Security+ Practice Test

Blocks resolution of malicious or disallowed domains is correct because protective DNS works by filtering DNS requests and blocking, redirecting, or sinkholing domains associated with malicious activity. On the exam, DNS filtering is about controlling where users can resolve and connect, not about encryption or MFA.

The bank may face regulatory action is correct because Failure to comply with FDIC regulations can result in regulatory action, including fines and potential closure of the institution. On the exam, these items focus on how the activity improves oversight, governance, or user behavior.

Patch management fixes known software flaws by applying tested vendor updates. This matters because many attacks succeed by exploiting vulnerabilities for which a patch already exists.

Antivirus software is correct because it detects, blocks, or removes malicious code before it can infect systems. This matters because malware prevention is a different control choice than network filtering or incident response.

network segmentation supports access control by dividing a network into smaller segments to restrict unauthorized access between them. This matters because understanding how network segmentation supports access control is crucial for designing secure, segmented networks that limit lateral movement of threats within an organization's infrastructure.

SSO primarily improves user experience by allowing users to access multiple applications with a single set of credentials, reducing the need for repetitive login processes. This matters because understanding how Single Sign-On enhances user experience is crucial for designing efficient and secure identity management solutions in security operations.

On aligning security efforts with business objectives and risk management strategies is correct because Security governance primarily focuses on aligning security efforts with the organization's business objectives and risk management strategies to ensure effective risk mitigation. On the exam, these items focus on how the activity improves oversight, governance, or user behavior.

Enforcing strong password policies increases complexity requirements, making it harder for attackers to guess passwords through brute-force methods. This matters because understanding how strong password policies reduce attack vectors is essential for securing systems against unauthorized access.

Security impact analysis is used to identify security effects before the change is implemented. This matters because controlled changes should reduce surprise risk instead of introducing it.

Identity governance and data access policy is correct because customers still own their data and identities across cloud deployment types, including SaaS. On the exam, SaaS shifts most platform and infrastructure duties to the provider, but identity and access decisions still stay primarily with the customer.