CompTIA SecurityX practice test

Which property of a cryptographic hash function ensures it is computationally infeasible to find two different inputs that produce the same hash output?

A security analyst wants to correlate logs from firewalls, servers, and endpoints in one place to detect multi-stage attacks. Which technology provides this centralized correlation?

Which metric expresses the expected monetary loss for a single occurrence of a specific risk event?

An organization is designing a system and wants to ensure that even if one security control fails, others still protect the asset. Which principle is being applied?

An architect needs to securely exchange a symmetric session key over an untrusted network so that an eavesdropper cannot derive it. Which approach is appropriate?

During incident response, which phase focuses on limiting the spread and impact of an active compromise before eradication begins?

A company chooses to purchase cyber insurance to address a portion of its data breach risk. Which risk treatment strategy is this?

Which control ensures that data remains protected from unauthorized reading even if storage media is physically stolen?

A threat intelligence team categorizes adversary behavior using a framework of tactics and techniques across the attack lifecycle. Which framework is most commonly used for this?

Which cryptographic concept ensures that a sender cannot later deny having sent a digitally signed message?

An architect wants to centralize secrets such as API keys and database passwords so applications retrieve them at runtime instead of hardcoding them. Which solution is appropriate?

Which document defines the acceptable use of corporate systems and the consequences of violations, and is typically signed by employees?

An analyst wants to proactively search systems for signs of an undetected adversary based on a hypothesis, rather than waiting for an alert. Which activity is this?

Which use of a public key infrastructure validates that a website actually belongs to the organization it claims to represent?

Which approach reduces the risk that a single compromised administrator account can perform sensitive actions unchecked?

A vendor will process customer personal data on behalf of a company. Which document should define the security obligations the vendor must meet?

Which automation capability allows a security team to execute predefined response actions, such as isolating a host, automatically when an alert triggers?

Which key exchange property ensures that the compromise of a long-term private key does not allow decryption of previously recorded encrypted sessions?

An architect wants application code to be tested for security flaws while it is being written, before it is compiled or deployed. Which testing approach achieves this?