8 Comprehensive Security+ Practice and Review Free Online FlashCards

What should you do first when an account shows signs of active compromise?

Revoke active sessions and disable or restrict the account to contain further access, while preserving relevant logs for investigation.

What principle guides access decisions in a zero-trust architecture?

Zero trust makes resource-specific access decisions using context such as user identity and device health, rather than trusting a device because of its network location.

How can you verify a software update’s origin and integrity?

A digital signature verified with the vendor’s trusted public key provides evidence that the update came from the vendor and was not altered.

What limitation does a hash have when verifying a downloaded file?

A hash can reveal a change when compared with a trustworthy reference value. A hash alone does not establish who produced the file.

What security property does encryption primarily provide?

Encryption primarily protects confidentiality; it does not by itself prove who produced a file or whether it was altered.

What supports a reliable investigation of suspected data exfiltration?

Preserve relevant endpoint, network, and application records, document how evidence is collected and handled, and contain the device as appropriate.

What does a recovery time objective (RTO) specify?

The recovery time objective (RTO) is the target time within which a service should be restored.

What does a recovery point objective (RPO) specify?

The recovery point objective (RPO) is the maximum acceptable period of data loss, measured as a time interval.

How should an organization manage risk from a payment processor?

Assess the provider’s security and data-handling practices, set security and incident-notification obligations in the agreement, and monitor the relationship.

How should an organization respond to an unapproved firewall change that exposes a management interface?

Use the authorized change process to restore a known-good configuration, verify the exposure is closed, and preserve relevant records for review.

What makes a security risk exception appropriately governed?

Document the risk, assess its impact and mitigations, and obtain time-limited acceptance from an authorized risk owner.

Which controls help prevent and detect unauthorized access to a file share?

Least-privilege permissions help prevent unauthorized access; access logs help detect and investigate use.