Security

A security technician is tasked with hardening a fleet of newly provisioned Windows workstations prior to enterprise deployment. To minimize the attack surface and mitigate unauthorized lateral movement, the technician needs to configure local default accounts and execution policies according to security best practices. Which of the following configurations represents the most secure baseline implementation?

Match each data sanitization or disposal technique to the media type and operational context where it is most appropriately applied according to CompTIA security standards.

A helpdesk technician suspects that a user's Windows 11 desktop has been infected with network-aware malware after observing unauthorized outbound network traffic. Which of the following actions should the technician perform NEXT according to the standard malware remediation process?

A desktop technician is configuring a new wireless network for a company's administrative branch. Management mandates that every employee must authenticate individually using their domain credentials rather than relying on a shared passphrase. Which of the following wireless security configurations should the technician implement to meet these security requirements?

An IT technician is tasked with disposing of retired magnetic backup tapes containing confidential enterprise data according to organizational security policy. Place the steps of the data sanitization and chain-of-custody process in the correct chronological order from first to last.

A desktop support technician receives an escalated ticket regarding a corporate Windows workstation exhibiting persistent rogue security software pop-ups. The field technician assigned to the ticket has already confirmed the infection symptoms and disconnected the machine from the corporate network to enforce quarantine. According to the standard CompTIA malware remediation process, which of the following actions should the technician perform NEXT prior to executing malware scanning and removal tools?

A company issues smartphones to employees under a corporate mobility program. The IT administrator needs to ensure that corporate emails, documents, and sensitive business applications are strictly isolated from personal applications and data stored on the same device. Which mobile security feature should the administrator implement to achieve this isolation?

A desktop support technician is setting up a Windows 11 Professional workstation for an employee who frequently accesses a shared folder hosted on a standalone network server outside the Active Directory domain. Each time the user attempts to connect, Windows requests authentication details. To prevent repetitive prompts, the technician needs to save these network authentication credentials permanently on the local machine. Which Control Panel utility should the technician use to store and manage these credentials?

A desktop technician is preparing to deploy a newly imaged Windows computer for a standard corporate user. To follow workstation hardening best practices and minimize the system's attack surface, which of the following actions should the technician take?

An IT security auditor is establishing standardized operational procedures for end-of-life media management and storage sanitization. Match each data destruction or disposition requirement on the left with the correct technique or compliance artifact on the right based on CompTIA A+ standards.

As an IT security technician conducting awareness training, match each social engineering attack vector or threat type to its corresponding security incident description.

A security administrator is preparing an unhardened, newly provisioned Windows workstation for deployment in a high-security enterprise environment. To minimize attack vectors prior to placing the system on the production network, the administrator must execute a comprehensive series of local configuration and security hardening controls. In what sequence should the technician perform the following workstation hardening steps to ensure proper dependency management and maximum initial security?

A technician has isolated a Windows workstation after detecting a malware infection. Before initiating the anti-malware remediation scan, which TWO actions should the technician take according to the standard CompTIA malware remediation process? (Select TWO.)

An IT technician is preparing to decommission a server rack containing magnetic tape backup cartridges, traditional SATA hard disk drives (HDDs), and NVMe solid-state drives (SSDs). The technician plans to use a commercial high-intensity degaussing unit as a single sanitization step for all drives prior to off-site disposal. Which of the following statements best evaluates the effectiveness of this proposed sanitization plan?

A system administrator is updating the corporate wireless security baseline and guest network policies. Match each wireless security protocol or feature on the left with its correct operational description or technical requirement on the right.

An IT technician is tasked with preparing functional solid-state drives (SSDs) from decommissioned office laptops before the laptops are donated to a community center. Organizational security policy mandates rendering all stored data unrecoverable via advanced laboratory forensic techniques, while keeping the physical drives fully operational for the recipient. Which of the following methods should the technician perform?

An IT support specialist is setting up a shared kiosk workstation in a public library environment. To enforce basic workstation hardening controls before placing the computer into service, which TWO actions should the technician perform? (Select TWO.)

A technician is configuring security settings on a standalone Windows 11 Pro system. The organization requires that standard users are prompted to enter administrator credentials whenever an action requires elevation, and that elevation prompts do not switch to the dimmed Secure Desktop. Which of the following settings in Local Security Policy (secpol.msc) should the technician configure to meet these requirements? (Select TWO.)

A network administrator isolates a Windows workstation after detecting an active rootkit that intercepted system calls and modified core system files. The technician has successfully quarantined the machine from the network and disabled System Restore. To proceed with the remediation phase according to the standard CompTIA malware removal process, which of the following actions should the technician take? (Select TWO.)

An IT technician is configuring security policies on corporate mobile devices issued to field workers. Which TWO of the following features should the technician enforce to directly protect sensitive data if a mobile device is lost or stolen?