Security

A systems administrator is establishing security baselines for a new fleet of corporate smartphones to protect sensitive local data if a device is lost or stolen. Which TWO security controls should the administrator deploy on these devices to directly protect data at rest and prevent unauthorized access upon physical loss? (Select TWO.)

A IT support specialist is configuring wireless connectivity for a law firm's main office. Management requires that each employee authenticate using their own centralized corporate user credentials rather than connecting with a shared passphrase. Which wireless security standard and protocol combination should the specialist implement to satisfy this requirement?

A systems engineer is hardening Windows 11 Pro workstations deployed in a high-security kiosk environment. Organizational security policy mandates two key User Account Control (UAC) behaviors:

1. When standard users attempt any operation that requires elevated privileges, the system must immediately reject the attempt without displaying a credential prompt.
2. When administrator accounts operating in Admin Approval Mode attempt elevated tasks, they must be required to re-enter their administrative password on the secure desktop to proceed.

Which TWO settings in Local Security Policy (secpol.msc) under Security Options must be configured to meet these requirements? (Select TWO.)

A cybersecurity analyst at a healthcare organization isolates an infected Windows endpoint by disconnecting its network interface and disabling all wireless radios following detection of active spyware transmission. According to the CompTIA standard 7-step malware remediation process, which TWO actions must the analyst perform NEXT immediately prior to running a full system scan? (Select TWO.)

A systems technician is tasked with re-hardening a company laptop that was recently returned from a high-risk remote assignment before allowing it back onto the internal corporate network. Arrange the following workstation hardening and remediation steps in the correct procedural sequence from first to last.

An enterprise employee contacts the helpdesk after a pop-up window appears on their web browser claiming their computer is severely infected with malware. The pop-up instructs the user to call an unverified toll-free technical support number immediately to purchase remediation software. The company's installed security software indicates the operating system is clean. Which of the following social engineering threat types is being attempted?

An IT technician is preparing to decommission several enterprise magnetic hard disk drives (HDDs) containing sensitive personnel records. To adhere to organizational security policies and maintain regulatory compliance, the disposal process must follow strict data sanitization and chain-of-custody procedures. In what sequence should the technician perform the following decommissioning steps?

A desktop technician is configuring a newly deployed Windows workstation for an administrative office. To minimize the local attack surface and adhere to workstation hardening best practices, which of the following actions should the technician take regarding default accounts?

An IT security analyst is updating compliance documentation across corporate mobile endpoints and industrial IoT deployment sites. Match each security mechanism on the left with its corresponding technical objective or operational enforcement capability on the right.

A systems support specialist at a financial services firm is servicing a Windows 11 workstation that was infected with persistent banking spyware. The specialist isolated the device from the network, disabled System Restore, updated the endpoint protection signatures, and executed a full system scan that successfully quarantined and removed all malicious files. Which of the following actions should the technician perform NEXT to strictly adhere to the standard CompTIA malware remediation process?

A mobile user frequently installs personal applications on a corporate smartphone. The security policy requires preventing corporate email data from being shared with or accessed by these personal applications. Which mobile security technology directly isolates corporate data from personal applications?

A desktop support technician is configuring a Windows 11 workstation for an employee who uses screen-magnification software. When User Account Control (UAC) prompts appear, the desktop dims onto the Secure Desktop, causing the screen-magnification tool to temporarily stop rendering. Which of the following UAC configuration adjustments should the technician make to resolve the display issue while preserving elevation notifications?

A network administrator is configuring a wireless network for a university research lab. The institution's security policy requires individual user authentication against a centralized directory service and strong AES encryption for all wireless traffic. Which TWO of the following configurations must the administrator implement on the wireless access points to fulfill these security requirements?

An IT technician is establishing a local user account security baseline for standalone Windows office workstations. Which TWO configuration steps are recommended best practices for hardening local user accounts on these systems?

A logistics company is upgrading its data center and must decommission retired storage assets, including magnetic backup tapes and solid-state drives (SSDs). The security policy mandates a single physical destruction method that renders both media types completely unusable and unrecoverable. Which of the following disposal methods fulfills this requirement?

A security administrator is establishing baseline security for custom embedded IoT environmental monitoring units deployed throughout a manufacturing facility. These embedded devices feature minimal operating system builds, lack dedicated user interface screens, and operate with strictly limited processing power and memory resources. The units transmit telemetry over the local wireless network to a central server. Which of the following security measures should the administrator implement FIRST to effectively secure these embedded devices against unauthorized access and network compromise?

A security analyst is auditing endpoint hardening configurations for shared customer service desktops. Corporate policy requires that inactive user sessions automatically lock after five minutes without terminating running applications, and that unauthenticated users cannot access local resources via legacy default accounts. Which of the following configurations best satisfies both requirements?

A helpdesk technician is responding to an incident involving a Windows workstation infected with a persistent crypto-mining Trojan. The malware infection has already been identified and verified by security logs. Place the following remediation actions in the correct sequence according to the official CompTIA 7-step malware removal process.

A systems administrator needs to harden a standalone Windows 11 workstation by configuring User Account Control (UAC) to automatically deny all elevation prompts for standard domain users. Place the steps in the correct order to accomplish this configuration using the Local Security Policy snap-in.

A security analyst is designing the wireless infrastructure for a mobile inventory auditing system across several distribution centers. Corporate policy mandates that each employee authenticate using their individual Active Directory account rather than a shared password, ensuring central access control and user accountability. Which of the following wireless security implementations should the analyst deploy to fulfill this requirement?