CompTIA Security+ Exam Pro

High costComplex configurationLack of context awarenessInability to filter traffic
The primary disadvantage of a packet-filtering firewall is its lack of context awareness. It examines each packet individually without considering its context.

A method for isolating applicationsA technique for encrypting dataA strategy for managing VM sprawlA type of hypervisor
Sandboxing is a security mechanism used to run an application in a restricted environment, or 'sandbox'. This isolation prevents the application from accessing system resources or data beyond its confines, thus limiting potential damage if the application is compromised.

To increase network speedTo reduce the number of firewalls neededTo limit the spread of threats within a networkTo make it easier to monitor network traffic
The purpose of network segmentation in secure network design is to limit the spread of threats within a network. While it can also make it easier to monitor network traffic, this is not its primary purpose. It does not increase network speed or reduce the number of firewalls needed.

DAC modelMAC modelRBAC modelABAC model
The Mandatory Access Control (MAC) model is best suited for high-security environments. It is often used in military or government settings where information classification and confidentiality are of utmost importance.

Containment, eradication, and recoveryPreparationPost-incident activityIdentification
The first phase of the incident response lifecycle is preparation. This phase involves creating an incident response plan and setting up the necessary tools and resources to handle incidents.

Identifying potential disastersCreating a disaster recovery teamConducting a business impact analysisPurchasing disaster recovery software
The first step in creating a disaster recovery plan is conducting a business impact analysis. This involves identifying critical business functions and systems, determining the impact of a disruption to these functions and systems, and establishing acceptable recovery timeframes.

To provide a standard for software developmentTo provide a guide for IT governanceTo provide a guide for managing and reducing cybersecurity riskTo provide a standard for project management
The main purpose of the NIST Cybersecurity Framework is to provide a guide for managing and reducing cybersecurity risk. It is not focused on software development, IT governance, or project management.

To document the evidence collection processTo ensure that evidence is collected in a timely mannerTo ensure that evidence is collected by authorized personnelTo document the analysis of the evidence
The purpose of a chain of custody in digital forensics is to document the evidence collection process. It helps to establish the integrity of the evidence by tracking its handling and storage from the time it is collected until the time it is presented in court.

To assign blameFor insurance purposesTo improve future response effortsTo make employees feel guilty
Documenting an incident is important for improving future response efforts. It allows organizations to learn from their mistakes and prevent similar incidents from occurring in the future.

Signature-based IDSAnomaly-based IDSBehavior-based IDSNone of the above
Anomaly-based intrusion detection systems use statistical models to detect anomalies in network traffic patterns.