Topic 14 Practice Test 4 covers Security Hardening of Computing Resources for CompTIA Security+ SY0-701 and maps to objective 4.1: Given a scenario, apply common security techniques to computing resources. For broader exam preparation, review the CompTIA Security+ Exam Dumps. Every option includes focused editorial reasoning explaining both the concept and its fit to the scenario.
Question 1
The team is resolving a gap found during a computing-resource hardening program: it needs security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction. Which option is most appropriate?
- Mobile-device hardening
- Wireless site survey
- IoT hardening
- Workstation hardening
Correct Answer: C
Correct Answer
Answer C is correct because IoT hardening means security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction. That makes it the best answer here; Mobile-device hardening addresses security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy, not the function requested in the stem.
Incorrect Answers
Answer A is incorrect because Mobile-device hardening means security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy. The question is not asking for this function. It is testing security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction, so IoT hardening is the stronger fit.
Answer B is incorrect because Wireless site survey means assessment of radio coverage, interference, channel use, and access-point placement. That concept can be valid in another scenario, but this question is testing security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction; IoT hardening therefore fits the requirement more directly.
Answer D is incorrect because Workstation hardening means secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services. The scenario instead requires security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction, which is why IoT hardening is the better answer; this option serves the different function defined above.
Question 2
As part of a computing-resource hardening program, reviewers identify a need for application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources. Which option should they select?
- Cloud-infrastructure hardening
- Sandboxing
- Secure cookie
- Secure baseline
Correct Answer: A
Correct Answer
Answer A is correct because Cloud-infrastructure hardening means application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources. That is the function the question is testing. Secure cookie would instead be used for a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes.
Incorrect Answers
Answer B is incorrect because Sandboxing means execution of untrusted or risky code in an isolated restricted environment. The scenario instead requires application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources, which is why Cloud-infrastructure hardening is the better answer; this option serves the different function defined above.
Answer C is incorrect because Secure cookie means a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes. The question is not asking for this function. It is testing application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources, so Cloud-infrastructure hardening is the stronger fit.
Answer D is incorrect because Secure baseline means an approved minimum configuration that establishes required security settings for a class of systems. The key mismatch is functional: Cloud-infrastructure hardening addresses application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources, the need stated by the question.
Question 3
The team is resolving a gap found during a computing-resource hardening program: it needs checking and constraining application input before it is used. Which option is most appropriate?
- Mobile device management (MDM)
- COPE
- Static code analysis
- Input validation
Correct Answer: D
Correct Answer
Answer D is correct because Input validation means checking and constraining application input before it is used. That is the function the question is testing. Static code analysis would instead be used for analysis of source code or binaries without executing the application.
Incorrect Answers
Answer A is incorrect because Mobile device management (MDM) means centralized administration of mobile-device configuration, applications, compliance, and remote actions. The question is not asking for this function. It is testing checking and constraining application input before it is used, so Input validation is the stronger fit.
Answer B is incorrect because COPE means a deployment model in which the organization owns devices but permits limited personal use. The concept is valid, but it does not match this stem. The required function is checking and constraining application input before it is used, which maps to Input validation.
Answer C is incorrect because Static code analysis means analysis of source code or binaries without executing the application. The question is not asking for this function. It is testing checking and constraining application input before it is used, so Input validation is the stronger fit.
Question 4
A security plan created during a computing-resource hardening program must provide deployment model in which users connect personally owned devices to organizational resources, digital signing of software to verify publisher identity and detect modification, and collection and review of telemetry from hardened systems. Which THREE options should be selected? Choose THREE.
- CYOD
- Input validation
- Security monitoring
- Mobile device management (MDM)
- Code signing
- BYOD
Correct Answers: C, E, F
Correct Answers
Answer C is correct because Security monitoring means collection and review of telemetry from hardened systems. It belongs in the fixed-count answer set because it covers one of the stated requirements. CYOD instead serves a deployment model in which users choose from a list of organization-approved devices and cannot replace this function.
Answer E is correct because Code signing means digital signing of software to verify publisher identity and detect modification. One required function is exactly what this option provides. CYOD may be useful elsewhere, but it is used for a deployment model in which users choose from a list of organization-approved devices.
Answer F is correct because BYOD means a deployment model in which users connect personally owned devices to organizational resources. This selection maps directly to one of the named needs. Input validation addresses checking and constraining application input before it is used, so it does not satisfy the same slot.
Incorrect Answers
Answer A is incorrect because CYOD means a deployment model in which users choose from a list of organization-approved devices. The scenario calls for Code signing, BYOD, Security monitoring. Selecting this option would leave one of those required functions uncovered.
Answer B is incorrect because Input validation means checking and constraining application input before it is used. The fixed-count answer set is Code signing, BYOD, Security monitoring; this option does not fill one of those named functions. For example, Security monitoring is required for collection and review of telemetry from hardened systems.
Answer D is incorrect because Mobile device management (MDM) means centralized administration of mobile-device configuration, applications, compliance, and remote actions. The required choices are Code signing, BYOD, Security monitoring. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Question 5
As part of a computing-resource hardening program, reviewers identify a need for secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software. Which option should they select?
- Code signing
- Router hardening
- Server hardening
- Security monitoring
Correct Answer: C
Correct Answer
Answer C is correct because Server hardening means secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software. That is the function the question is testing. Router hardening would instead be used for secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.
Incorrect Answers
Answer A is incorrect because Code signing means digital signing of software to verify publisher identity and detect modification. The concept is valid, but it does not match this stem. The required function is secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software, which maps to Server hardening.
Answer B is incorrect because Router hardening means secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication. That concept can be valid in another scenario, but this question is testing secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software; Server hardening therefore fits the requirement more directly.
Answer D is incorrect because Security monitoring means collection and review of telemetry from hardened systems. That concept can be valid in another scenario, but this question is testing secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software; Server hardening therefore fits the requirement more directly.
Question 6
A design decision in a computing-resource hardening program must provide collection and review of telemetry from hardened systems. Which choice most directly satisfies that requirement?
- Cloud-infrastructure hardening
- CYOD
- Security monitoring
- Wireless heat map
Correct Answer: C
Correct Answer
Answer C is correct because Security monitoring means collection and review of telemetry from hardened systems. The deciding point is functional fit: this option covers the stated need, while Wireless heat map addresses a visual representation of wireless signal strength or coverage across a physical area.
Incorrect Answers
Answer A is incorrect because Cloud-infrastructure hardening means application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources. The scenario instead requires collection and review of telemetry from hardened systems, which is why Security monitoring is the better answer; this option serves the different function defined above.
Answer B is incorrect because CYOD means a deployment model in which users choose from a list of organization-approved devices. The concept is valid, but it does not match this stem. The required function is collection and review of telemetry from hardened systems, which maps to Security monitoring.
Answer D is incorrect because Wireless heat map means a visual representation of wireless signal strength or coverage across a physical area. That concept can be valid in another scenario, but this question is testing collection and review of telemetry from hardened systems; Security monitoring therefore fits the requirement more directly.
Question 7
A design decision in a computing-resource hardening program must provide deployment model in which users choose from a list of organization-approved devices. Which choice most directly satisfies that requirement?
- BYOD
- Server hardening
- CYOD
- Secure cookie
Correct Answer: C
Correct Answer
Answer C is correct because CYOD means a deployment model in which users choose from a list of organization-approved devices. This is the precise fit for the scenario. BYOD serves the different purpose of a deployment model in which users connect personally owned devices to organizational resources.
Incorrect Answers
Answer A is incorrect because BYOD means a deployment model in which users connect personally owned devices to organizational resources. The concept is valid, but it does not match this stem. The required function is a deployment model in which users choose from a list of organization-approved devices, which maps to CYOD.
Answer B is incorrect because Server hardening means secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software. The key mismatch is functional: CYOD addresses a deployment model in which users choose from a list of organization-approved devices, the need stated by the question.
Answer D is incorrect because Secure cookie means a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes. This could be appropriate elsewhere, but the required function is a deployment model in which users choose from a list of organization-approved devices; that makes CYOD the precise choice.
Question 8
An architect working on a computing-resource hardening program needs one capability that provides approved minimum configuration that establishes required security settings for a class of systems and another that provides deployment model in which users choose from a list of organization-approved devices. Which TWO selections are the best match? Choose TWO.
- CYOD
- Mobile device management (MDM)
- Cloud-infrastructure hardening
- WPA3
- Secure baseline
Correct Answers: A, E
Correct Answers
Answer A is correct because CYOD means a deployment model in which users choose from a list of organization-approved devices. The fixed-count item needs this function in the answer set. WPA3 covers a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections, a different requirement.
Answer E is correct because Secure baseline means an approved minimum configuration that establishes required security settings for a class of systems. One required function is exactly what this option provides. Cloud-infrastructure hardening may be useful elsewhere, but it is used for application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources.
Incorrect Answers
Answer B is incorrect because Mobile device management (MDM) means centralized administration of mobile-device configuration, applications, compliance, and remote actions. Every answer slot must map to a stated requirement. The correct set is CYOD, Secure baseline, so this option cannot replace one of those selections.
Answer C is incorrect because Cloud-infrastructure hardening means application of least privilege, secure network exposure, logging, encryption, and service-specific security settings in cloud resources. Every answer slot must map to a stated requirement. The correct set is CYOD, Secure baseline, so this option cannot replace one of those selections.
Answer D is incorrect because WPA3 means a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections. The scenario calls for CYOD, Secure baseline. Selecting this option would leave one of those required functions uncovered. For example, Secure baseline is required for an approved minimum configuration that establishes required security settings for a class of systems.
Question 9
The control set for a computing-resource hardening program must address both secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services and analysis of source code or binaries without executing the application. Which TWO choices map directly to those needs? Choose TWO.
- COPE
- Static code analysis
- Workstation hardening
- RADIUS
- ICS/SCADA hardening
Correct Answers: B, C
Correct Answers
Answer B is correct because Static code analysis means analysis of source code or binaries without executing the application. This selection maps directly to one of the named needs. RADIUS addresses a centralized AAA protocol commonly used for enterprise network access authentication, so it does not satisfy the same slot.
Answer C is correct because Workstation hardening means secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services. It belongs in the fixed-count answer set because it covers one of the stated requirements. ICS/SCADA hardening instead serves security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability and cannot replace this function.
Incorrect Answers
Answer A is incorrect because COPE means a deployment model in which the organization owns devices but permits limited personal use. Every answer slot must map to a stated requirement. The correct set is Workstation hardening, Static code analysis, so this option cannot replace one of those selections.
Answer D is incorrect because RADIUS means a centralized AAA protocol commonly used for enterprise network access authentication. The fixed-count answer set is Workstation hardening, Static code analysis; this option does not fill one of those named functions. For example, Static code analysis is required for analysis of source code or binaries without executing the application.
Answer E is incorrect because ICS/SCADA hardening means security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability. The question requires exactly 2 selections: Workstation hardening, Static code analysis. This option falls outside that required set.
Question 10
A security engineer is working through a computing-resource hardening program. The immediate requirement is deployment model in which the organization owns devices but permits limited personal use. Which choice is the best fit?
- COPE
- Sandboxing
- ICS/SCADA hardening
- Workstation hardening
Correct Answer: A
Correct Answer
Answer A is correct because COPE means a deployment model in which the organization owns devices but permits limited personal use. That makes it the best answer here; ICS/SCADA hardening addresses security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability, not the function requested in the stem.
Incorrect Answers
Answer B is incorrect because Sandboxing means execution of untrusted or risky code in an isolated restricted environment. The scenario instead requires a deployment model in which the organization owns devices but permits limited personal use, which is why COPE is the better answer; this option serves the different function defined above.
Answer C is incorrect because ICS/SCADA hardening means security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability. The concept is valid, but it does not match this stem. The required function is a deployment model in which the organization owns devices but permits limited personal use, which maps to COPE.
Answer D is incorrect because Workstation hardening means secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services. The key mismatch is functional: COPE addresses a deployment model in which the organization owns devices but permits limited personal use, the need stated by the question.
Question 11
The team is resolving a gap found during a computing-resource hardening program: it needs web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes. Which option is most appropriate?
- Router hardening
- Mobile device management (MDM)
- Workstation hardening
- Secure cookie
Correct Answer: D
Correct Answer
Answer D is correct because Secure cookie means a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes. This is the precise fit for the scenario. Router hardening serves the different purpose of secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication.
Incorrect Answers
Answer A is incorrect because Router hardening means secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication. The key mismatch is functional: Secure cookie addresses a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes, the need stated by the question.
Answer B is incorrect because Mobile device management (MDM) means centralized administration of mobile-device configuration, applications, compliance, and remote actions. The scenario instead requires a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes, which is why Secure cookie is the better answer; this option serves the different function defined above.
Answer C is incorrect because Workstation hardening means secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services. That concept can be valid in another scenario, but this question is testing a web cookie configured with protections such as Secure, HttpOnly, and appropriate SameSite attributes; Secure cookie therefore fits the requirement more directly.
Question 12
The team is resolving a gap found during a computing-resource hardening program: it needs modern Wi-Fi security standard providing stronger wireless authentication and encryption protections. Which option is most appropriate?
- BYOD
- WPA3
- IoT hardening
- RADIUS
Correct Answer: B
Correct Answer
Answer B is correct because WPA3 means a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections. The requirement maps directly to this function, whereas RADIUS is aimed at a centralized AAA protocol commonly used for enterprise network access authentication.
Incorrect Answers
Answer A is incorrect because BYOD means a deployment model in which users connect personally owned devices to organizational resources. The concept is valid, but it does not match this stem. The required function is a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections, which maps to WPA3.
Answer C is incorrect because IoT hardening means security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction. This could be appropriate elsewhere, but the required function is a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections; that makes WPA3 the precise choice.
Answer D is incorrect because RADIUS means a centralized AAA protocol commonly used for enterprise network access authentication. This could be appropriate elsewhere, but the required function is a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections; that makes WPA3 the precise choice.
Question 13
A security engineer is working through a computing-resource hardening program. The immediate requirement is centralized administration of mobile-device configuration, applications, compliance, and remote actions. Which choice is the best fit?
- WPA3
- Mobile device management (MDM)
- RADIUS
- Static code analysis
Correct Answer: B
Correct Answer
Answer B is correct because Mobile device management (MDM) means centralized administration of mobile-device configuration, applications, compliance, and remote actions. That is the function the question is testing. RADIUS would instead be used for a centralized AAA protocol commonly used for enterprise network access authentication.
Incorrect Answers
Answer A is incorrect because WPA3 means a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections. That concept can be valid in another scenario, but this question is testing centralized administration of mobile-device configuration, applications, compliance, and remote actions; Mobile device management (MDM) therefore fits the requirement more directly.
Answer C is incorrect because RADIUS means a centralized AAA protocol commonly used for enterprise network access authentication. The key mismatch is functional: Mobile device management (MDM) addresses centralized administration of mobile-device configuration, applications, compliance, and remote actions, the need stated by the question.
Answer D is incorrect because Static code analysis means analysis of source code or binaries without executing the application. The question is not asking for this function. It is testing centralized administration of mobile-device configuration, applications, compliance, and remote actions, so Mobile device management (MDM) is the stronger fit.
Question 14
The control set for a computing-resource hardening program must address both assessment of radio coverage, interference, channel use, and access-point placement and checking and constraining application input before it is used. Which TWO choices map directly to those needs? Choose TWO.
- Wireless site survey
- Code signing
- Server hardening
- Input validation
- WPA3
Correct Answers: A, D
Correct Answers
Answer A is correct because Wireless site survey means assessment of radio coverage, interference, channel use, and access-point placement. The fixed-count item needs this function in the answer set. Code signing covers digital signing of software to verify publisher identity and detect modification, a different requirement.
Answer D is correct because Input validation means checking and constraining application input before it is used. This option satisfies a specific requirement in the stem; WPA3 serves a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections and therefore is not interchangeable with it.
Incorrect Answers
Answer B is incorrect because Code signing means digital signing of software to verify publisher identity and detect modification. The fixed-count answer set is Input validation, Wireless site survey; this option does not fill one of those named functions.
Answer C is incorrect because Server hardening means secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software. The fixed-count answer set is Input validation, Wireless site survey; this option does not fill one of those named functions.
Answer E is incorrect because WPA3 means a modern Wi-Fi security standard providing stronger wireless authentication and encryption protections. The required choices are Input validation, Wireless site survey. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Question 15
An architect working on a computing-resource hardening program needs one capability that provides security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability and another that provides centralized AAA protocol commonly used for enterprise network access authentication. Which TWO selections are the best match? Choose TWO.
- CYOD
- RADIUS
- Secure baseline
- Sandboxing
- ICS/SCADA hardening
Correct Answers: B, E
Correct Answers
Answer B is correct because RADIUS means a centralized AAA protocol commonly used for enterprise network access authentication. The fixed-count item needs this function in the answer set. Sandboxing covers execution of untrusted or risky code in an isolated restricted environment, a different requirement.
Answer E is correct because ICS/SCADA hardening means security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability. This selection maps directly to one of the named needs. Sandboxing addresses execution of untrusted or risky code in an isolated restricted environment, so it does not satisfy the same slot.
Incorrect Answers
Answer A is incorrect because CYOD means a deployment model in which users choose from a list of organization-approved devices. The scenario calls for RADIUS, ICS/SCADA hardening. Selecting this option would leave one of those required functions uncovered.
Answer C is incorrect because Secure baseline means an approved minimum configuration that establishes required security settings for a class of systems. The required choices are RADIUS, ICS/SCADA hardening. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer D is incorrect because Sandboxing means execution of untrusted or risky code in an isolated restricted environment. The question requires exactly 2 selections: RADIUS, ICS/SCADA hardening. This option falls outside that required set. For example, ICS/SCADA hardening is required for security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability.
Question 16
A security engineer is working through a computing-resource hardening program. The immediate requirement is digital signing of software to verify publisher identity and detect modification. Which choice is the best fit?
- RADIUS
- Router hardening
- Server hardening
- Code signing
Correct Answer: D
Correct Answer
Answer D is correct because Code signing means digital signing of software to verify publisher identity and detect modification. This matches the requirement as written. Server hardening can be valid in another context, but it is used for secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software.
Incorrect Answers
Answer A is incorrect because RADIUS means a centralized AAA protocol commonly used for enterprise network access authentication. The scenario instead requires digital signing of software to verify publisher identity and detect modification, which is why Code signing is the better answer; this option serves the different function defined above.
Answer B is incorrect because Router hardening means secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication. The question is not asking for this function. It is testing digital signing of software to verify publisher identity and detect modification, so Code signing is the stronger fit.
Answer C is incorrect because Server hardening means secure configuration of server operating systems and services using patching, restricted roles, monitoring, and minimized software. The question is not asking for this function. It is testing digital signing of software to verify publisher identity and detect modification, so Code signing is the stronger fit.
Question 17
A design decision in a computing-resource hardening program must provide secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services. Which choice most directly satisfies that requirement?
- Workstation hardening
- IoT hardening
- Input validation
- Static code analysis
Correct Answer: A
Correct Answer
Answer A is correct because Workstation hardening means secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services. That is the function the question is testing. Static code analysis would instead be used for analysis of source code or binaries without executing the application.
Incorrect Answers
Answer B is incorrect because IoT hardening means security of connected embedded devices through credential changes, firmware updates, segmentation, and unnecessary-service reduction. The question is not asking for this function. It is testing secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services, so Workstation hardening is the stronger fit.
Answer C is incorrect because Input validation means checking and constraining application input before it is used. The concept is valid, but it does not match this stem. The required function is secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services, which maps to Workstation hardening.
Answer D is incorrect because Static code analysis means analysis of source code or binaries without executing the application. The key mismatch is functional: Workstation hardening addresses secure configuration of end-user computers through patching, least privilege, endpoint protection, and restricted services, the need stated by the question.
Question 18
As part of a computing-resource hardening program, reviewers identify a need for secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication. Which option should they select?
- Security monitoring
- Router hardening
- Input validation
- Mobile-device hardening
Correct Answer: B
Correct Answer
Answer B is correct because Router hardening means secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication. The deciding point is functional fit: this option covers the stated need, while Security monitoring addresses collection and review of telemetry from hardened systems.
Incorrect Answers
Answer A is incorrect because Security monitoring means collection and review of telemetry from hardened systems. The concept is valid, but it does not match this stem. The required function is secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication, which maps to Router hardening.
Answer C is incorrect because Input validation means checking and constraining application input before it is used. This could be appropriate elsewhere, but the required function is secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication; that makes Router hardening the precise choice.
Answer D is incorrect because Mobile-device hardening means security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy. The concept is valid, but it does not match this stem. The required function is secure configuration of routing devices by limiting management access, disabling unnecessary services, and applying strong authentication, which maps to Router hardening.
Question 19
During a computing-resource hardening program, the team has two independent requirements: (1) security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability; and (2) visual representation of wireless signal strength or coverage across a physical area. Which TWO choices best satisfy those requirements? Choose TWO.
- Wireless heat map
- Static code analysis
- Wireless site survey
- ICS/SCADA hardening
- Input validation
Correct Answers: A, D
Correct Answers
Answer A is correct because Wireless heat map means a visual representation of wireless signal strength or coverage across a physical area. It belongs in the fixed-count answer set because it covers one of the stated requirements. Static code analysis instead serves analysis of source code or binaries without executing the application and cannot replace this function.
Answer D is correct because ICS/SCADA hardening means security measures for industrial systems that emphasize safe change control, segmentation, monitoring, and availability. This selection maps directly to one of the named needs. Wireless site survey addresses assessment of radio coverage, interference, channel use, and access-point placement, so it does not satisfy the same slot.
Incorrect Answers
Answer B is incorrect because Static code analysis means analysis of source code or binaries without executing the application. The question requires exactly 2 selections: Wireless heat map, ICS/SCADA hardening. This option falls outside that required set. For example, Wireless heat map is required for a visual representation of wireless signal strength or coverage across a physical area.
Answer C is incorrect because Wireless site survey means assessment of radio coverage, interference, channel use, and access-point placement. The scenario calls for Wireless heat map, ICS/SCADA hardening. Selecting this option would leave one of those required functions uncovered.
Answer E is incorrect because Input validation means checking and constraining application input before it is used. Every answer slot must map to a stated requirement. The correct set is Wireless heat map, ICS/SCADA hardening, so this option cannot replace one of those selections.
Question 20
During a computing-resource hardening program, the team needs visual representation of wireless signal strength or coverage across a physical area. Which option best meets this requirement?
- CYOD
- Wireless site survey
- Mobile-device hardening
- Wireless heat map
Correct Answer: D
Correct Answer
Answer D is correct because Wireless heat map means a visual representation of wireless signal strength or coverage across a physical area. That makes it the best answer here; Wireless site survey addresses assessment of radio coverage, interference, channel use, and access-point placement, not the function requested in the stem.
Incorrect Answers
Answer A is incorrect because CYOD means a deployment model in which users choose from a list of organization-approved devices. The key mismatch is functional: Wireless heat map addresses a visual representation of wireless signal strength or coverage across a physical area, the need stated by the question.
Answer B is incorrect because Wireless site survey means assessment of radio coverage, interference, channel use, and access-point placement. This could be appropriate elsewhere, but the required function is a visual representation of wireless signal strength or coverage across a physical area; that makes Wireless heat map the precise choice.
Answer C is incorrect because Mobile-device hardening means security configuration of smartphones and tablets through encryption, screen locking, application control, and management policy. This could be appropriate elsewhere, but the required function is a visual representation of wireless signal strength or coverage across a physical area; that makes Wireless heat map the precise choice.
