CompTIA SecurityX Practice Test Practice Questions

A company is adopting a SaaS collaboration platform for regulated engineering documents. The security architect must prevent the provider from decrypting document contents while preserving centralized access revocation and auditability. Which approach BEST meets these requirements?

During a ransomware incident, responders discover that the attacker has compromised a domain administrator account and is actively attempting to deploy encryption through Group Policy. Which action should the incident commander prioritize FIRST?

A security engineer needs to give a third-party support vendor temporary access to a production Kubernetes cluster. The vendor should be able to view logs only for one namespace, and the access must expire automatically after eight hours. Which configuration is MOST appropriate?

An organization is reviewing a high-impact AI system used to prioritize fraud investigations. Auditors find that model decisions cannot be reproduced because training data versions, feature sets, and model parameters were not retained. Which control would BEST address this gap?

A multinational organization wants to reduce the blast radius of a compromised workload in its hybrid environment. Workloads communicate through APIs, and the organization has reliable identities for users, devices, and services. Which design principle should the architect apply FIRST?