Book Image

CompTIA Security+ Practice Tests SY0-501

By : Ian Neil
Book Image

CompTIA Security+ Practice Tests SY0-501

By: Ian Neil

Overview of this book

CompTIA Security+ is a core security certification that will validate your baseline skills for a career in cybersecurity. Passing this exam will not only help you identify security incidents but will also equip you to resolve them efficiently. This book builds on the popular CompTIA Security+ Certification Guide, which mirrors the SY0-501 exam pattern. This practice test-based guide covers all six domains of the Security+ SY0-501 exam: threats, attacks, and vulnerabilities; technologies and tools; architecture and design; identity and access management; cryptography and PKI; and risk management. You’ll take six mock tests designed as per the official Security+ certification exam pattern, each covering significant aspects from an examination point of view. For each domain, the book provides a dedicated cheat sheet that includes important concepts covered in the test. You can even time your tests to simulate the actual exam. These tests will help you identify gaps in your knowledge and discover answers to tricky exam questions. By the end of this book, you’ll have developed and enhanced the skills necessary to pass the official CompTIA Security+ exam.
Table of Contents (9 chapters)

Chapter 6: Risk Management

Practice Test 21 – Solution

1. The auditor is measuring the Recovery Point Objective, the amount of downtime a company can endure without causing damage to its sales or reputation.

2. The IT manager has been measuring the Mean Time Between Failures (MTBF) so that he can see, over a period of time, the number of times the video-conferencing application has been crashing. This measures the reliability.

3. The Mean Time to Repair (MTTR) lets you know how long it took a system to be repaired and the Recovery Time Objective (RTO) is when a system is back to operational state; they both inform you when the system is working.

4. The quality of how the risk is measured by the Qualitative Risk Assessment can be graded as high, medium, or low.

5. The Quantitative Risk Assessment is normally measured by giving the risk a value to measure the risk.

6. This is known as a single point of failure, where one component fails and takes down a system.

7. The most critical...