. Internal audit has asked that only one group of employees may print checks while only two other employees may sign the checks. Which of the following concepts would enforce this process?

Select the correct answer(s).

(0/0)

238390

120

none

One of the system administrators at a company is assigned to maintain a secure computer lab. The administrator has rights to configure machines, install software, and perform user account maintenance. However, the administrator cannot add new computers to the domain, because that requires authorization from the Information Assurance Officer. This is an example of which of the following?

Select the correct answer(s).

(0/0)

238391

120

none

A security administrator notices that a specific network administrator is making unauthorized changes to the firewall every Saturday morning. Which of the following would be used to mitigate this issue so that only security administrators can make changes to the firewall?

Select the correct answer(s).

(0/0)

238392

120

none

Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles?

Select the correct answer(s).

(0/0)

238393

120

none

An IT security manager is asked to provide the total risk to the business. Which of the following calculations would he security manager choose to determine total risk?

Select the correct answer(s).

(0/0)

238394

120

none

A company is preparing to decommission an offline, non-networked root certificate server. Before sending the server’s drives to be destroyed by a contracted company, the Chief Security Officer (CSO) wants to be certain that the data will not be accessed. Which of the following, if implemented, would BEST reassure the CSO? (Select TWO).

Select the correct answer(s).

(0/0)

238395

120

none

Identifying residual risk is MOST important to which of the following concepts?

Select the correct answer(s).

(0/0)

238396

120

none

A software company has completed a security assessment. The assessment states that the company should implement fencing and lighting around the property. Additionally, the assessment states that production releases of their software should be digitally signed. Given the recommendations, the company was deficient in which of the following core security areas? (Select TWO).

Select the correct answer(s).

(0/0)

238397

120

none

CompTIA Security+ Cert Prep #8 (24)

Question 1 of 1

Time Left

A software developer is responsible for writing the code on an accounting application. Another software developer is responsible for developing code on a system in human resources. Once a year they have to switch roles for several weeks. Which of the following practices is being implemented?

Select the correct answer(s).

(0/0)

Which of the following types of risk reducing policies also has the added indirect benefit of cross training employees when implemented?

Select the correct answer(s).

(0/0)

In order to prevent and detect fraud, which of the following should be implemented?

Select the correct answer(s).

(0/0)

The Chief Technical Officer (CTO) has been informed of a potential fraud committed by a database administrator performing several other job functions within the company. Which of the following is the BEST method to prevent such activities in the future?

Select the correct answer(s).

(0/0)

Separation of duties is often implemented between developers and administrators in order to separate which of the following?

Select the correct answer(s).

(0/0)

A user in the company is in charge of various financial roles but needs to prepare for an upcoming audit. They use the same account to access each financial system. Which of the following security controls will MOST likely be implemented within the company?

Select the correct answer(s).

(0/0)

Everyone in the accounting department has the ability to print and sign checks. Internal audit has asked that only one group of employees may print checks while only two other employees may sign the checks. Which of the following concepts would enforce this process?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

A security administrator notices that a specific network administrator is making unauthorized changes to the firewall every Saturday morning. Which of the following would be used to mitigate this issue so that only security administrators can make changes to the firewall?

Select the correct answer(s).

(0/0)

Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles?

Select the correct answer(s).

(0/0)

An IT security manager is asked to provide the total risk to the business. Which of the following calculations would he security manager choose to determine total risk?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Identifying residual risk is MOST important to which of the following concepts?

Select the correct answer(s).

(0/0)

Select the correct answer(s).

(0/0)

Which of the following defines a business goal for system restoration and acceptable data loss?

Select the correct answer(s).

(0/0)

Results

Correct

0

Incorrect

0

Skipped

0

Overall Percentage

0%

Rate Quiz