Free Practice Questions for CompTIA DS0-001 Exam

The firewall type that allows an administrator to control traffic and make decisions based on factors such as connection information and data flow communications is stateful. A stateful firewall is a type of firewall that tracks the state of each connection and packet that passes through it, and applies rules or policies based on the context and content of the traffic. A stateful firewall can control traffic and make decisions based on factors such as source and destination IP addresses, ports, protocols, session status, application layer data, etc. The other options are either different types of firewalls or not related to firewalls at all. For example, a circuit-level firewall is a type of firewall that monitors and validates the establishment of TCP or UDP connections; a proxy firewall is a type of firewall that acts as an intermediary between the source and destination of the traffic; a packet firewall is a type of firewall that filters packets based on their header information. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.

The correct answer is C. Transpose. According to CompTIA DataSys+ objectives, spreadsheet tools are often used alongside databases for reporting, analysis, and data validation. The Transpose function is specifically designed to switch data orientation, converting rows into columns or columns into rows. This makes it the most efficient and accurate choice when an analyst needs to quickly reformat data for analysis or reporting purposes.

In practical scenarios, error reports or exported datasets may not always align with the structure required for analytical tools or pivot-style analysis. Transpose allows analysts to reshape the data without rewriting formulas or manually re-entering values. DataSys+ highlights the importance of understanding basic data manipulation techniques in spreadsheets, especially when working with imported or exported database data.

Option A, Concat, is used to combine text from multiple cells into a single cell and does not change the orientation of data. Option B, VLOOKUP, is a lookup function used to retrieve matching values from a table based on a key; it does not modify how data is arranged. Option D, Clean, is used to remove non-printable characters from text and is helpful for data cleansing, not restructuring.

Transpose is particularly useful because it preserves the original data values while changing their layout, reducing the risk of data corruption or misinterpretation. CompTIA DataSys+ emphasizes efficiency and accuracy in data handling, especially when analysts must respond quickly to reporting or troubleshooting needs.

By using Transpose, the analyst can immediately align the dataset with the required analytical format, saving time and ensuring consistency. Therefore, the spreadsheet function that best meets the requirement of switching rows to columns is Transpose, making option C the correct and fully verified answer.

The command that the database administrator should use for this task is CREATE USER. The CREATE USER command is a SQL statement that creates a new user account in a database and assigns it a username and a password. The CREATE USER command also allows the database administrator to specify other options or attributes for the user account, such as default tablespace, quota, profile, role, etc. The CREATE USER command is the first step to enable a user to authenticate to a database. The other options are either invalid or not suitable for this task. For example, INSERT USER is not a valid SQL command; ALLOW USER is not a SQL command, but a keyword used in some database systems to grant permissions to users; ALTER USER is a SQL command that modifies an existing user account, but does not create a new one. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.

The option that the administrator should implement to ensure high availability of the database is replication. Replication is a process that copies and synchronizes data from one database server (the primary or source) to one or more database servers (the secondary or target). Replication helps ensure high availability of the database by providing redundancy, fault tolerance, and load balancing. If the primary server fails, the secondary server can take over and continue to serve the data without interruption or data loss. The other options are either not related or not suitable for this purpose. For example, ETL is a process that extracts, transforms, and loads data from one source to another for analysis or reporting purposes; database dumping is a process that exports the entire content of a database to a file for backup or migration purposes; backup and restore is a process that copies and recovers data from a backup device or media in case of a disaster or corruption. References: CompTIA DataSys+ Course Outline, Domain 5.0 Business Continuity, Objective 5.3 Given a scenario, implement replication of database management systems.

The correct answer is B. Brute-force. CompTIA DataSys+ identifies brute-force attacks as a common authentication-based threat in database and system environments. A brute-force attack involves repeatedly attempting to authenticate to an account by systematically trying different credentials or repeatedly targeting known or default accounts in hopes that one attempt will succeed. The presence of multiple ongoing connection attempts in logs is a key indicator of this attack type.

In this scenario, the attacker is attempting to connect using a default account, even though it has been disabled. Default accounts are well-known targets because attackers are often aware of their usernames and may assume weak or unchanged credentials. DataSys+ emphasizes that attackers frequently attempt brute-force or password-spraying attacks against default or administrative accounts, especially when exposed services are accessible over the network. Even if the account is disabled, repeated attempts still generate log entries and clearly signal brute-force behavior.

Option A, malware, typically involves malicious software executing on a system and does not primarily manifest as repeated login attempts in authentication logs. Option C, on-path (man-in-the-middle) attacks, involve intercepting or altering network traffic between two parties and would not appear as repeated failed authentication attempts from a single source. Option D, SQL injection, targets application input fields and database queries, not authentication mechanisms tied to account logins.

CompTIA DataSys+ stresses the importance of monitoring logs for failed authentication attempts as part of intrusion detection and security auditing. It also highlights defensive controls such as account lockout policies, disabling default accounts, strong authentication mechanisms, and intrusion detection systems to mitigate brute-force attacks.

Because the defining characteristic in the scenario is repeated connection attempts against an account, the activity is best classified as a brute-force attack, making option B the correct and fully verified answer.